activate staging deployment

digitalservicebund · Jan 3, 2025 · 01f66e1 · 01f66e1
1 parent 192703d
commit 01f66e1
Showing 1 changed file with 41 additions and 40 deletions.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -184,43 +184,44 @@ jobs:
         if: ${{ failure() && github.ref == 'refs/heads/main' }}
         with:
           SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
-#  deploy-staging:
-#    runs-on: ubuntu-latest
-#    if: ${{ github.ref == 'refs/heads/main' }}
-#    concurrency:
-#      group: deploy-staging
-#      cancel-in-progress: true
-#    environment: staging
-#    needs:
-#      - push-frontend-image-to-registry
-#    permissions:
-#      id-token: write # Enable OIDC for gitsign
-#    steps:
-#      - uses: chainguard-dev/actions/setup-gitsign@94389dc7faf4ef9040df90498419535e1bdcb60e
-#      - name: Deploy new images
-#        uses: digitalservicebund/argocd-deploy@4fac1bb67c92ed168f6d9b22f8779ce241a9e412 # v1.0.0
-#        with:
-#          environment: staging
-#          version: ${{ needs.push-frontend-image-to-registry.outputs.version }}
-#          deploying_repo: ris-adm-vwv-frontend
-#          infra_repo: ris-adm-vwv-infra
-#          deploy_key: ${{ secrets.DEPLOY_KEY }}
-#          app: ris-adm-vwv-staging
-#          argocd_pipeline_password: ${{ secrets.ARGOCD_PIPELINE_PASSWORD }}
-#          argocd_server: ${{ secrets.ARGOCD_SERVER }}
-#          argocd_sync_timeout: 300
-#      - name: Track deploy
-#        continue-on-error: true
-#        uses: digitalservicebund/track-deployment@5a2815e150e1268983aac5ca04c8c046ed1b614a # v1.0.0
-#        with:
-#          project: ris-adm-vwv
-#          environment: staging
-#          metrics_deployment_webhook_url: ${{ secrets.METRICS_DEPLOYMENT_WEBHOOK_URL }}
-#          metrics_webhook_token: ${{ secrets.METRICS_WEBHOOK_TOKEN }}
-#      - name: Send status to Slack
-#        # Third-party action, pin to commit SHA!
-#        # See https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions
-#        uses: digitalservicebund/notify-on-failure-gha@814d0c4b2ad6a3443e89c991f8657b10126510bf # v1.5.0
-#        if: ${{ failure() }}
-#        with:
-#          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+
+  deploy-staging:
+    runs-on: ubuntu-latest
+    if: ${{ github.ref == 'refs/heads/main' }}
+    concurrency:
+      group: deploy-staging
+      cancel-in-progress: true
+    environment: staging
+    needs:
+      - push-frontend-image-to-registry
+    permissions:
+      id-token: write # Enable OIDC for gitsign
+    steps:
+      - uses: chainguard-dev/actions/setup-gitsign@94389dc7faf4ef9040df90498419535e1bdcb60e
+      - name: Deploy new images
+        uses: digitalservicebund/argocd-deploy@4fac1bb67c92ed168f6d9b22f8779ce241a9e412 # v1.0.0
+        with:
+          environment: staging
+          version: ${{ needs.push-frontend-image-to-registry.outputs.version }}
+          deploying_repo: ris-adm-vwv-frontend
+          infra_repo: ris-adm-vwv-infra
+          deploy_key: ${{ secrets.DEPLOY_KEY }}
+          app: ris-adm-vwv-staging
+          argocd_pipeline_password: ${{ secrets.ARGOCD_PIPELINE_PASSWORD }}
+          argocd_server: ${{ secrets.ARGOCD_SERVER }}
+          argocd_sync_timeout: 300
+      - name: Track deploy
+        continue-on-error: true
+        uses: digitalservicebund/track-deployment@5a2815e150e1268983aac5ca04c8c046ed1b614a # v1.0.0
+        with:
+          project: ris-adm-vwv
+          environment: staging
+          metrics_deployment_webhook_url: ${{ secrets.METRICS_DEPLOYMENT_WEBHOOK_URL }}
+          metrics_webhook_token: ${{ secrets.METRICS_WEBHOOK_TOKEN }}
+      - name: Send status to Slack
+        # Third-party action, pin to commit SHA!
+        # See https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions
+        uses: digitalservicebund/notify-on-failure-gha@814d0c4b2ad6a3443e89c991f8657b10126510bf # v1.5.0
+        if: ${{ failure() }}
+        with:
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}