Fix for deployment to handle .env parameters from github secret in ba…

…se64 encoded format

.github/workflows/ecs_deploy_docker_taskdef.yaml

@@ -36,12 +36,16 @@ on:
         required: false
         default: "staging"
         type: string
+      env_file_secret_var:
+        required: false
+        default: ""
+        type: string
+        description: "Variable name containing b64 encoded data for .env file"
     secrets:
       build_params_gh_secret_keys:
         required: false
         description: "Pass github secrets in json format for supporting docker build"
-
-
+
 jobs:
   deploy_workflow:
     name: Deploy ${{ inputs.app_name }}
@@ -81,6 +85,13 @@ jobs:
             jq -r 'to_entries | .[] | "\(.key)=\(.value)"' secrets.json >> $GITHUB_ENV
           fi
 
+      - name: Set up secrets from base64 encoded secret to .env file in code directory
+        run: |
+          if [[ -n "${{ inputs.env_file_secret_var }}" ]]; then
+            echo "Fetching and decoding .env file data from secret.${{ inputs.env_file_secret_var }}"
+            echo "${{ secrets[inputs.env_file_secret_var] }}" | base64 -d > code/.env
+          fi
+
       - name: Set variables
         run: |
           if [ "${{ inputs.taskdef_file_script }}" == "local" ]; then

.github/workflows/npm_build_deploy_default.yaml

@@ -24,6 +24,10 @@ on:
         required: false
         default: "staging"
         type: string
+      base64_encoded_env_file_data:
+        required: false
+        default: ""
+        type: string
     secrets:
       build_params_gh_secret_keys:
         required: false
@@ -61,7 +65,7 @@ jobs:
         run: |
           if [ -n "${{ secrets.build_params_gh_secret_keys }}" ]; then
             echo "${{ secrets.build_params_gh_secret_keys }}" > secrets.json
-          fi
+          fi      
 
       - name: Parse secrets and set environment variables
         run: |
@@ -70,6 +74,12 @@ jobs:
             jq -r 'to_entries | .[] | "\(.key)=\(.value)"' secrets.json >> $GITHUB_ENV
           fi
 
+      - name: Set up .env from base64 encoded data
+        run: |
+          if [ -n "${{ inputs.base64_encoded_env_file_data }}" ]; then
+            echo "${{ inputs.base64_encoded_env_file_data }}" | base64 -d > .env
+          fi
+
       - name: INSTALL
         run: npm install