feat: adds deployment action

.github/workflows/build.yml

@@ -0,0 +1,92 @@
+name: Build Image
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  setup_workflow_env:
+    runs-on: ubuntu-latest
+    environment: production
+    outputs:
+# It seems you have to specify the environment twice (passed to reusable workflow)
+# as there is no way yet to get the active environment
+      environment: production
+      image_tagged: SK-Backend
+      registry_root: ghcr.io/acdh-oeaw/
+      default_port: "5000"
+      APP_NAME: skbackend
+# This together with the branch name is also used as the namespace to deploy to
+      APP_ROOT: "/"
+      SERVICE_ID: ""
+      PUBLIC_URL: https://sk-backend.acdh-ch-dev.oeaw.ac.at
+      POSTGRES_ENABLED: "false"
+    steps:
+      - run: "/bin/true"      
+  build_and_push_to_registry:
+    runs-on: ubuntu-latest
+    needs: [setup_workflow_env]
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+        with:
+          submodules: recursive
+      -
+        name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: |
+            ${{ needs.setup_workflow_env.outputs.registry_root }}${{ needs.setup_workflow_env.outputs.image_tagged }}/${{ github.ref_name }}
+          #ghcr.io/acdh-oeaw/InTaVia-Backend test
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value={{sha}},enable={{is_default_branch}}
+      -
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+      -
+        name: Login to ghcr.io
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - 
+        name: Create build environment
+        env:
+          SECRETS_CONTEXT: ${{ toJson(secrets) }}
+        run: |
+          echo -n "$SECRETS_CONTEXT" | jq -r '[to_entries[]|select(.key|startswith("K8S_SECRET_"))]|map("\(.key|sub("K8S_SECRET_"; ""))=\(.value|tostring|@sh)")|.[]' > secrets.env
+      -        
+        name: Build and push
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          platforms: linux/amd64
+          push: true
+          secret-files: |
+            "secrets_env=./secrets.env"
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+  _3:
+      needs: [setup_workflow_env, build_and_push_to_registry]
+      uses: acdh-oeaw/gl-autodevops-minimal-port/.github/workflows/deploy.yml@main
+      secrets: inherit
+      with:
+        DOCKER_TAG: ${{ needs.setup_workflow_env.outputs.registry_root }}${{ needs.setup_workflow_env.outputs.image_tagged }}/${{ github.ref_name }}
+        APP_NAME: ${{ needs.setup_workflow_env.outputs.APP_NAME }}
+        APP_ROOT: ${{ needs.setup_workflow_env.outputs.APP_ROOT }}
+        SERVICE_ID: ${{ needs.setup_workflow_env.outputs.SERVICE_ID }}
+        PUBLIC_URL: ${{ needs.setup_workflow_env.outputs.PUBLIC_URL }}
+        POSTGRES_ENABLED: ${{ needs.setup_workflow_env.outputs.POSTGRES_ENABLED == 'true'}}
+        environment: "${{ needs.setup_workflow_env.outputs.environment}}"
+        default_port: "${{ needs.setup_workflow_env.outputs.default_port}}"

.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: release
+
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    if: ${{ !contains(github.event.head_commit.message, 'chore(release):') }}
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+    - name: Conventional Changelog Action
+      id: changelog
+      uses: TriPSs/conventional-changelog-action@v3
+      with:
+        github-token: ${{ secrets.github_token }}
+        version-file: './pyproject.toml'
+        version-path: 'tool.poetry.version'
+    - name: Create Release
+      uses: actions/create-release@v1
+      if: ${{ steps.changelog.outputs.skipped == 'false' }}
+      env:
+        GITHUB_TOKEN: ${{ secrets.github_token }}
+      with:
+        tag_name: ${{ steps.changelog.outputs.tag }}
+        release_name: ${{ steps.changelog.outputs.tag }}
+        body: ${{ steps.changelog.outputs.clean_changelog }}