Deploying v0.1.9 to prod #25
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Prod | |
| run-name: Deploying ${{ github.event.inputs.releaseTag }} to prod | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| releaseTag: | |
| description: 'Tag of version to be promoted to prod' | |
| required: true | |
| env: | |
| TF_VERSION: 0.14.7 | |
| TG_VERSION: 0.37.1 | |
| TG_SRC_PATH: terraform | |
| TFC_WORKSPACE: prod | |
| TARGET_ENV: prod | |
| GIT_BRANCH: main | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| ci: | |
| name: Push to AWS Lambda | |
| runs-on: ubuntu-latest | |
| environment: prod | |
| strategy: | |
| matrix: | |
| node-version: [18.x] | |
| steps: | |
| - name: Attempt to checkout tag | |
| uses: actions/checkout@v3 | |
| with: | |
| ref: ${{ github.event.inputs.releaseTag }} | |
| - name: Tag not found | |
| if: ${{ failure() }} | |
| run: | | |
| echo "::error::Git Tag not found, please double check input" | |
| exit 1 | |
| ### Install if no cache exists ### | |
| - name: Setup node | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'yarn' | |
| - run: yarn install --silent --frozen-lockfile | |
| ### Build if no cache exists ### | |
| - name: Cache Build | |
| id: cache-build | |
| uses: actions/cache@v3 | |
| with: | |
| path: | | |
| **/terraform/src/artifacts | |
| key: ${{ github.sha }}-artifacts | |
| - name: Run Build | |
| if: steps.cache-build.outputs.cache-hit != 'true' | |
| run: yarn build-ci | |
| ### Get environment variables from AWS Parameter Store ### | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v3 | |
| with: | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| role-to-assume: ${{ vars.AWS_ROLE_ARN_TO_USE }} | |
| role-duration-seconds: 900 | |
| role-session-name: parks-ar-api-sandbox-gh-action | |
| role-skip-session-tagging: true | |
| ### Run Terragrunt ### | |
| - name: Setup terraform | |
| uses: hashicorp/setup-terraform@v2 | |
| with: | |
| terraform_version: ${{ env.TF_VERSION }} | |
| - name: Setup Terragrunt | |
| uses: autero1/action-terragrunt@v1.3.0 | |
| with: | |
| terragrunt_version: ${{ env.TG_VERSION }} | |
| - name: Terragrunt Apply | |
| working-directory: ${{ env.TG_SRC_PATH }}/${{ env.TFC_WORKSPACE }} | |
| env: | |
| aws_region: ${{ secrets.AWS_REGION }} | |
| run: terragrunt apply -auto-approve --terragrunt-non-interactive -var target_aws_account_id=${{ vars.ACCOUNT_ID }} -var target_env=prod | |
| alert-if-failure: | |
| if: ${{ always() && (needs.ci.result=='failure')}} | |
| runs-on: ubuntu-latest | |
| needs: [ci] | |
| steps: | |
| - name: Send alert if building api-prod fails. | |
| id: failure_alert | |
| run: | | |
| curl -X POST -H 'Content-Type: application/json' --data '{"workflow":"${{github.workflow}}","repo":"${{github.repository}}"}' https://chat.developer.gov.bc.ca/hooks/${{ secrets.ROCKETCHAT_TOKEN }} |