main.yaml

name: main
on:
  push:
    branches:
      - master
jobs:
  build:
    name: Build and push
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
    strategy:
      matrix:
        module:
          - azure
          - idporten
          - maskinporten
        include:
          - module: azure
            token-generator: true
          - module: idporten
            token-generator: true
    steps:
      - name: Checkout latest code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
      - name: Set up JDK 21
        uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # ratchet:actions/setup-java@v4
        with:
          java-version: '21'
          distribution: 'temurin'
          cache: 'gradle'
      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@473878a77f1b98e2b5ac4af93489d1656a80a5ed # ratchet:gradle/actions/setup-gradle@v4
      - name: Generate and submit dependency graph
        uses: gradle/actions/dependency-submission@473878a77f1b98e2b5ac4af93489d1656a80a5ed # ratchet:gradle/actions/dependency-submission@v4
      - name: Build with Gradle
        run: ./gradlew clean wonderwalled-${{ matrix.module }}:build wonderwalled-${{ matrix.module }}:shadowJar
      - uses: nais/platform-build-push-sign@main # ratchet:exclude
        id: build_push_sign
        with:
          name: wonderwalled-${{ matrix.module }}
          context: ./wonderwalled-${{ matrix.module }}
          dockerfile: ./wonderwalled-${{ matrix.module }}/Dockerfile
          google_service_account: gh-wonderwalled
          multi-platform: true
          push: true
          workload_identity_provider: ${{ secrets.NAIS_IO_WORKLOAD_IDENTITY_PROVIDER }}
      - uses: nais/deploy/actions/deploy@v2 # ratchet:exclude
        env:
          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
          CLUSTER: dev-gcp
          RESOURCE: .nais/${{ matrix.module }}.yaml
          IMAGE: ${{ steps.build_push_sign.outputs.tag }}
      - uses: nais/deploy/actions/deploy@v2 # ratchet:exclude
        if: matrix.token-generator
        env:
          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
          CLUSTER: dev-gcp
          RESOURCE: .nais/${{ matrix.module }}-token-generator.yaml
          IMAGE: ${{ steps.build_push_sign.outputs.tag }}