ci.yaml

name: API Lint, Build, Test, Deploy

on:
  push:
    branches:
      - master
      - dev
  pull_request:
    types:
      - opened
      - synchronize
      - reopened
      - labeled
  workflow_dispatch:
    inputs:
      deploy:
        description: "Which environment to deploy to"
        required: true
        default: "none"
        type: choice
        options:
          - prod
          - stage
          - none

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  DEPLOY: ${{ (inputs.deploy != 'none' && inputs.deploy) || ((github.event_name == 'workflow_dispatch' && github.event.inputs.deploy == 'prod') || (github.event_name == 'push' && github.ref_type == 'branch' && github.ref_name == 'master') && 'prod') || ((github.event_name == 'workflow_dispatch' && github.event.inputs.deploy == 'stage') || (github.event_name == 'push' && github.ref_type == 'branch' && github.ref_name == 'dev' && 'stage') || (github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'staged')) && 'stage') || 'none' }}

jobs:
  ci:
    name: API Lint, Build, Test, Deploy
    runs-on: seventv
    env:
      GOLANGCI_LINT_CACHE: /home/runner/.cache/golangci-lint
    concurrency:
      group: ${{ github.workflow }}-ci-${{ github.ref }}
      cancel-in-progress: true

    steps:
      - name: Set up Go
        uses: actions/setup-go@v3
        with:
          go-version: 1.18

      - uses: actions/setup-node@v3
        with:
          node-version: "18"

      - name: Install Yarn
        run: npm install -g yarn

      - name: Checkout code
        uses: actions/checkout@v3
        with:
          submodules: recursive

      - id: cache-paths
        run: |
          echo "go-build=$(go env GOCACHE)" >> $GITHUB_OUTPUT
          echo "go-mod=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT

      - name: Go Build Cache
        uses: actions/cache@v3
        with:
          path: ${{ steps.cache-paths.outputs.go-build }}
          key: ${{ runner.os }}-go-build-${{ hashFiles('go.sum') }}

      - name: Go Mod Cache
        uses: actions/cache@v3
        with:
          path: ${{ steps.cache-paths.outputs.go-mod }}
          key: ${{ runner.os }}-go-mod-${{ hashFiles('go.sum') }}

      - name: GoLint Cache
        uses: actions/cache@v3
        with:
          path: ${{ env.GOLANGCI_LINT_CACHE }}
          key: ${{ runner.os }}-go-lint-ci

      - name: Node Modules Cache
        uses: actions/cache@v3
        with:
          path: node_modules
          key: ${{ runner.os }}-node_modules-${{ hashFiles('yarn.lock') }}

      - name: Make
        run: sudo apt-get install make

      - name: Install Dependencies
        run: make deps

      - name: Install Developer Dependencies
        run: make dev_deps

      - name: Generate structures
        run: make generate

      - name: Build Dev Portal Frontend
        run: make ${{ (env.DEPLOY == 'prod' && 'portal') || 'portal_stage' }}

      - name: Run Linter
        run: make lint

      - name: Run Tests
        run: make test

      - name: Build App
        run: make build

      - name: Make build context
        if: env.DEPLOY != 'none'
        run: |
          docker context create builders

      - name: Setup buildx
        uses: docker/setup-buildx-action@v2
        if: env.DEPLOY != 'none'
        with:
          install: true
          endpoint: builders

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ github.token }}

      - name: Build docker image
        uses: docker/build-push-action@v4
        if: env.DEPLOY != 'none'
        with:
          context: .
          file: docker/partial.Dockerfile
          tags: |
            ghcr.io/seventv/api:${{ env.DEPLOY }}-${{ github.sha }}
            ghcr.io/seventv/api:${{ env.DEPLOY }}-latest
          push: true

  validate:
    name: API Deploy Validation
    needs: ci
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    defaults:
      run:
        working-directory: ./terraform

    steps:
      - name: Checkout code
        id: ok
        if: env.DEPLOY != 'none'
        uses: actions/checkout@v3

      - name: "Setup Terraform"
        if: steps.ok.outcome == 'success'
        uses: hashicorp/setup-terraform@v1
        with:
          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

      - name: "Terraform Init"
        if: steps.ok.outcome == 'success'
        id: init
        env:
          TF_WORKSPACE: ${{ env.DEPLOY }}
        run: terraform init
        continue-on-error: true

      - name: "Terraform Workspace"
        if: steps.ok.outcome == 'success'
        run: terraform workspace select -or-create=true ${{ env.DEPLOY }}

      - name: Terraform fmt
        if: steps.ok.outcome == 'success'
        id: fmt
        run: terraform fmt -check
        continue-on-error: true

      - name: Terraform Validate
        if: steps.ok.outcome == 'success'
        id: validate
        run: terraform validate -no-color

      - name: Terraform Variables
        if: steps.ok.outcome == 'success'
        run: |
          cat <<EOF > *.auto.tfvars
            image_url="ghcr.io/seventv/api:${{ env.DEPLOY }}-${{ github.sha }}"
            image_pull_policy="IfNotPresent"

          EOF

      - name: "Terraform Plan"
        if: steps.ok.outcome == 'success'
        id: plan
        run: terraform plan -no-color

      - uses: actions/github-script@v6
        if: steps.ok.outcome == 'success' && github.event_name == 'pull_request'
        env:
          PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            // 1. Retrieve existing bot comments for the PR
            const { data: comments } = await github.rest.issues.listComments({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
            })
            const botComment = comments.find(comment => {
              return comment.user.type === 'Bot' && comment.body.includes('Terraform Format and Style')
            })

            // 2. Prepare format of the comment
            const output = `#### Terraform Format and Style 🖌\`${{ steps.fmt.outcome }}\`
            #### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
            #### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
            <details><summary>Validation Output</summary>

            \`\`\`\n
            ${{ steps.validate.outputs.stdout }}
            \`\`\`

            </details>

            #### Terraform Plan 📖\`${{ steps.plan.outcome }}\`

            <details><summary>Show Plan</summary>

            \`\`\`\n
            ${process.env.PLAN}
            \`\`\`

            </details>

            *Actor: @${{ github.actor }}, Action: \`${{ github.event_name }}\`, Workflow: \`${{ github.workflow }}\`*`;

            // 3. If we have a comment, update it, otherwise create a new one
            if (botComment) {
              github.rest.issues.updateComment({
                owner: context.repo.owner,
                repo: context.repo.repo,
                comment_id: botComment.id,
                body: output
              })
            } else {
              github.rest.issues.createComment({
                issue_number: context.issue.number,
                owner: context.repo.owner,
                repo: context.repo.repo,
                body: output
              })
            }

      - name: "Terraform Apply"
        if: steps.ok.outcome == 'success'
        id: apply
        run: terraform apply -no-color -auto-approve
        continue-on-error: true