Skip to content

Commit

Permalink
Workflow file for Sentinel-Deploy
Browse files Browse the repository at this point in the history
  • Loading branch information
azure-sentinel-canary[bot] authored Oct 17, 2023
1 parent f5ac01a commit 7f433eb
Showing 1 changed file with 81 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,81 @@
name: Deploy Content to luna-west-central-us [84fa3cb5-fe37-41fc-9614-74f4ffcc2504]
# Note: This workflow will deploy everything in the root directory.
# To deploy content only from a specific path (for example SentinelContent):
# 1. Add the target path to the "paths" property like such
# paths:
# - 'SentinelContent/**'
# - '!.github/workflows/**'
# - '.github/workflows/sentinel-deploy-84fa3cb5-fe37-41fc-9614-74f4ffcc2504.yml'
# 2. Append the path to the directory environment variable below
# directory: '${{ github.workspace }}/SentinelContent'

on:
push:
branches: [ patch-1 ]
paths:
- '**'
- '!.github/workflows/**' # this filter prevents other workflow changes from triggering this workflow
- '.github/workflows/sentinel-deploy-84fa3cb5-fe37-41fc-9614-74f4ffcc2504.yml'

jobs:
deploy-content:
runs-on: windows-latest
env:
resourceGroupName: 'luna-west-cental-us'
workspaceName: 'luna-west-central-us'
workspaceId: '6ce1cd18-35af-48e4-ae9f-8e1db4caa0fe'
directory: '${{ github.workspace }}'
cloudEnv: 'AzureCloud'
creds: ${{ secrets.AZURE_SENTINEL_CREDENTIALS_84fa3cb5fe3741fc961474f4ffcc2504 }}
contentTypes: 'AnalyticsRule,AutomationRule,HuntingQuery,Parser,Playbook,Workbook'
branch: 'patch-1'
sourceControlId: '84fa3cb5-fe37-41fc-9614-74f4ffcc2504'
rootDirectory: '${{ github.workspace }}'
githubAuthToken: ${{ secrets.GITHUB_TOKEN }}
smartDeployment: 'true'

steps:
- name: Login to Azure (Attempt 1)
continue-on-error: true
id: login1
uses: azure/login@v1
if: ${{ env.cloudEnv == 'AzureCloud' }}
with:
creds: ${{ secrets.AZURE_SENTINEL_CREDENTIALS_84fa3cb5fe3741fc961474f4ffcc2504 }}
enable-AzPSSession: true

- name: Wait 30 seconds if login attempt 1 failed
if: ${{ env.cloudEnv == 'AzureCloud' && steps.login1.outcome=='failure' }}
run: powershell Start-Sleep -s 30

- name: Login to Azure (Attempt 2)
continue-on-error: true
id: login2
uses: azure/login@v1
if: ${{ env.cloudEnv == 'AzureCloud' && steps.login1.outcome=='failure' }}
with:
creds: ${{ secrets.AZURE_SENTINEL_CREDENTIALS_84fa3cb5fe3741fc961474f4ffcc2504 }}
enable-AzPSSession: true

- name: Wait 30 seconds if login attempt 2 failed
if: ${{ env.cloudEnv == 'AzureCloud' && steps.login2.outcome=='failure' }}
run: powershell Start-Sleep -s 30

- name: Login to Azure (Attempt 3)
continue-on-error: false
id: login3
uses: azure/login@v1
if: ${{ env.cloudEnv == 'AzureCloud' && steps.login2.outcome=='failure' }}
with:
creds: ${{ secrets.AZURE_SENTINEL_CREDENTIALS_84fa3cb5fe3741fc961474f4ffcc2504 }}
enable-AzPSSession: true

- name: Checkout
uses: actions/checkout@v3

- name: Deploy Content to Azure Sentinel
uses: azure/powershell@v1
with:
azPSVersion: 'latest'
inlineScript: |
${{ github.workspace }}//.github/workflows/azure-sentinel-deploy-84fa3cb5-fe37-41fc-9614-74f4ffcc2504.ps1

0 comments on commit 7f433eb

Please sign in to comment.