eks-cd.yaml

name: 'EKS-CD'
on:
  workflow_dispatch:
  push:
    branches:
      - master
      - eks-branch-refactored
      # - staging
      # - testing

jobs:
  configure:
    name: 'Configure'
    if: ${{ vars.EKS_CD_ENABLED == 'true' }}
    runs-on: ubuntu-latest
    env:
      BRANCH_NAME: ${{ github.head_ref || github.ref_name }}
    outputs:
      namespace: ${{ steps.configuration.outputs.namespace }}
      registry: ${{ steps.configuration.outputs.registry }}
      cluster-type: ${{ steps.configuration.outputs.cluster-type }}
      cluster-name: ${{ steps.configuration.outputs.cluster-name }}
      aws-region: ${{ steps.get-aws-details.outputs.aws-region }}
      aws-account-id: ${{ steps.get-aws-details.outputs.aws-account-id }}
    steps:
      - name: 'Conditional environment'
        id: configuration
        run: |
          echo $BRANCH_NAME
          if [[ "$BRANCH_NAME" == "master" ]]; then
            echo "cluster-type=prod" >> $GITHUB_OUTPUT
            echo "namespace=production" >> $GITHUB_OUTPUT
            echo "registry=${{ vars.EKS_ECR_URI_PROD }}" >> $GITHUB_OUTPUT
            echo "cluster-name=${{ vars.EKS_CLUSTER_NAME_PROD }}" >> $GITHUB_OUTPUT
          elif [[ "$BRANCH_NAME" == "staging" ]]; then
            echo "namespace=staging" >> $GITHUB_OUTPUT
          else
            echo "namespace=testing" >> $GITHUB_OUTPUT
          fi
          if [[ "$BRANCH_NAME" != "master" ]]; then
            echo "cluster-type=nonprod" >> $GITHUB_OUTPUT
            echo "registry=${{ vars.EKS_ECR_URI_NONPROD }}" >> $GITHUB_OUTPUT
            echo "cluster-name=${{ vars.EKS_CLUSTER_NAME_NONPROD }}" >> $GITHUB_OUTPUT
          fi
      - name: 'Get AWS Details'
        id: get-aws-details
        run: |
          URI=${{ steps.configuration.outputs.registry }}
          REG=${URI:21:9}
          ACC=${URI:0:12}
          echo "aws-region=$REG" >> $GITHUB_OUTPUT
          echo "aws-account-id=$ACC" >> $GITHUB_OUTPUT

  build:
    name: 'Build'
    if: ${{ vars.EKS_CD_ENABLED == 'true' }}
    needs: [configure]
    uses: rfcx/cicd/.github/workflows/eks-ecr-build-push.yaml@eks-branch-refactored
    with:
      dockerfile: build/Dockerfile
      targets: "[\"core-api\",\"core-tasks\",\"noncore-api\",\"noncore-mqtt\"]"
      tag-environment: ${{ needs.configure.outputs.namespace }}
      tag-latest: ${{ needs.configure.outputs.namespace == 'production' }}
      registry: ${{ needs.configure.outputs.registry }}
      aws-region: ${{ needs.configure.outputs.aws-region }}
      aws-account-id: ${{ needs.configure.outputs.aws-account-id }}

  deploy:
    name: 'Deploy'
    if: ${{ vars.EKS_CD_ENABLED == 'true' }}
    needs: [configure, build]
    uses: rfcx/cicd/.github/workflows/eks-k8s-deploy-deployment.yaml@eks-branch-refactored
    with:
      tag: ${{ needs.build-nonprod.outputs.unique-tag }}
      namespace: ${{ needs.configure.outputs.namespace }}
      targets: "[\"core-api\",\"core-tasks\",\"noncore-api\",\"noncore-mqtt\"]"
      aws-region: ${{ needs.configure.outputs.aws-region }}
      aws-account-id: ${{ needs.configure.outputs.aws-account-id }}
      cluster-name: ${{ needs.configure.outputs.cluster-name }}
    secrets: inherit

