build-deploy-at.yml

name: Build, push to ghcr and deploy to AT
on: 
  push:
    branches: [main]
  workflow_dispatch:

env:
  DOTNET_VERSION: '8.0.x'    

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest

    permissions:
      contents: read
      packages: write

    steps:
     - name: Checkout
       uses: actions/checkout@v4

     - name: Setup .NET
       uses: actions/setup-dotnet@v4
       with: 
         dotnet-version: ${{ env.DOTNET_VERSION}}

     - name: Login to Github Container Registry
       uses: docker/login-action@v3
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}

     - name: Build and Push to ghcr
       uses: docker/build-push-action@v5
       with:
         push: true
         tags: ghcr.io/altinn/altinn-authentication-frontend:${{ github.sha }}
         build-args: | 
           SOURCE-REVISION_ID=${{ github.sha }}

  deploy:
    name: Deploy to AT21
    runs-on: ubuntu-latest
    environment: ${{ matrix.environment }}
    needs:
      - build

    permissions:
      id-token: write
      contents: read
      packages: read

    strategy:
      matrix:
        environment: [AT21]       

    steps:        
      - name: Checkout
        uses: actions/checkout@v4

      - name: Azure Login
        uses: azure/login@v2
        with: 
          client-id: ${{ secrets.AZURE_CLIENT_ID }}
          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: Deploy
        uses: ./.github/actions/deploy
        with:
          image-tag: ${{ github.sha }}
          resource-group: ${{ vars.CONTAINER_APP_RESOURCE_GROUP_NAME }}
          container-app: ${{ vars.CONTAINER_APP_NAME }}