prod-deploy.yml

name: prod-deploy
on:
  push:
    branches:
      [master]
jobs:
  secrets-gate-run:
    runs-on: ubuntu-latest
    outputs:
      ok: ${{ steps.check-secrets-run.outputs.ok }}
    steps:
      - name: check for secrets needed to run workflows
        id: check-secrets-run
        run: |
          if [ ${{ secrets.DEPLOYMENTS_ENABLED }} == 'true' ]; then
            echo "::set-output name=ok::enabled"
          fi
  secrets-gate-webhook:
    runs-on: ubuntu-latest
    outputs:
      ok: ${{ steps.check-secrets-webhook.outputs.ok }}
    steps:
      - name: check for secrets needed to run workflows
        id: check-secrets-webhook
        run: |
          if [ ${{ secrets.SEND_FINISHED_WEBHOOK }} == 'true' ]; then
            echo "::set-output name=ok::enabled"
          fi
  prod-deploy:
    needs:
      - secrets-gate-run
    if: ${{ needs.secrets-gate-run.outputs.ok == 'enabled' }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Use Node.js
        uses: actions/setup-node@v3
        with:
          node-version: 16.x
      - name: Setup Helm
        run: scripts/setup_helm_builder.sh
      - name: Setup AWS
        run: scripts/setup_aws_builder.sh $AWS_ACCESS_KEY $AWS_SECRET $AWS_REGION $CLUSTER_NAME
        env:
          AWS_ACCESS_KEY: ${{ secrets.AWS_ACCESS_KEY }}
          AWS_SECRET: ${{ secrets.AWS_SECRET }}
          AWS_REGION: ${{ secrets.AWS_REGION }}
          CLUSTER_NAME: ${{ secrets.CLUSTER_NAME }}
      - name: Space debug
        run: |
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf /opt/ghc
          sudo rm -rf "/usr/local/share/boost"
          sudo rm -rf "$AGENT_TOOLSDIRECTORY"
      - name: Build Docker Image
        run: bash scripts/build_docker_builder.sh prod $DOCKER_LABEL $PRIVATE_ECR $AWS_REGION
        env:
          DOCKER_LABEL: ${{ secrets.DOCKER_LABEL }}
          REPO_NAME: ${{ secrets.PROD_REPO_NAME }}
          AWS_REGION: ${{ secrets.AWS_REGION }}
          ECR_URL: ${{ secrets.ECR_URL }}
          PRIVATE_ECR: ${{ secrets.PRIVATE_ECR }}
      - name: delete package.json
        run: rm package.json
      - name: npm-install 'cli' and 'aws-sdk'
        run: npm install cli aws-sdk
      - name: Publish to Elastic Container Registry
        run: bash scripts/publish_ecr_builder.sh prod $GITHUB_SHA $DOCKER_LABEL $PRIVATE_ECR $AWS_REGION
        env:
          DOCKER_LABEL: ${{ secrets.DOCKER_LABEL }}
          REPO_NAME: ${{ secrets.PROD_REPO_NAME }}
          AWS_REGION: ${{ secrets.AWS_REGION }}
          ECR_URL: ${{ secrets.ECR_URL }}
          PRIVATE_ECR: ${{ secrets.PRIVATE_ECR }}
      - name: Deploy to EKS
        run: bash scripts/deploy_builder.sh prod $GITHUB_SHA
      - name: Publish to Docker Hub
        run: bash scripts/publish_dockerhub_builder.sh $GITHUB_SHA $DOCKER_LABEL
        env:
          DOCKER_LABEL: ${{ secrets.DOCKER_LABEL }}
          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
          DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
          PUBLISH_DOCKERHUB: ${{ secrets.PUBLISH_DOCKERHUB }}
      - name: Job succeeded
        if: ${{ needs.secrets-gate-webhook.outputs.ok == 'enabled' }}
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: 2.6 # Not needed with a .ruby-version file
          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
        env:
          JOB_STATUS: ${{ job.status }}
          WEBHOOK_URL: ${{ secrets.WEBHOOK_URL }}
          HOOK_OS_NAME: ${{ runner.os }}
          WORKFLOW_NAME: ${{ github.workflow }}
          run: |
            git clone https://github.com/DiscordHooks/github-actions-discord-webhook.git webhook
            bash webhook/send.sh $JOB_STATUS $WEBHOOK_URL
          shell: bash