Skip to content

Add automated manifest update jobs and set ENV to production #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Uj5Ghare merged 4 commits into from
Apr 4, 2026
Merged

Add automated manifest update jobs and set ENV to production #9

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
fc9dbfe
feat: add update-manifest jobs and set ENV to prod in all workflows
Uj5Ghare Apr 4, 2026
01c86ff
Merge branch 'env/staging' into env/preprod
Uj5Ghare Apr 4, 2026
b8b7a65
Merge branch 'env/preprod' of gh-personal:Uj5Ghare/Kops-Microservices…
Uj5Ghare Apr 4, 2026
50d64e1
feat: change workflow triggers from pull_request to push
Uj5Ghare Apr 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 39 additions & 3 deletions .github/workflows/catalogue.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
name: Shopstack DevSecOps Pipeline For Catalogue

on:
pull_request:
push:
branches:
- env/prod
paths:
Expand All @@ -18,7 +18,7 @@ permissions:

env:
PROJECT: "shopstack"
ENV: "staging"
ENV: "prod"

jobs:
build:
Expand Down Expand Up @@ -111,4 +111,40 @@ jobs:
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: ${{ matrix.component }}/Dockerfile
failure-threshold: warning
failure-threshold: warning

update-manifest:
name: "🚀 Update K8s Manifest"
runs-on: ubuntu-latest
needs: [build, image-scan, dockerfile-lint]
if: github.event_name == 'push' && github.ref == 'refs/heads/env/prod'
permissions:
contents: write # Needed to push manifest changes
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
token: ${{ secrets.GITHUB_TOKEN }}

- name: Get short SHA
id: sha
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT

- name: Update K8s manifest with new image tags
run: |
git fetch origin
git checkout origin/k8s/prod

IMAGE_TAG=${{ steps.sha.outputs.short }}
sed -i 's/tag: .*/tag: ${IMAGE_TAG}/' helm/catalogue/values.yaml

echo "✅ Updated images to tag: ${IMAGE_TAG}"
grep "tag:" helm/catalogue/values.yaml

- name: Commit and push manifest update
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add helm/catalogue/values.yaml
git diff --cached --quiet || git commit -m "ci(${{ env.ENV }}): update helm catalogue values to ${{ steps.sha.outputs.short }} [skip ci]"
git push
42 changes: 39 additions & 3 deletions .github/workflows/dispatch.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
name: Shopstack DevSecOps Pipeline For Dispatch

on:
pull_request:
push:
branches:
- env/prod
paths:
Expand All @@ -18,7 +18,7 @@ permissions:

env:
PROJECT: "shopstack"
ENV: "staging"
ENV: "prod"

jobs:
build:
Expand Down Expand Up @@ -111,4 +111,40 @@ jobs:
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: ${{ matrix.component }}/Dockerfile
failure-threshold: warning
failure-threshold: warning

update-manifest:
name: "🚀 Update K8s Manifest"
runs-on: ubuntu-latest
needs: [build, image-scan, dockerfile-lint]
if: github.event_name == 'push' && github.ref == 'refs/heads/env/prod'
permissions:
contents: write # Needed to push manifest changes
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
token: ${{ secrets.GITHUB_TOKEN }}

- name: Get short SHA
id: sha
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT

- name: Update K8s manifest with new image tags
run: |
git fetch origin
git checkout origin/k8s/prod

IMAGE_TAG=${{ steps.sha.outputs.short }}
sed -i 's/tag: .*/tag: ${IMAGE_TAG}/' helm/dispatch/values.yaml

echo "✅ Updated images to tag: ${IMAGE_TAG}"
grep "tag:" helm/dispatch/values.yaml

- name: Commit and push manifest update
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add helm/dispatch/values.yaml
git diff --cached --quiet || git commit -m "ci(${{ env.ENV }}): update helm dispatch values to ${{ steps.sha.outputs.short }} [skip ci]"
git push
42 changes: 39 additions & 3 deletions .github/workflows/mongo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
name: Shopstack DevSecOps Pipeline For Mongo

on:
pull_request:
push:
branches:
- env/prod
paths:
Expand All @@ -18,7 +18,7 @@ permissions:

env:
PROJECT: "shopstack"
ENV: "staging"
ENV: "prod"

jobs:
build:
Expand Down Expand Up @@ -111,4 +111,40 @@ jobs:
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: ${{ matrix.component }}/Dockerfile
failure-threshold: warning
failure-threshold: warning

update-manifest:
name: "🚀 Update K8s Manifest"
runs-on: ubuntu-latest
needs: [build, image-scan, dockerfile-lint]
if: github.event_name == 'push' && github.ref == 'refs/heads/env/prod'
permissions:
contents: write # Needed to push manifest changes
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
token: ${{ secrets.GITHUB_TOKEN }}

- name: Get short SHA
id: sha
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT

- name: Update K8s manifest with new image tags
run: |
git fetch origin
git checkout origin/k8s/prod

