Zeva new-pipeline Prod CI #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## For each release, the value of workflow name, branches and VERSION need to be adjusted accordingly | |
| name: Zeva new-pipeline Prod CI | |
| on: | |
| workflow_dispatch: | |
| env: | |
| GIT_URL: https://github.com/bcgov/zeva.git | |
| TEST_NAMESPACE: ${{ secrets.OPENSHIFT_NAMESPACE_PLATE }}-test | |
| PROD_NAMESPACE: ${{ secrets.OPENSHIFT_NAMESPACE_PLATE }}-prod | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| get-build-suffix: | |
| name: Find Test deployment build suffix | |
| runs-on: ubuntu-latest | |
| outputs: | |
| output1: ${{ steps.get-build-suffix.outputs.BUILD_SUFFIX }} | |
| steps: | |
| - name: Log in to Openshift | |
| uses: redhat-actions/[email protected] | |
| with: | |
| openshift_server_url: ${{ secrets.OPENSHIFT_SERVER }} | |
| openshift_token: ${{ secrets.OPENSHIFT_TOKEN }} | |
| insecure_skip_tls_verify: true | |
| namespace: ${{ env.DEV_NAMESPACE }} | |
| - id: get-build-suffix | |
| run: | | |
| build_suffix=$(oc -n ${{ env.DEV_NAMESPACE }} describe deployment/zeva-test-frontend | grep Image | awk -F ':' '{print $NF}') | |
| echo "Validating $build_suffix" | |
| if [[ "$build_suffix" =~ ^[0-9]+\.[0-9]+\.[0-9]+-[0-9]{14}$ ]]; then | |
| echo "Build suffix $build_suffix format is valid." | |
| echo "BUILD_SUFFIX=$build_suffix" >> $GITHUB_OUTPUT | |
| else | |
| echo "Error: Build suffix $build_suffix format is invalid!" | |
| exit 1 | |
| fi | |
| deploy-on-prod: | |
| name: Deploy ZEVA on Prod | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| needs: [get-build-suffix] | |
| env: | |
| BUILD_SUFFIX: ${{ needs.get-build-suffix.outputs.output1 }} | |
| steps: | |
| - name: Ask for approval for ZEVA ${{ env.BUILD_SUFFIX }} Prod deployment | |
| uses: trstringer/[email protected] | |
| with: | |
| secret: ${{ github.TOKEN }} | |
| approvers: emi-hi,tim738745,kuanfandevops,JulianForeman,rogerlcleung | |
| minimum-approvals: 2 | |
| issue-title: "ZEVA ${{ env.BUILD_SUFFIX }} Prod Deployment" | |
| - name: Checkout Manifest repository | |
| uses: actions/[email protected] | |
| with: | |
| repository: bcgov-c/tenant-gitops-e52f12 | |
| ref: main | |
| ssh-key: ${{ secrets.MANIFEST_REPO_DEPLOY_KEY }} | |
| - name: Update frontend and backend image tags | |
| uses: mikefarah/[email protected] | |
| with: | |
| cmd: | | |
| yq -i '.frontend.image.tag = "${{ env.BUILD_SUFFIX }}"' zeva/values-prod.yaml | |
| yq -i '.backend.image.tag = "${{ env.BUILD_SUFFIX }}"' zeva/values-prod.yaml | |
| - name: GitHub Commit & Push | |
| shell: bash {0} | |
| run: | | |
| git config --global user.email "[email protected]" | |
| git config --global user.name "GitHub Actions" | |
| git add zeva/values-prod.yaml | |
| git commit -m "Update the image tag to ${{ env.BUILD_SUFFIX }} on Zeva Prod Environment" | |
| git push | |
| # For prod deployment, replace the following with ArgoCD | |
| # - name: Log in to Openshift | |
| # uses: redhat-actions/[email protected] | |
| # with: | |
| # openshift_server_url: ${{ secrets.OPENSHIFT_SERVER }} | |
| # openshift_token: ${{ secrets.OPENSHIFT_TOKEN }} | |
| # insecure_skip_tls_verify: true | |
| # namespace: ${{ env.PROD_NAMESPACE }} | |
| # - name: Tag ZEVA images to Test | |
| # run: | | |
| # helm -n ${{ env.PROD_NAMESPACE }} list | |
| # oc tag ${{ env.TEST_NAMESPACE }}/zeva-backend:${{ env.BUILD_SUFFIX }} ${{ env.PROD_NAMESPACE }}/zeva-backend:${{ env.BUILD_SUFFIX }} | |
| # oc tag ${{ env.TEST_NAMESPACE }}/zeva-frontend:${{ env.BUILD_SUFFIX }} ${{ env.PROD_NAMESPACE }}/zeva-frontend:${{ env.BUILD_SUFFIX }} | |
| # cd zeva | |
| # helm -n ${{ env.PROD_NAMESPACE }} -f ./values-prod.yaml upgrade --install zeva-prod . |