GA: Tar i bruk ny rutine for deploy, codeql og autotest

Author: espenwaaga

.github/dependabot.yml

@@ -1,10 +1,10 @@
 version: 2
 registries:
-  fp-felles: # Gir tilgang til registre innad i nav med fp-felles som inngang (PATen bestemmer)
+  maven-github:
     type: maven-repository
     url: https://maven.pkg.github.com/navikt/fp-felles
     username: x-access-token
-    password: ${{ secrets.PAT }}
+    password: ${{ secrets.READER_TOKEN }}
 
 updates:
   - package-ecosystem: github-actions
@@ -15,7 +15,7 @@ updates:
   - package-ecosystem: maven
     directory: "/"
     registries:
-      - fp-felles
+      - maven-github
     schedule:
       interval: daily
     open-pull-requests-limit: 20

.github/workflows/build.yml

@@ -30,61 +30,75 @@ jobs:
       build-image: ${{ github.ref_name == 'master' }} # default: true
       push-image: ${{ github.ref_name == 'master' }} # default: false
     secrets: inherit
+  
+  release-drafter:
+    name: Update
+    if: github.ref_name == 'master'
+    needs: build-app
+    uses: navikt/fp-gha-workflows/.github/workflows/release-drafter.yml@main
+    secrets: inherit
 
-  create-issue:
-    name: Issues
+  trigger-autotest-k9:
+    name: Autotest K9
     if: github.ref_name == 'master'
     needs: build-app
-    uses: navikt/fp-gha-workflows/.github/workflows/issues.yml@main
+    uses: navikt/fp-gha-workflows/.github/workflows/autotest.yml@main
     with:
       build-version: ${{ needs.build-app.outputs.build-version }}
+      test-repo: 'k9-verdikjede' # default: fpsak-autotest
+      test-workflow: 'build.yml' # default: trigger.yml
     secrets: inherit
 
-  promote-dev:
-    name: Deploy
+  fpsak-tester:
+    name: Fpsak tester
     if: github.ref_name == 'master'
-    needs: [ build-app, create-issue ]
-    uses: navikt/fp-gha-workflows/.github/workflows/deploy-app.yml@main
+    needs: build-app
+    uses: navikt/fp-autotest/.github/workflows/autotest.yml@master
     with:
-      issue-number: ${{ needs.create-issue.outputs.issue-number }}
-      environment: dev
-      platform: fss
+      build-version: ${{ needs.build-app.outputs.build-version }}
+      test-suite: fpsak
     secrets: inherit
-
-  trigger-autotest-fp:
-    name: Autotest FP
+    
+  verdikjede-tester:
+    name: Verdikjedetester
     if: github.ref_name == 'master'
-    needs: [ build-app, create-issue ]
-    uses: navikt/fp-gha-workflows/.github/workflows/autotest.yml@main
+    needs: build-app
+    uses: navikt/fp-autotest/.github/workflows/autotest.yml@master
     with:
       build-version: ${{ needs.build-app.outputs.build-version }}
-      issue-number: ${{ needs.create-issue.outputs.issue-number }}
+      test-suite: verdikjede
     secrets: inherit
 
-  trigger-autotest-k9:
-    name: Autotest K9
-    if: github.ref_name == 'master'
-    needs: [ build-app, create-issue ]
-    uses: navikt/fp-gha-workflows/.github/workflows/autotest.yml@main
+  notify:
+    name: Notify
+    if: github.ref_name == 'master' && (success() || failure())
+    needs: [build-app, fpsak-tester, verdikjede-tester]
+    uses: navikt/fp-autotest/.github/workflows/report-and-notify.yml@autotester
     with:
+      fpsak: ${{ needs.fpsak-tester.outputs.resultat }}
+      verdikjede: ${{ needs.verdikjede-tester.outputs.resultat }}
       build-version: ${{ needs.build-app.outputs.build-version }}
-      issue-number: ${{ needs.create-issue.outputs.issue-number }}
-      test-repo: 'k9-verdikjede' # default: fpsak-autotest
-      test-workflow: 'build.yml' # default: trigger.yml
     secrets: inherit
 
-  release-drafter:
-    name: Update
+  deploy-dev:
+    name: Deploy dev
     if: github.ref_name == 'master'
-    needs: build-app
-    uses: navikt/fp-gha-workflows/.github/workflows/release-drafter.yml@main
+    needs: [build-app, fpsak-tester, verdikjede-tester]
+    uses: navikt/fp-gha-workflows/.github/workflows/deploy.yml@main
+    with:
+      image: ghcr.io/${{ github.repository }}:${{ needs.build-app.outputs.build-version }}
+      cluster: dev-fss
     secrets: inherit
 
-  snyk:
-    name: Snyk
-    needs: build-app
-    uses: navikt/fp-gha-workflows/.github/workflows/snyk.yml@main
+  deploy-prod:
+    name: Deploy prod
+    if: github.ref_name == 'master'
+    needs: [build-app, fpsak-tester, verdikjede-tester, deploy-dev]
+    uses: navikt/fp-gha-workflows/.github/workflows/deploy.yml@main
     with:
-      build-version: ${{ needs.build-app.outputs.build-version }}
+      image: ghcr.io/${{ github.repository }}:${{ needs.build-app.outputs.build-version }}
+      cluster: prod-fss
     secrets: inherit
 
+
+

.github/workflows/codeql.yml

@@ -0,0 +1,19 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+  schedule:
+    - cron: '0 0 * * 0,4'
+
+jobs:
+  codeql:
+   name: CodeQl
+   permissions:
+     actions: read
+     contents: read
+     security-events: write
+   uses: navikt/fp-gha-workflows/.github/workflows/codeql.yml@main
+   secrets: inherit

.github/workflows/deploy-manuelt.yml

@@ -0,0 +1,24 @@
+name: Deploy manuelt
+on:
+  workflow_dispatch:
+    inputs:
+      image:
+        required: true
+        type: string
+        description: 'Image tag to deploy (example 2023.03.10.080433-f821119)'
+      environment:
+        required: true
+        type: choice
+        description: 'The environment to deployed to (dev|prod)'
+        options:
+          - dev
+          - prod
+
+jobs:
+  deploy:
+    name: Deploy dev
+    uses: navikt/fp-gha-workflows/.github/workflows/deploy.yml@main
+    with:
+      image: ghcr.io/${{ github.repository }}:${{ inputs.image }}
+      cluster: ${{ inputs.environment }}-fss
+    secrets: inherit