Files
git.planetrenox.com/.github/workflows/deploy.yml
2025-09-11 13:28:24 -07:00

34 lines
1.2 KiB
YAML

name: deploy-yunohost-gce
on:
workflow_dispatch:
permissions:
contents: read
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Extract project_id
id: pj
run: echo "pid=$(jq -r .project_id <<< '${{ secrets.GCP_SA_KEY_JSON }}')" >> $GITHUB_OUTPUT
- uses: google-github-actions/auth@v2
with:
credentials_json: ${{ secrets.GCP_SA_KEY_JSON }}
- uses: hashicorp/setup-terraform@v3
- name: Terraform Init
working-directory: terraform
env:
TF_VAR_project_id: ${{ steps.pj.outputs.pid }}
run: terraform init -input=false
- name: Terraform Import firewall if exists
working-directory: terraform
env:
TF_VAR_project_id: ${{ steps.pj.outputs.pid }}
run: terraform import -input=false google_compute_firewall.yunohost_allow projects/${{ steps.pj.outputs.pid }}/global/firewalls/allow-yunohost >/dev/null 2>&1 || true
- name: Terraform Apply
working-directory: terraform
env:
TF_VAR_project_id: ${{ steps.pj.outputs.pid }}
run: terraform apply -auto-approve -input=false