noverde
diff --git a/‎bake-apm-service-version/action.sh‎
Lines changed: 46 additions & 0 deletions b/‎bake-apm-service-version/action.sh‎
Lines changed: 46 additions & 0 deletions
diff --git a/‎bake-apm-service-version/action.yml‎
Lines changed: 29 additions & 0 deletions b/‎bake-apm-service-version/action.yml‎
Lines changed: 29 additions & 0 deletions
diff --git a/‎environment-dotnet/action.sh‎
Lines changed: 39 additions & 0 deletions b/‎environment-dotnet/action.sh‎
Lines changed: 39 additions & 0 deletions
diff --git a/‎environment-dotnet/action.yml‎
Lines changed: 23 additions & 0 deletions b/‎environment-dotnet/action.yml‎
Lines changed: 23 additions & 0 deletions
diff --git a/‎environment-test-dotnet/action.sh‎
Lines changed: 13 additions & 0 deletions b/‎environment-test-dotnet/action.sh‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎environment-test-dotnet/action.yml‎
Lines changed: 9 additions & 0 deletions b/‎environment-test-dotnet/action.yml‎
Lines changed: 9 additions & 0 deletions
@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Resolve project ID: prefer input, else gcloud config
+PROJECT_ID_RESOLVED="${PROJECT_ID:-}"
+if [[ -z "$PROJECT_ID_RESOLVED" ]]; then
+  PROJECT_ID_RESOLVED="$(gcloud config get-value project 2>/dev/null || true)"
+fi
+
+if [[ -z "$PROJECT_ID_RESOLVED" || "$PROJECT_ID_RESOLVED" == "(unset)" ]]; then
+  echo "Could not determine GCP project from gcloud config. Ensure auth step set the project, or pass project_id input."
+  exit 1
+fi
+
+if [[ -z "${GCP_REGION:-}" ]]; then
+  echo "Input gcp_region is required"
+  exit 1
+fi
+
+if [[ -z "${REPOSITORY_NAME:-}" ]]; then
+  echo "Input repository_name is required"
+  exit 1
+fi
+
+if [[ -z "${TAG_VERSION:-}" ]]; then
+  echo "Input tag_version is required"
+  exit 1
+fi
+
+IMAGE_URL="${GCP_REGION}-docker.pkg.dev/${PROJECT_ID_RESOLVED}/${PROJECT_ID_RESOLVED}/${REPOSITORY_NAME}:${GITHUB_SHA}"
+TMPDIR="$(mktemp -d)"
+trap 'rm -rf "$TMPDIR"' EXIT
+
+echo "Baking ELASTIC_APM_SERVICE_VERSION into image: $IMAGE_URL"
+
+# Build a tiny wrapper image setting ELASTIC_APM_SERVICE_VERSION, using the resolved base image
+cat > "$TMPDIR/Dockerfile" << EOF
+FROM ${IMAGE_URL}
+ENV ELASTIC_APM_SERVICE_VERSION=${TAG_VERSION}
+EOF
+
+# Build and push to the same tag so Terraform deploys this exact image
+gcloud builds submit --tag "$IMAGE_URL" "$TMPDIR"
+
+echo "Successfully built and pushed: $IMAGE_URL"
+
@@ -0,0 +1,29 @@
+name: Bake APM Service Version
+description: Build and push an image that sets ELASTIC_APM_SERVICE_VERSION using Cloud Build
+
+inputs:
+  gcp_region:
+    required: true
+    description: GCP region, e.g., us-central1
+  repository_name:
+    required: true
+    description: Artifact Registry repository name
+  tag_version:
+    required: true
+    description: Value for ELASTIC_APM_SERVICE_VERSION
+  project_id:
+    required: false
+    description: Optional GCP project ID (overrides gcloud config)
+
+runs:
+  using: composite
+  steps:
+    - name: Bake ELASTIC_APM_SERVICE_VERSION into image tag
+      shell: bash
+      run: ${{ github.action_path }}/action.sh
+      env:
+        GCP_REGION: ${{ inputs.gcp_region }}
+        REPOSITORY_NAME: ${{ inputs.repository_name }}
+        TAG_VERSION: ${{ inputs.tag_version }}
+        PROJECT_ID: ${{ inputs.project_id }}
+
@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+
+if [ "$GITHUB_REF_NAME" = 'main' ]; then
+    ENVIRONMENT='prd'
+    JWT_JWKS_PATH="https://api.dotz.com.br/accounts/api/default/"
+elif [ "$GITHUB_REF_NAME" = 'staging' ]; then
+    ENVIRONMENT='uat'
+    JWT_JWKS_PATH="https://uat.dotznext.com/accounts/api/default/"
+elif [ "$GITHUB_REF_NAME" = 'qa' ]; then
+    ENVIRONMENT='uat'
+    JWT_JWKS_PATH="https://uat.dotznext.com/accounts/api/default/"
+else
+    ENVIRONMENT='dev'
+    JWT_JWKS_PATH="https://uat.dotznext.com/accounts/api/default/"
+fi
+
+{
+    echo ""
+    if ! [ "$ENVIRONMENT" = "dev" ]; then
+        echo "ELASTIC_APM_ENABLED: 'true'"
+    fi
+    echo "JWT_JWKS_PATH: '$JWT_JWKS_PATH'"
+    echo "JKS_SAFE_IPS: '$JKS_SAFE_IPS'"
+    echo "JKS_GOOGLE_PROJECTID: '$GOOGLE_PROJECTID'"
+    echo "ELASTIC_APM_SERVER_URL: '$ELASTIC_APM_SERVER_URL'"
+} > tmpfile
+
+cat ./envs/env-$ENVIRONMENT.yaml tmpfile > merged_temp.yaml
+awk '
+  BEGIN { FS=": " }
+  !/^[[:space:]]*$/ && !/^#/ {
+    key = $1
+    if (!seen[key]) {
+      print
+      seen[key] = 1
+    }
+  }
+' merged_temp.yaml > ./envs/env-$ENVIRONMENT.yaml
+rm tmpfile merged_temp.yaml
@@ -0,0 +1,23 @@
+name: Create Env
+description: Create Env
+
+inputs:
+  ref_name:
+    required: true
+    description: ref_name
+  project_id:
+    required: true
+    description: project_id
+  safe_ips:
+    required: true
+    description: safe_ips
+runs:
+  using: composite
+  steps:
+    - name: Create Env
+      shell: bash
+      run: ${{ github.action_path }}/action.sh
+      env:
+        GITHUB_REF_NAME: ${{ inputs.ref_name }}
+        GOOGLE_PROJECTID: ${{ inputs.project_id}}
+        JKS_SAFE_IPS: ${{ inputs.safe_ips }}
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+FILE=./envs/env-dev.yaml
+while IFS= read -r line
+do
+  if [[ ! $line =~ ^# ]] && [[ $line =~ [^[:space:]] ]]
+  then
+    IFS=":" read -r key value <<< "$line"
+    key=$(echo "$key" | xargs)
+    value=$(echo "$value" | xargs)
+    echo "$key=$value" >> "$GITHUB_ENV"
+  fi
+done < "$FILE"
@@ -0,0 +1,9 @@
+name: Create Env
+description: Create Env
+
+runs:
+  using: composite
+  steps:
+    - name: Create Env Test
+      shell: bash
+      run: ${{ github.action_path }}/action.sh