ci: Test and fix prod deploy #162
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Promote staging to PROD | |
| on: | |
| pull_request: | |
| paths: | |
| - .github/workflows/prod-deploy.yml # For testing changes, won't deploy to prod | |
| release: | |
| types: | |
| - released | |
| workflow_dispatch: | |
| inputs: | |
| tag: | |
| description: 'The release tag to promote (e.g. v1.2.3) do not append centrifuge-app to the tag' | |
| required: true | |
| type: string | |
| concurrency: | |
| group: production-deployment | |
| cancel-in-progress: false | |
| jobs: | |
| get-release-artifacts: | |
| name: download-${{ matrix.artifact.name }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: 'read' | |
| id-token: 'write' | |
| strategy: | |
| matrix: | |
| artifact: | |
| - name: webpack | |
| path: centrifuge-app/build/ | |
| - name: pinning-api | |
| path: pinning-api/dist/ | |
| - name: onboarding-api | |
| path: onboarding-api/dist/ | |
| steps: | |
| - uses: dsaltares/fetch-gh-release-asset@aa2ab1243d6e0d5b405b973c89fa4d06a2d0fff7 # v1.1.2 | |
| with: | |
| repo: 'centrifuge/apps' | |
| # version: ${{ github.event_name == 'release' && github.event.release.id || format('tags/centrifuge-app/{0}', inputs.tag) }} | |
| version: 'tags/centrifuge-app/v2.83.4' | |
| file: "${{ matrix.artifact.name }}.zip" | |
| target: "${{ matrix.artifact.name }}.zip" | |
| - name: Unzip release files | |
| env: | |
| ZIPFILE: ${{ matrix.artifact.name }} | |
| run: | | |
| ls -la | |
| unzip $ZIPFILE 1> /dev/null | |
| ls -la | |
| - name: Upload webpack files | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: webpack | |
| path: ${{ matrix.artifact.path }} | |
| deploy-app: | |
| name: app-prod-deploy | |
| permissions: | |
| contents: 'read' | |
| id-token: 'write' | |
| runs-on: ubuntu-latest | |
| environment: production | |
| if: ${{ github.event_name != 'pull_request' }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| path: apps | |
| sparse-checkout: | | |
| .github/actions/deploy-gcs | |
| - name: Deploy to GCS | |
| uses: ./apps/.github/actions/deploy-gcs | |
| with: | |
| GWIP: ${{ secrets.GWIP }} | |
| GSA: ${{ secrets.GSA }} | |
| bucket_url: 'app.centrifuge.io' | |
| artifact_name: webpack | |
| deploy-functions: | |
| name: ${{ matrix.function.name }}-prod-deploy | |
| runs-on: ubuntu-latest | |
| environment: production | |
| if: ${{ github.event_name != 'pull_request' }} | |
| permissions: | |
| contents: 'read' | |
| id-token: 'write' | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| function: | |
| - name: pinning-api | |
| handler: pinningApi | |
| service_account: ${{ vars.PINNING_API_FUNCT_SA }} | |
| - name: onboarding-api | |
| handler: onboarding | |
| service_account: ${{ vars.ONBOARDING_FUNCT_SA }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| path: apps | |
| sparse-checkout: | | |
| .github/actions/deploy-gfunction | |
| - name: Deploy Gfunction | |
| id: functionsdeploy | |
| uses: ./apps/.github/actions/deploy-gfunction | |
| with: | |
| app_name: "${{ matrix.function.name }}-production" | |
| artifact_name: ${{ matrix.function.name }} | |
| GWIP: ${{ secrets.GWIP }} | |
| GSA: ${{ secrets.GSA }} | |
| target: ${{ matrix.function.handler }} | |
| gcloud_region: ${{ vars.GCLOUD_REGION }} | |
| service_account: '${{ matrix.function.service_account }}' | |
| deploy_env: production | |
| slack-notify-success: | |
| needs: [deploy-app, deploy-functions] | |
| if: success() | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Notify prod deploy success | |
| uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2 | |
| env: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| SLACK_MESSAGE: | | |
| ✅ Production deployment successful! | |
| app.staging.centrifuge.io has been promoted to app.centrifuge.io and is now LIVE! | |
| Check out the new release -> https://github.com/centrifuge/apps/releases/ | |
| SLACK_USERNAME: 'Centrifuge GHA Bot' | |
| SLACK_ICON: 'https://centrifuge.io/favicon.ico' | |
| SLACK_TITLE: 'Centrifuge app has been promoted to prod.' | |
| SLACK_FOOTER: 'Automatic message from centrifuge/apps repository Actions' | |
| MSG_MINIMAL: true | |
| SLACK_COLOR: 'good' | |
| slack-notify-failure: | |
| needs: [deploy-app, deploy-functions] | |
| if: failure() | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Notify prod deploy failure | |
| uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2 | |
| env: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| SLACK_MESSAGE: | | |
| ❌ Production deployment failed! | |
| One or more jobs failed during the promotion to production. | |
| Please check the workflow run for details -> ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }} | |
| SLACK_USERNAME: 'Centrifuge GHA Bot' | |
| SLACK_ICON: 'https://centrifuge.io/favicon.ico' | |
| SLACK_TITLE: '⚠️ Production Deployment Failed' | |
| SLACK_FOOTER: 'Automatic message from centrifuge/apps repository Actions' | |
| MSG_MINIMAL: true | |
| SLACK_COLOR: 'danger' |