IMAGE_TAG=${{ steps.sha.outputs.short }}
sed -i 's/tag: .*/tag: ${IMAGE_TAG}/' helm/mongo/values.yaml

echo "✅ Updated images to tag: ${IMAGE_TAG}"
grep "tag:" helm/mongo/values.yaml

- name: Commit and push manifest update
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add helm/mongo/values.yaml
git diff --cached --quiet || git commit -m "ci(${{ env.ENV }}): update helm mongo values to ${{ steps.sha.outputs.short }} [skip ci]"
git push
42 changes: 39 additions & 3 deletions .github/workflows/mysql.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
name: Shopstack DevSecOps Pipeline For Mysql

on:
pull_request:
push:
branches:
- env/prod
paths:
Expand All @@ -18,7 +18,7 @@ permissions:

env:
PROJECT: "shopstack"
ENV: "staging"
ENV: "prod"

jobs:
build:
Expand Down Expand Up @@ -111,4 +111,40 @@ jobs:
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: ${{ matrix.component }}/Dockerfile
failure-threshold: warning
failure-threshold: warning

update-manifest:
name: "🚀 Update K8s Manifest"
runs-on: ubuntu-latest
needs: [build, image-scan, dockerfile-lint]
if: github.event_name == 'push' && github.ref == 'refs/heads/env/prod'
permissions:
contents: write # Needed to push manifest changes
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
token: ${{ secrets.GITHUB_TOKEN }}

- name: Get short SHA
id: sha
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT

- name: Update K8s manifest with new image tags
run: |
git fetch origin
git checkout origin/k8s/prod

IMAGE_TAG=${{ steps.sha.outputs.short }}
sed -i 's/tag: .*/tag: ${IMAGE_TAG}/' helm/mysql/values.yaml

echo "✅ Updated images to tag: ${IMAGE_TAG}"
grep "tag:" helm/mysql/values.yaml

- name: Commit and push manifest update
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add helm/mysql/values.yaml
git diff --cached --quiet || git commit -m "ci(${{ env.ENV }}): update helm mysql values to ${{ steps.sha.outputs.short }} [skip ci]"
git push
42 changes: 39 additions & 3 deletions .github/workflows/payment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
name: Shopstack DevSecOps Pipeline For Payment

on:
pull_request:
push:
branches:
- env/prod
paths:
Expand All @@ -18,7 +18,7 @@ permissions:

env:
PROJECT: "shopstack"
ENV: "staging"
ENV: "prod"

jobs:
build:
Expand Down Expand Up @@ -111,4 +111,40 @@ jobs:
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: ${{ matrix.component }}/Dockerfile
failure-threshold: warning
failure-threshold: warning

update-manifest:
name: "🚀 Update K8s Manifest"
runs-on: ubuntu-latest
needs: [build, image-scan, dockerfile-lint]
if: github.event_name == 'push' && github.ref == 'refs/heads/env/prod'
permissions:
contents: write # Needed to push manifest changes
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
token: ${{ secrets.GITHUB_TOKEN }}

- name: Get short SHA
id: sha
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT

- name: Update K8s manifest with new image tags
run: |
git fetch origin
git checkout origin/k8s/prod

IMAGE_TAG=${{ steps.sha.outputs.short }}
sed -i 's/tag: .*/tag: ${IMAGE_TAG}/' helm/payment/values.yaml

echo "✅ Updated images to tag: ${IMAGE_TAG}"
grep "tag:" helm/payment/values.yaml

- name: Commit and push manifest update
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add helm/payment/values.yaml
git diff --cached --quiet || git commit -m "ci(${{ env.ENV }}): update helm payment values to ${{ steps.sha.outputs.short }} [skip ci]"
git push
42 changes: 39 additions & 3 deletions .github/workflows/ratings.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
name: Shopstack DevSecOps Pipeline For Ratings

on:
pull_request:
push:
branches:
- env/prod
paths:
Expand All @@ -18,7 +18,7 @@ permissions:

env:
PROJECT: "shopstack"
ENV: "staging"
ENV: "prod"

jobs:
build:
Expand Down Expand Up @@ -111,4 +111,40 @@ jobs:
uses: hadolint/hadolint-action@v3.1.0
with:
dockerfile: ${{ matrix.component }}/Dockerfile
failure-threshold: warning
failure-threshold: warning

update-manifest:
name: "🚀 Update K8s Manifest"
runs-on: ubuntu-latest
needs: [build, image-scan, dockerfile-lint]
if: github.event_name == 'push' && github.ref == 'refs/heads/env/prod'
permissions:
contents: write # Needed to push manifest changes
steps:
- name: Checkout code
uses: actions/checkout@v4
with:
token: ${{ secrets.GITHUB_TOKEN }}

- name: Get short SHA
id: sha
run: echo "short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT

- name: Update K8s manifest with new image tags
run: |
git fetch origin
git checkout origin/k8s/prod

IMAGE_TAG=${{ steps.sha.outputs.short }}
sed -i 's/tag: .*/tag: ${IMAGE_TAG}/' helm/ratings/values.yaml

echo "✅ Updated images to tag: ${IMAGE_TAG}"
grep "tag:" helm/ratings/values.yaml

- name: Commit and push manifest update
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add helm/ratings/values.yaml
git diff --cached --quiet || git commit -m "ci(${{ env.ENV }}): update helm ratings values to ${{ steps.sha.outputs.short }} [skip ci]"
git push
Loading