Feature/grad2 3450 (#540)

* GRAD2-3450 - IAC for Program, Course and Rule Engine APIs

* GRAD2-3450 - IAC for Program, Course and Rule Engine APIs

* GRAD2-3450 - IAC for Program, Course and Rule Engine APIs

* GRAD2-3450 - Added workflow permissions for github token.

* GRAD2-3450 - Added workflow permissions for github token.

Author: kamal-mohammed

.github/workflows/build.from.developer.branch.deploy.to.dev.yml

@@ -12,6 +12,7 @@ env:
   BUSINESS_NAMESPACE: ${{ vars.GRAD_BUSINESS_NAMESPACE }}
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+  TARGET_ENV: dev
 
   # 🖊️ EDIT to change the image registry settings.
   # Registries such as GHCR, Quay.io, and Docker Hub are supported.

.github/workflows/build.from.main.branch.deploy.to.dev.yml

@@ -12,6 +12,7 @@ env:
   BUSINESS_NAMESPACE: ${{ vars.GRAD_BUSINESS_NAMESPACE }}
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+  TARGET_ENV: dev
 
   # 🖊️ EDIT to change the image registry settings.
   # Registries such as GHCR, Quay.io, and Docker Hub are supported.

.github/workflows/build.from.release.branch.deploy.to.dev.yml

@@ -12,6 +12,7 @@ env:
   BUSINESS_NAMESPACE: ${{ vars.GRAD_BUSINESS_NAMESPACE }}
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+  TARGET_ENV: dev
 
   # 🖊️ EDIT to change the image registry settings.
   # Registries such as GHCR, Quay.io, and Docker Hub are supported.

.github/workflows/create-clients-and-secrets.yml

@@ -8,9 +8,10 @@ env:
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
   OPENSHIFT_SERVER: ${{ vars.OPENSHIFT_SERVER }}
-  GRAD_NAMESPACE: ${{ vars.GRAD_NAMESPACE }}-${{ github.event.inputs.environment }}
+  GRAD_NAMESPACE: ${{ vars.GRAD_NAMESPACE }}
   OPENSHIFT_NAMESPACE: ${{ vars.GRAD_NAMESPACE }}-${{ github.event.inputs.environment }}
   OPENSHIFT_TOKEN: ${{ secrets.OPENSHIFT_TOKEN }}
+  TARGET_ENV: ${{ github.event.inputs.environment }}
 
 on:
   workflow_dispatch:

.github/workflows/deploy_latest_to_test.yml

@@ -12,6 +12,7 @@ env:
   BUSINESS_NAMESPACE: ${{ vars.GRAD_BUSINESS_NAMESPACE }}
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+  TARGET_ENV: test
 
   SPRING_BOOT_IMAGE_NAME: educ-rule-engine-api
 

.github/workflows/deploy_prod.yml

@@ -12,6 +12,7 @@ env:
   BUSINESS_NAMESPACE: ${{ vars.GRAD_BUSINESS_NAMESPACE }}
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+  TARGET_ENV: prod
 
   SPRING_BOOT_IMAGE_NAME: educ-rule-engine-api
 

.github/workflows/deploy_test.yml

@@ -12,6 +12,7 @@ env:
   BUSINESS_NAMESPACE: ${{ vars.GRAD_BUSINESS_NAMESPACE }}
   KEYCLOAK_URL: ${{ secrets.KEYCLOAK_URL }}
   KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+  TARGET_ENV: test
 
   SPRING_BOOT_IMAGE_NAME: educ-rule-engine-api
 

tools/config/clients-and-scopes.js

@@ -11,7 +11,7 @@ const httpsAgent = new https.Agent({ rejectUnauthorized: false }); // for self-s
 const keycloakUrl = process.env.KEYCLOAK_URL;
 const realm = process.env.KEYCLOAK_REALM;
 const openshiftApi = process.env.OPENSHIFT_SERVER;
-const gradNamespace = process.env.GRAD_NAMESPACE;
+const gradNamespace = `${process.env.GRAD_NAMESPACE}-${process.env.TARGET_ENV}`;
 const openshiftNamespace = process.env.OPENSHIFT_NAMESPACE;
 const openshiftToken = process.env.OPENSHIFT_TOKEN;
 

tools/openshift/fetch-and-create-secrets.js

@@ -6,7 +6,7 @@ const https = require('https');
 const keycloakUrl = process.env.KEYCLOAK_URL;
 const realm = process.env.KEYCLOAK_REALM;
 const openshiftApi = process.env.OPENSHIFT_SERVER;
-const gradNamespace = process.env.GRAD_NAMESPACE;
+const gradNamespace = `${process.env.GRAD_NAMESPACE}-${process.env.TARGET_ENV}`;
 const openshiftNamespace = process.env.OPENSHIFT_NAMESPACE;
 const openshiftToken = process.env.OPENSHIFT_TOKEN;