terraform_and_deploy.yaml

name: Build & Deploy

on: [push]

jobs:
  terraform:
    name: Terraform Plan and Apply
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request' && github.event.pull_request.merged == true && contains(github.event.pull_request.changed_files, 'terraform/')

    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Set up Terraform
        uses: hashicorp/setup-terraform@v2
        with:
          terraform_version: 1.3.5

      - name: Initialize Terraform
        run: terraform init
        working-directory: terraform

      - name: Terraform Plan
        run: terraform plan -out=tfplan
        working-directory: terraform

      - name: Terraform Apply
        run: terraform apply -auto-approve tfplan
        working-directory: terraform
  rubocop:
    runs-on: ubuntu-latest
    name: RuboCop
    steps:
      - name: Checkout code
        uses: actions/checkout@v2
      - name: Run RuboCop
        uses: ./.github/actions/rubocop

  rspec:
    services:
      postgres:
        image: postgres:16.1
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: ${{ secrets.ROUTE_RATER_DATABASE_PASSWORD }}
          POSTGRES_DB: postgres
        ports:
          - 5432:5432
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5

      redis:
        image: redis
        ports:
          - 6379:6379
        options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
    runs-on: ubuntu-latest
    name: RSpec
    steps:
      - uses: actions/checkout@v3
      - name: Run RSpec
        uses: ./.github/actions/run_rspec
        with:
          ruby-version: "3.2.0"
          postgres-password: ${{ secrets.ROUTE_RATER_DATABASE_PASSWORD }}
          google-api-key: ${{ secrets.GOOGLE_API_KEY }}

  deploy:
    name: Deploy to Elastic Beanstalk
    runs-on: ubuntu-latest

    needs: [terraform, rubocop, rspec]

    if: |
      always() &&
      needs.terraform.result == 'success' || needs.terraform.result == 'skipped' &&
      needs.rubocop.result == 'success' &&
      needs.rspec.result == 'success'
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: 3.2.0

      - name: Install dependencies
        run: bundle install

      - name: Set up EB CLI
        run: |
          pip install awsebcli
          eb --version

      - name: Slack Notification - Deploy Start
        uses: rtCamp/action-slack-notify@v2
        env:
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_MESSAGE: |
            :rocket: Started deployment of ${{ github.event.pull_request.html_url }}
        with:
          status: ${{ job.status }}
          emoji: ${{ ':rocket:' }}

      - name: Deploy to Elastic Beanstalk
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_DEFAULT_REGION: "us-west-2"
        run: eb deploy prod-env

      - name: Set environment variables
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_DEFAULT_REGION: "us-west-2"
        run: |
          DB_PASSWORD=$(aws secretsmanager get-secret-value --secret-id creds --query 'SecretString' --output text | jq -r '.ROUTE_RATER_DATABASE_PASSWORD')
          GOOGLE_API_KEY=$(aws secretsmanager get-secret-value --secret-id creds --query 'SecretString' --output text | jq -r '.GOOGLE_API_KEY')
          eb setenv ROUTE_RATER_DATABASE_PASSWORD=$DB_PASSWORD GOOGLE_API_KEY=$GOOGLE_API_KEY

      - name: Slack Notification - Deploy End
        uses: rtCamp/action-slack-notify@v2
        env:
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_MESSAGE: |
            Your deployment of [${{ github.event.pull_request.title }}](${{ github.event.pull_request.html_url }})
            has ${{job.status == 'success' && 'succeeded' || 'failed' }}
        with:
          status: ${{ job.status }}
          emoji: ${{ job.status == 'success' && ':checked:' || ':error:' }}
  deploy_fail:
    name: Deploy Failed
    runs-on: ubuntu-latest
    if: jobs.deploy.status == 'failure'
    steps:
      - name: Slack Notification - Deploy Failed
        uses: rtCamp/action-slack-notify@v2
        env:
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_MESSAGE: |
            Your deployment of [${{ github.event.pull_request.title }}](${{ github.event.pull_request.html_url }})
            has failed'
        with:
          status: ${{ job.status }}
          emoji: ${{ ':error:' }}