chore: Automate deploy in prod with approval

pagopa · Jan 17, 2025 · 0dcde57 · 0dcde57
1 parent 30f9b8b
commit 0dcde57
Showing 1 changed file with 19 additions and 20 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -71,25 +71,24 @@ jobs:
           app-name: ${{ vars.APP_NAME }}
           image: ${{ needs.release.outputs.new-release-image }}
 
-  # TODO disabled at the moment
-  # deploy-prod:
-  #   name: Deploy PROD
-  #   runs-on: ubuntu-24.04
-  #   environment: prod
-  #   needs: [release]
-  #   if: needs.release.outputs.new-release-published == 'true'
+  deploy-prod:
+    name: Deploy PROD
+    runs-on: ubuntu-24.04
+    environment: prod
+    needs: [release, deploy-uat]
+    if: needs.release.outputs.new-release-published == 'true'
 
-  #   permissions:
-  #     id-token: write
-  #     contents: read
+    permissions:
+      id-token: write
+      contents: read
 
-  #   steps:
-  #     - name: Deploy
-  #       uses: pagopa/ict-github-actions/appservice-deploy@v1.4.3
-  #       with:
-  #         tenant-id: ${{ secrets.ARM_TENANT_ID }}
-  #         subscription-id: ${{ secrets.ARM_SUBSCRIPTION_ID }}
-  #         client-id: ${{ secrets.ARM_CLIENT_ID }}
-  #         resource-group-name: ${{ vars.RESOURCE_GROUP_NAME }}
-  #         app-name: ${{ vars.APP_NAME }}
-  #         image: ${{ needs.release.outputs.new-release-image }}
+    steps:
+      - name: Deploy
+        uses: pagopa/ict-github-actions/appservice-deploy@7b9f0300421af37c88c729b3849a80fce8820f20 # v1.5.2
+        with:
+          tenant-id: ${{ secrets.ARM_TENANT_ID }}
+          subscription-id: ${{ secrets.ARM_SUBSCRIPTION_ID }}
+          client-id: ${{ secrets.ARM_CLIENT_ID }}
+          resource-group-name: ${{ vars.RESOURCE_GROUP_NAME }}
+          app-name: ${{ vars.APP_NAME }}
+          image: ${{ needs.release.outputs.new-release-image }}