|
| 1 | +name: Backend Build and Deploy to AWS ECS |
| 2 | +on: |
| 3 | + release: |
| 4 | + types: |
| 5 | + - created |
| 6 | + workflow_dispatch: |
| 7 | + inputs: |
| 8 | + env: |
| 9 | + description: "AWS Env" |
| 10 | + required: true |
| 11 | + default: "dev" |
| 12 | + ref: |
| 13 | + description: "Branch, Tag, or Full SHA" |
| 14 | + required: true |
| 15 | + merge: |
| 16 | + branch: |
| 17 | + - main |
| 18 | + |
| 19 | +env: |
| 20 | + AWS_APP_NAME: open-disclosure-backend |
| 21 | + AWS_REGION: us-west-2 |
| 22 | + DOCKERFILE: ./redis_api/Dockerfile.cloud |
| 23 | + DOCKER_PATH: ./frontend |
| 24 | +jobs: |
| 25 | + setup_env: |
| 26 | + name: Set-up environment |
| 27 | + runs-on: ubuntu-latest |
| 28 | + steps: |
| 29 | + - name: Debug Action |
| 30 | + uses: hmarr/debug-action@v1.0.0 |
| 31 | + - name: Checkout |
| 32 | + uses: actions/checkout@v2 |
| 33 | + with: |
| 34 | + ref: ${{ github.event.inputs.ref }} |
| 35 | + - name: Set AWS Env & Image Tag per workflow |
| 36 | + run: | |
| 37 | + SHORT_SHA=$(git rev-parse --short HEAD) |
| 38 | + if [[ "$GITHUB_EVENT_NAME" == "release" ]]; then |
| 39 | + RELEASE_TAG=$(git describe --tags) |
| 40 | + echo AWS_APPENV="$AWS_APP_NAME"-prod >> $GITHUB_ENV |
| 41 | + echo AWS_ENV=prod >> $GITHUB_ENV |
| 42 | + echo IMAGE_TAG=$RELEASE_TAG >> $GITHUB_ENV |
| 43 | + fi |
| 44 | + if [[ "$GITHUB_EVENT_NAME" == "workflow_dispatch" ]]; then |
| 45 | + INPUT_ENV=${{ github.event.inputs.env }}; INPUT_REF=${{ github.event.inputs.ref }} |
| 46 | + echo AWS_APPENV="$AWS_APP_NAME"-$INPUT_ENV >> $GITHUB_ENV |
| 47 | + echo AWS_ENV=$INPUT_ENV >> $GITHUB_ENV |
| 48 | + echo IMAGE_TAG=$SHORT_SHA >> $GITHUB_ENV |
| 49 | + fi |
| 50 | + outputs: |
| 51 | + AWS_APPENV: ${{ env.AWS_APPENV }} |
| 52 | + AWS_ENV: ${{ env.AWS_ENV }} |
| 53 | + IMAGE_TAG: ${{ env.IMAGE_TAG }} |
| 54 | + build: |
| 55 | + name: Build & Push Docker Image |
| 56 | + runs-on: ubuntu-latest |
| 57 | + needs: [setup_env] |
| 58 | + steps: |
| 59 | + - name: Checkout |
| 60 | + uses: actions/checkout@v2 |
| 61 | + with: |
| 62 | + ref: ${{ github.event.inputs.ref }} |
| 63 | + - name: Configure AWS credentials |
| 64 | + uses: aws-actions/configure-aws-credentials@v1 |
| 65 | + with: |
| 66 | + aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} |
| 67 | + aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
| 68 | + aws-region: ${{ env.AWS_REGION }} |
| 69 | + - name: Login to Amazon ECR |
| 70 | + id: login-ecr |
| 71 | + uses: aws-actions/amazon-ecr-login@v1 |
| 72 | + - name: Build & Push Image to ECR |
| 73 | + uses: kciter/aws-ecr-action@v3 |
| 74 | + with: |
| 75 | + access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }} |
| 76 | + secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
| 77 | + account_id: ${{ secrets.AWS_ACCOUNT_ID }} |
| 78 | + repo: ${{ needs.setup_env.outputs.AWS_APPENV }} |
| 79 | + region: ${{ env.AWS_REGION }} |
| 80 | + tags: latest,${{ needs.setup_env.outputs.IMAGE_TAG }} |
| 81 | + dockerfile: ${{ env.DOCKERFILE }} |
| 82 | + path: ${{ env.DOCKER_PATH }} |
| 83 | + extra_build_args: "--build-arg ENV=${{ needs.setup_env.outputs.AWS_ENV }}" |
| 84 | + deploy: |
| 85 | + name: Deploy to AWS ECS |
| 86 | + runs-on: ubuntu-latest |
| 87 | + needs: [setup_env, build] |
| 88 | + steps: |
| 89 | + - name: Configure AWS credentials |
| 90 | + uses: aws-actions/configure-aws-credentials@v1 |
| 91 | + with: |
| 92 | + aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} |
| 93 | + aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
| 94 | + aws-region: ${{ env.AWS_REGION }} |
| 95 | + - name: Login to Amazon ECR |
| 96 | + id: login-ecr |
| 97 | + uses: aws-actions/amazon-ecr-login@v1 |
| 98 | + - name: Pull Task Definition & write to file |
| 99 | + id: aws-task-definition |
| 100 | + run: | |
| 101 | + aws ecs describe-task-definition \ |
| 102 | + --task-definition ${{ needs.setup_env.outputs.AWS_APPENV }} \ |
| 103 | + --query taskDefinition | \ |
| 104 | + jq 'del(.taskDefinitionArn,.revision,.status,.registeredBy,.registeredAt,.compatibilities,.requiresAttributes)' > task-def-backend.json |
| 105 | + - name: Interpolate new Docker Image into Task Definition |
| 106 | + id: task-definition |
| 107 | + uses: aws-actions/amazon-ecs-render-task-definition@v1 |
| 108 | + with: |
| 109 | + task-definition: task-def-backend.json |
| 110 | + container-name: ${{ needs.setup_env.outputs.AWS_APPENV }} |
| 111 | + image: ${{ steps.login-ecr.outputs.registry }}/${{ needs.setup_env.outputs.AWS_APPENV }}:${{ needs.setup_env.outputs.IMAGE_TAG }} |
| 112 | + - name: Deploy Amazon ECS |
| 113 | + uses: aws-actions/amazon-ecs-deploy-task-definition@v1 |
| 114 | + with: |
| 115 | + task-definition: ${{ steps.task-definition.outputs.task-definition }} |
| 116 | + service: ${{ needs.setup_env.outputs.AWS_APPENV }} |
| 117 | + cluster: multi-tenant-prod |
| 118 | + wait-for-service-stability: true |
| 119 | + wait-for-minutes: 7 minutes |
0 commit comments