Working version of the production demo server #65

	---
	name: Deploy to AKS

	on:
	push:
	branches:
	- production
	- staging
	workflow_dispatch:

	# OIDC token being allowed be generated
	permissions:
	id-token: write
	contents: read

	jobs:
	build-and-deploy:
	runs-on: ubuntu-latest
	# production if is main branch, staging if it is staging branch
	environment: ${{ github.ref == 'refs/heads/production' && 'production' \|\| 'staging' }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Azure Login
	uses: azure/login@v1
	with:
	client-id: ${{ secrets.AZURE_CLIENT_ID }}
	tenant-id: ${{ secrets.AZURE_TENANT_ID }}
	subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

	- name: Setup kubectl
	uses: azure/setup-kubectl@v3
	with:
	version: 'latest'

	- name: Setup Helm
	uses: azure/setup-helm@v3
	with:
	version: 'latest'
	token: ${{ secrets.GITHUB_TOKEN }}

	- name: Install tool for rendering templates
	run: \|
	python3 -m pip install -r requirements.txt

	- name: Render values.yaml
	run: \|
	jinja2 --format=env basehub/values.yaml.j2 > basehub/values.yaml
	env:
	OAUTH_CLIENT_ID: ${{ secrets.OAUTH_CLIENT_ID }}
	OAUTH_CLIENT_SECRET: ${{ secrets.OAUTH_CLIENT_SECRET }}
	OAUTH_CALLBACK_URL: ${{ secrets.OAUTH_CALLBACK_URL }}
	K8S_NAMESPACE: ${{ vars.K8S_NAMESPACE }}

	- name: Connect to AKS
	run: az aks get-credentials --resource-group ${{ vars.AZURE_RESOURCE_GROUP }} --name ${{ vars.AZURE_KUBERNETES_CLUSTER }}

	- name: Deploy to AKS
	run: \|
	./deploy.sh
	env:
	K8S_NAMESPACE: ${{ vars.K8S_NAMESPACE }}

	- name: Logout of Azure
	run: az logout

Provide feedback