argonaut-preprod-testnewuibs.yaml

name: "Deploy testnewuibs - preprod"

on:
  push:
    branches:
      - main
    paths:
      - "**"
      - .github/workflows/argonaut-preprod-testnewuibs.yaml
      - Dockerfile
      - .art/argonaut-preprod-preprod-testnewuibs.yaml
    tags:
      - "v*" # Push events to matching v*, i.e. v1.0, v20.15.10
  workflow_dispatch:

jobs:
  build:
    environment:
      name: preprod

    runs-on: warp-ubuntu-latest-x64-4x
    name: Build and Push Img
    steps:
      - name: Get the version
        id: get_version
        run: echo ::set-output name=VERSION::${GITHUB_REF#refs/tags/}
      - name: Fetch repo
        uses: actions/checkout@v2
        with:
          submodules: "recursive"
      - name: Get Short SHA
        id: get_sha
        run: echo ::set-output name=SHA_SHORT::$(git rev-parse --short HEAD)
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v1
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v1
      - name: Download art
        run: |
          curl --silent https://github.com/argonautdev/public/releases/latest/download/art-linux -L -o art
          chmod +x ./art
          mv ./art /usr/local/bin/art
      - name: Fetch BuildTime Secrets
        run: |
          art configure --key ${{ secrets.argonautdev_ART_KEY }} --secret ${{ secrets.argonautdev_ART_SECRET }}
          art app envvars get -f .art/argonaut-preprod-preprod-testnewuibs.yaml \
            --set appName="testnewuibs" \
            --set argonaut.env="preprod" \
            --set argonaut.region="us-east-2" \
            --set argonaut.cluster="preprod" \
            --set argonaut.serviceType="stateless" \
            --set argonaut.imageRegistry="ecr" \
            --type buildtime \
            --format dotenv > art-build-secrets.env
          echo 'ART_BUILD_SECRETS_FILE<<EOF' >> $GITHUB_ENV
          cat art-build-secrets.env >> $GITHUB_ENV
          echo 'EOF' >> $GITHUB_ENV
      - name: Build Image
        uses: docker/build-push-action@v2
        id: build
        with:
          context: .
          file: ./Dockerfile
          push: false
          tags: 170982004044.dkr.ecr.us-east-2.amazonaws.com/argonaut/testnewuibs:${{ steps.get_sha.outputs.SHA_SHORT }}
          build-args: |
            ${{ env.ART_BUILD_SECRETS_FILE }}
          outputs: type=docker,dest=image.tar

      - name: Set AWS Credentials via art
        run: |
          art configure generate-aws-credentials >> credentials.json
          echo "AWS_ACCESS_KEY_ID=$(cat credentials.json | jq --raw-output '.accessKeyId')" >> $GITHUB_ENV
          echo "AWS_SECRET_ACCESS_KEY=$(cat credentials.json | jq --raw-output '.secretAccessKey')" >> $GITHUB_ENV
          echo "AWS_SESSION_TOKEN=$(cat credentials.json | jq --raw-output '.sessionToken')" >> $GITHUB_ENV
          echo "AWS_ACCOUNT_ID=$(cat credentials.json | jq --raw-output '.accountId')" >> $GITHUB_ENV
          echo "AWS_REGION=$(cat credentials.json | jq --raw-output '.region')" >> $GITHUB_ENV

      - name: Push to ecr
        uses: argonautdev/aws-ecr-action@v4.1.1
        id: push_to_ecr
        with:
          access_key_id: ${{ env.AWS_ACCESS_KEY_ID }}
          secret_access_key: ${{ env.AWS_SECRET_ACCESS_KEY }}
          account_id: ${{ env.AWS_ACCOUNT_ID }}
          repo: argonaut/testnewuibs
          region: us-east-2
          tags: ${{ steps.get_sha.outputs.SHA_SHORT }}
          create_repo: true
          image_scanning_configuration: true
          docker_image_path: image.tar

  deploy:
    environment:
      name: preprod

    runs-on: ubuntu-latest
    name: Deploy to Argonaut
    needs: build
    steps:
      - name: Fetch repo
        uses: actions/checkout@v2
      - name: Fetch branch name
        shell: bash
        run: echo ::set-output name=BRANCH_NAME::${GITHUB_REF#refs/heads/}
        id: get_branch_name
      - name: Get Short SHA
        id: get_sha
        run: echo ::set-output name=SHA_SHORT::$(git rev-parse --short HEAD)
      - name: Download art
        run: curl --silent https://github.com/argonautdev/public/releases/latest/download/art-linux -L -o art
      - name: Configure art
        run: |
          chmod +x ./art
          sudo mv ./art /usr/local/bin/art
          art configure --key ${{ secrets.argonautdev_ART_KEY }} --secret ${{ secrets.argonautdev_ART_SECRET }}
          art app deploy -f .art/argonaut-preprod-preprod-testnewuibs.yaml \
            --set image="170982004044.dkr.ecr.us-east-2.amazonaws.com/argonaut/testnewuibs" \
            --set 'labels.argonaut\.dev/git-provider'='github' \
            --set  argonaut.git-provider='github' \
            --set  imageTag="${{ steps.get_sha.outputs.SHA_SHORT }}" \
            --set appName="testnewuibs" \
            --set argonaut.env="preprod" \
            --set argonaut.region="us-east-2" \
            --set argonaut.cluster="preprod" \
            --set argonaut.serviceType="stateless" \
            --set argonaut.imageRegistry="ecr"