Dev Only - Build and deploy cdapp docker image #49
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dev Only - Build and deploy cdapp docker image | |
| on: | |
| workflow_dispatch: # Allows manual workflow trigger | |
| repository_dispatch: # Allows API workflow trigger | |
| types: [cdapp-frontend-dev] | |
| concurrency: | |
| group: cdapp-frontend-dev | |
| cancel-in-progress: true | |
| # Set global env variables | |
| env: | |
| AWS_REGION: eu-west-2 | |
| ECR_REPOSITORY: ${{ secrets.AWS_ACCOUNT_ID_QA }}.dkr.ecr.eu-west-2.amazonaws.com/cdapp/frontend | |
| COMMIT_HASH: ${{ github.event.client_payload.COMMIT_HASH != null && github.event.client_payload.COMMIT_HASH || github.sha }} | |
| jobs: | |
| # # Build cdapp frontend and push to AWS ECR | |
| buildAndPush: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Echo Env Vars through Context | |
| run: | | |
| echo "$GITHUB_CONTEXT" | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_QA }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_QA }} | |
| aws-region: ${{ env.AWS_REGION }} | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/amazon-ecr-login@v1 | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Checkout relevant branch | |
| run: | |
| git checkout ${{ github.event.client_payload.COMMIT_HASH != null && github.event.client_payload.COMMIT_HASH || github.sha }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| - name: Build and push | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: ${{ github.workspace }} | |
| file: ./Dockerfile | |
| push: true | |
| tags: | | |
| ${{ env.ECR_REPOSITORY }}:run-${{ github.run_number }}-dev | |
| ${{ env.ECR_REPOSITORY }}:${{ env.COMMIT_HASH }} | |
| - uses: sarisia/actions-status-discord@c193626e5ce172002b8161e116aa897de7ab5383 | |
| if: always() | |
| with: | |
| webhook: ${{ secrets.DISCORD_WEBHOOK }} | |
| title: "Build and push cdapp dev only" | |
| # Deploy cdapp frontend to DEV environment | |
| deployDEV: | |
| needs: buildAndPush | |
| runs-on: ubuntu-latest | |
| env: | |
| NAMESPACE: cdapp | |
| CLUSTER_NAME: qa-cluster | |
| ENVIRONMENT_TAG: dev | |
| REPOSITORY_NAME: cdapp/frontend | |
| steps: | |
| - name: Configure AWS credentials for ECR | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_QA }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_QA }} | |
| aws-region: ${{ env.AWS_REGION }} | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/amazon-ecr-login@v1 | |
| - name: Echo current image and tag new image | |
| run: | | |
| echo -e "Getting image info...\n" | |
| echo -e "###### Current image being used ######\n" | |
| SHA256=$(aws ecr batch-get-image --repository-name ${{ env.REPOSITORY_NAME }} --image-ids imageTag=${{ env.ENVIRONMENT_TAG }} --output json | jq '.images[].imageId.imageDigest') | |
| aws ecr batch-get-image --repository-name ${{ env.REPOSITORY_NAME }} --image-ids imageDigest=$SHA256 --output json | jq '.images[].imageId' | |
| echo -e "\n###### Tagging new image with environment tag ######" | |
| MANIFEST=$(aws ecr batch-get-image --repository-name ${{ env.REPOSITORY_NAME }} --image-ids imageTag=${{ env.COMMIT_HASH }} --output json | jq --raw-output --join-output '.images[0].imageManifest') | |
| aws ecr put-image --repository-name ${{ env.REPOSITORY_NAME }} --image-tag ${{ env.ENVIRONMENT_TAG }} --image-manifest "$MANIFEST" | |
| echo -e "\n###### New image being used ######\n" | |
| SHA256=$(aws ecr batch-get-image --repository-name ${{ env.REPOSITORY_NAME }} --image-ids imageTag=${{ env.ENVIRONMENT_TAG }} --output json | jq '.images[].imageId.imageDigest') | |
| aws ecr batch-get-image --repository-name ${{ env.REPOSITORY_NAME }} --image-ids imageDigest=$SHA256 --output json | jq '.images[].imageId' | |
| - name: Configure AWS credentials for EKS | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_QA }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_QA }} | |
| role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID_QA }}:role/eks-admin | |
| role-session-name: github-cicd | |
| role-duration-seconds: 1200 | |
| aws-region: ${{ env.AWS_REGION }} | |
| - name: Configure AWS EKS | |
| run: | | |
| aws eks --region ${{ env.AWS_REGION }} update-kubeconfig --name ${{ env.CLUSTER_NAME }} | |
| - name: Deploy to Kubernetes cluster | |
| run: | | |
| kubectl rollout restart deployment/cdapp-frontend-${{ env.ENVIRONMENT_TAG }} -n ${{ env.NAMESPACE }} | |
| - name: Validate Kubernetes deployment | |
| run: | | |
| kubectl rollout status deployment/cdapp-frontend-${{ env.ENVIRONMENT_TAG }} -n ${{ env.NAMESPACE }} | |
| - uses: sarisia/actions-status-discord@c193626e5ce172002b8161e116aa897de7ab5383 | |
| if: always() | |
| with: | |
| webhook: ${{ secrets.DISCORD_WEBHOOK }} | |
| title: "Deploy cdapp to ${{ env.ENVIRONMENT_TAG }}" |