deploying

Author: halekammoun

.github/workflows/secured-CICD.yml

@@ -105,9 +105,29 @@ jobs:
           target: http://${{ env.container_ip }}:8000
           artifact_name: "zap-alerts"
       - name: Verify ZAP Alerts File Generation
-        run: ls -l
+        run: ls -l | grep report
       - name: Upload ZAP Alerts as Artifact
         uses: actions/upload-artifact@v4
         with:
             name: zap-alerts
-            path: ./report_html.html
+            path: ./report_html.html
+deploy-to-ec2:
+  runs-on: ubuntu-latest
+  needs: build-trivy-scan-and-push
+  steps:
+    - name: Checkout code
+      uses: actions/checkout@v2
+    - name: Convert Docker Compose to Kubernetes manifests
+      run: kompose convert --out k8s-manifests
+    - name: Configure SSH for EC2
+      run: |
+        echo "${{ secrets.EC2_PRIVATE_KEY }}" > ec2_key.pem
+        chmod 600 ec2_key.pem
+        ssh -o StrictHostKeyChecking=no -i ec2_key.pem ubuntu@${{ secrets.EC2_HOST }} 'echo Connection Successful'
+    - name: Deploy Kubernetes manifests to EC2
+      run: |
+        scp -o StrictHostKeyChecking=no -i ec2_key.pem k8s-manifests/* ubuntu@${{ secrets.EC2_HOST }}:/home/ubuntu/
+        ssh -o StrictHostKeyChecking=no -i ec2_key.pem ubuntu@${{ secrets.EC2_HOST }} << EOF
+        kubectl apply -f /home/ubuntu/
+        kubectl get pods
+        EOF