Improve deploy #293
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy to k8s cluster | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - develop | |
| - CU-8689pdzrr-k8s-self-hosted-runner | |
| jobs: | |
| build-push: | |
| runs-on: ubuntu-22.04 # standard (not self-hosted) runner | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} | |
| # https://github.com/marketplace/actions/slack-github-actions-slack-integration | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.10' | |
| cache: 'pip' | |
| cache-dependency-path: 'requirements/*/dev.txt' | |
| - name: Install dependencies | |
| id: pip-install | |
| run: | | |
| python -m pip install --upgrade pip wheel pip-tools | |
| pip-sync requirements/dev/dev.txt | |
| - name: Login to Docker | |
| id: docker-login | |
| run: | | |
| inv aws.docker-login | |
| - shell: bash | |
| run: | | |
| inv image.tag | grep 'Set config.tag to' | cut -d' ' -f4 > docker-tag.txt | |
| - name: Set variables | |
| run: | | |
| DOCKER_TAG=$(cat docker-tag.txt) | |
| echo "DOCKER_TAG=$DOCKER_TAG" >> $GITHUB_ENV | |
| - name: Build, tag, and push image | |
| id: build-tag-push | |
| run: | | |
| [ "$GITHUB_REF" = refs/heads/main ] && | |
| ENV="production" || | |
| ENV="staging" | |
| echo "env is $ENV" | |
| inv $ENV image.push --tag=${{ env.DOCKER_TAG }} | |
| - name: Upload docker tag from build-push job | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: docker_tag | |
| path: docker-tag.txt | |
| # The deploy needs to run from within the cluster, since the cluster | |
| # is not exposed to the public internet. This step is split out into | |
| # its own job to reduce the amount of work done on the self-hosted runner | |
| # and avoid the need to run a privileged docker container (with the | |
| # capability of building a docker container itself). | |
| deploy: | |
| runs-on: arc-runner-set # K8s self-hosted runner | |
| needs: [build-push] | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }} | |
| # https://github.com/marketplace/actions/slack-github-actions-slack-integration | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Download docker tag from build-push job | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: docker_tag | |
| - name: Set variables | |
| run: | | |
| DOCKER_TAG=$(cat docker-tag.txt) | |
| echo "DOCKER_TAG=$DOCKER_TAG" >> $GITHUB_ENV | |
| - name: Install apt packages | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y git | |
| - uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.10' | |
| cache: 'pip' | |
| cache-dependency-path: 'requirements/*/dev.txt' | |
| - name: Install dependencies | |
| id: pip-install | |
| run: | | |
| python -m pip install --upgrade pip wheel pip-tools | |
| pip-sync requirements/dev/dev.txt | |
| - name: Deploy the image | |
| id: deploy | |
| run: | | |
| [ "$GITHUB_REF" = refs/heads/main ] && | |
| ENV="production" || | |
| ENV="staging" | |
| echo "env is $ENV" | |
| inv $ENV deploy --tag=${{ env.DOCKER_TAG }} | |
| - uses: act10ns/slack@v1 | |
| with: | |
| status: ${{ job.status }} | |
| steps: ${{ toJson(steps) }} | |
| # always() means to notify regardless of status | |
| if: always() |