  deploy-core-api-secrets:
    name: 'Deploy core-api secrets'
    if: ${{ vars.EKS_CD_ENABLED == 'true' }}
    needs: [configure, deploy]
    uses: rfcx/cicd/.github/workflows/eks-k8s-deploy-secrets.yaml@eks-branch-refactored
    with:
      namespace: ${{ needs.configure.outputs.namespace }}
      environment: ${{ needs.configure.outputs.namespace }}/core-api
      aws-region: ${{ needs.configure.outputs.aws-region }}
      aws-account-id: ${{ needs.configure.outputs.aws-account-id }}
      cluster-name: ${{ needs.configure.outputs.cluster-name }}
      name: core-secrets
      includes: "AUTH0_CLIENT_ID,AUTH0_CLIENT_SECRET,AWS_ACCESS_KEY_ID,AWS_SECRET_KEY,NEW_RELIC_LICENSE_KEY,POSTGRES_PASSWORD,POSTGRES_USER,STREAM_TOKEN_SALT"
    secrets: inherit

  deploy-noncore-api-secrets:
    name: 'Deploy noncore-api secrets'
    if: ${{ vars.EKS_CD_ENABLED == 'true' }}
    needs: [configure, deploy]
    uses: rfcx/cicd/.github/workflows/eks-k8s-deploy-secrets.yaml@eks-branch-refactored
    with:
      namespace: ${{ needs.configure.outputs.namespace }}
      environment: ${{ needs.configure.outputs.namespace }}/noncore-api
      aws-region: ${{ needs.configure.outputs.aws-region }}
      aws-account-id: ${{ needs.configure.outputs.aws-account-id }}
      cluster-name: ${{ needs.configure.outputs.cluster-name }}
      name: noncore-secrets
      includes: "AUTH0_CLIENT_ID,AUTH0_CLIENT_SECRET,AWS_ACCESS_KEY_ID,AWS_SECRET_KEY,CLASSY_CLIENT_ID,CLASSY_CLIENT_SECRET,FIREBASE_CLIENT_EMAIL_PLAYER_APP,FIREBASE_CLIENT_EMAIL_RANGER_APP,FIREBASE_PRIVATE_KEY_PLAYER_APP,FIREBASE_PRIVATE_KEY_RANGER_APP,GUARDIAN_KEYSTORE_PASSPHRASE,MAILCHIMP_KEY,MANDRILL_KEY,MQTT_BROKER_PASSWORD,MQTT_BROKER_USER,NEW_RELIC_LICENSE_KEY,POSTGRES_PASSWORD,POSTGRES_USER,RECAPTCHA_V3_SECRET_KEY,STRIPE_SECRET_KEY,TWILIO_ACCOUNT_SID,TWILIO_AUTH_TOKEN"
    secrets: inherit


  # notify:
  #   name: 'Notify'
  #   if: ${{ always() }}
  #   needs: [configure, build, deploy, deploy-core-api-secrets, deploy-noncore-api-secrets]
  #   uses: rfcx/cicd/.github/workflows/notify-send.yaml@master
  #   with:
  #     repo: rfcx-api
  #     branch-name: ${{ needs.prepare.outputs.branch-name }}
  #     workflow-id: cd.yaml
  #     previous-run-id: ${{ needs.prepare.outputs.previous-run-id }}
  #     status: ${{ needs.deploy.result }}
  #     always: true
  #     notification-title: 'CD: APIs'
  #     notification-footer: "Build: ${{ needs.build.result || 'n/a' }} | Deploy: ${{ needs.deploy.result || 'n/a' }}"
  #     notification-success-statement: '{0} deployed the build!'
  #   secrets:
  #     slack-webhook: ${{ secrets.SLACK_ALERT_COREDT_WEBHOOK }}
  #     github-token: ${{ secrets.GITHUB_TOKEN }}