Merge pull request #391 from Open-Earth-Foundation/dependabot/npm_and… #18
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Push Web app to GHCR and deploy to EKS | |
| on: | |
| workflow_dispatch: | |
| push: | |
| paths: | |
| - app/** | |
| - k8s/cc-migrate.yml | |
| - k8s/cc-web-deploy.yml | |
| - k8s/cc-web.yml | |
| - .github/workflows/web-develop.yml | |
| branches: ["develop"] | |
| pull_request: | |
| jobs: | |
| runTests: | |
| runs-on: ubuntu-latest | |
| env: | |
| NODE_ENV: test | |
| NEXTAUTH_SECRET: "diTMz/XLX4edSmmfzwJtmzKjCJGRt81Gf0PdjO3IPs8=" | |
| NEXTAUTH_URL: "http://localhost:3000" | |
| defaults: | |
| run: | |
| working-directory: ./app | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| cache: "npm" | |
| cache-dependency-path: app/package-lock.json | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Set up database | |
| run: | | |
| docker run --name github_action_postgresql -d -p 5432:5432 -e POSTGRES_HOST_AUTH_METHOD=trust -e POSTGRES_PASSWORD="" postgres | |
| sleep 10 | |
| createuser -w -h localhost -p 5432 -U postgres citycatalyst | |
| createdb -w -h localhost -p 5432 -U postgres citycatalyst -O citycatalyst | |
| cp env.example .env | |
| npm run db:migrate | |
| - name: Run NextJS build | |
| run: npm run build | |
| # - name: Run Cypress tests | |
| # run: npm run cy:test | |
| # ... Generate LCOV files or download it from a different job | |
| - name: Run tests and generate coverage file | |
| run: npm run ci:test | |
| # - name: Setup LCOV | |
| # uses: hrishikesh-kadam/setup-lcov@v1 | |
| # - name: Report code coverage | |
| # uses: zgosalvez/github-actions-report-lcov@v3 | |
| # with: | |
| # coverage-files: ./app/lcov*.info | |
| # minimum-coverage: 40 | |
| # artifact-name: code-coverage-report | |
| # github-token: ${{ secrets.GITHUB_TOKEN }} | |
| # working-directory: ./app | |
| # update-comment: true | |
| - name: Upload coverage reports to Codecov | |
| continue-on-error: true | |
| uses: codecov/codecov-action@v4.0.1 | |
| with: | |
| fail_ci_if_error: false | |
| flags: unittests | |
| name: citycatalyst-backend | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| slug: Open-Earth-Foundation/CityCatalyst | |
| - name: Shut down database | |
| run: docker stop github_action_postgresql | |
| pushToGHCR: | |
| needs: runTests | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/develop' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Pushing CC Web to GHCR | |
| env: | |
| VERSION: ${{ github.sha }} | |
| IMAGE: ghcr.io/open-earth-foundation/citycatalyst | |
| run: | | |
| docker build -t $IMAGE:$VERSION app | |
| docker tag $IMAGE:$VERSION $IMAGE:latest | |
| docker push $IMAGE:$VERSION | |
| docker push $IMAGE:latest | |
| deployToEKS: | |
| needs: pushToGHCR | |
| runs-on: ubuntu-latest | |
| if: github.ref == 'refs/heads/develop' | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_EKS_DEV_USER }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_EKS_DEV_USER }} | |
| EKS_DEV_NAME: ${{ secrets.EKS_DEV_NAME }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Creating kubeconfig file | |
| run: aws eks update-kubeconfig --name ${{secrets.EKS_DEV_NAME}} --region us-east-1 | |
| - name: Testing connection to EKS | |
| run: kubectl get pods -n default | |
| - name: Deploying service | |
| run: | | |
| kubectl create -f k8s/cc-migrate.yml -n default | |
| kubectl create -f k8s/cc-seed.yml -n default | |
| kubectl apply -f k8s/cc-sync-catalogue.yml -n default | |
| # kubectl create job --from=cronjob/cc-sync-catalogue cc-sync-catalogue-manual -n default | |
| kubectl apply -f k8s/cc-web-deploy.yml -n default | |
| kubectl set env deployment/cc-web-deploy SMTP_USER=${{secrets.SMTP_USER}} | |
| kubectl set env deployment/cc-web-deploy SMTP_PASSWORD=${{secrets.SMTP_PASSWORD}} | |
| kubectl set env deployment/cc-web-deploy NEXTAUTH_SECRET=${{secrets.NEXTAUTH_SECRET}} | |
| kubectl set env deployment/cc-web-deploy RESET_TOKEN_SECRET=${{secrets.RESET_TOKEN_SECRET}} | |
| kubectl set env deployment/cc-web-deploy VERIFICATION_TOKEN_SECRET=${{secrets.VERIFICATION_TOKEN_SECRET}} | |
| kubectl set env deployment/cc-web-deploy CHAT_PROVIDER=openai | |
| kubectl set env deployment/cc-web-deploy OPENAI_API_KEY=${{secrets.OPENAI_API_KEY}} | |
| kubectl set env deployment/cc-web-deploy HUGGINGFACE_API_KEY=${{secrets.HUGGINGFACE_API_KEY}} | |
| kubectl set env deployment/cc-web-deploy "DEFAULT_ADMIN_EMAIL=${{secrets.DEFAULT_ADMIN_EMAIL}}" | |
| kubectl set env deployment/cc-web-deploy "DEFAULT_ADMIN_PASSWORD=${{secrets.DEFAULT_ADMIN_PASSWORD}}" | |
| kubectl create -f k8s/cc-create-admin.yml -n default | |
| kubectl rollout restart deployment cc-web-deploy -n default |