ci: Use semaphore to promote to production

#122: Deploy to separate GCP project

.semaphore/prod.yml

@@ -0,0 +1,29 @@
+---
+version: v1.0
+name: ISCO promotion
+agent:
+  machine:
+    type: e1-standard-2
+    os_image: ubuntu1804
+global_job_config:
+  secrets:
+    - name: isco
+  prologue:
+    commands:
+      - checkout
+      - export CI_COMMIT="${SEMAPHORE_GIT_SHA:0:7}"
+      - export CI_BRANCH="${SEMAPHORE_GIT_BRANCH}"
+      - export CI_TAG="${SEMAPHORE_GIT_TAG_NAME}"
+      - export CI_PULL_REQUEST="${SEMAPHORE_GIT_REF_TYPE/pull-request/true}"
+      - export CI_COMMIT_RANGE="${SEMAPHORE_GIT_COMMIT_RANGE}"
+      - export CLOUDSDK_CORE_DISABLE_PROMPTS=1
+      - export PROD_DEPLOY=1
+blocks:
+  - name: 'Promotion'
+    task:
+      jobs:
+        - name: Promote to production
+          run:
+            when: "branch = 'main'"
+          commands:
+            - ./ci/deploy.sh

.semaphore/semaphore.yml

@@ -25,8 +25,6 @@ global_job_config:
       - export COVERALLS_REPO_TOKEN="${COVERALLS_ISCO_TOKEN}"
 blocks:
   - name: 'Build, Test & Deploy'
-    skip:
-      when: "tag =~ '.*'"
     task:
       prologue:
         commands:
@@ -48,11 +46,7 @@ blocks:
           commands:
             - ./ci/build.sh
             - ./ci/deploy.sh
+
+promotions:
   - name: "Promote to production"
-    run:
-      when: "tag =~ '.*'"
-    task:
-      jobs:
-        - name: Promote to production
-          commands:
-            - ./ci/deploy.sh
+    pipeline_file: prod.yml

ci/deploy.sh

@@ -1,5 +1,4 @@
 #!/usr/bin/env bash
-
 # The required env vars require a registry_prefix depending on the deploy environment:
 #   prod: PROD_
 #   test: TEST_
@@ -13,14 +12,13 @@
 #   GCP_DOCKER_HOST - Where to push the docker images to
 #   GCP_SERVICE_ACCOUNT_FILE - path to file containing GCP service account credentials
 #   IMAGE_PREFIX - The host (and path if necessary) to push the docker images to
+#
+# Optional env vars:
+#   PROD_DEPLOY - Make this a deployment to production
 set -exuo pipefail
 
-#[[ "${CI_BRANCH}" !=  "main" && ! "${CI_TAG:=}" =~ promote.* ]] && { echo "Branch different than main and not a tag. Skip deploy"; exit 0; }
-#[[ "${CI_PULL_REQUEST:-}" ==  "true" ]] && { echo "Pull request. Skip deploy"; exit 0; }
-
-if [[ "${CI_TAG:=}" =~ promote.* ]]; then
-  PROD_DEPLOY=1
-fi
+[[ "${CI_BRANCH}" !=  "main" ]] && { echo "Branch must be 'main' to deploy"; exit 0; }
+[[ "${CI_PULL_REQUEST:-}" ==  "true" ]] && { echo "Pull request. Skip deploy"; exit 0; }
 
 export CLOUDSDK_CONTAINER_USE_CLIENT_CERTIFICATE=False
 
@@ -74,7 +72,7 @@ apply_deployment () {
 }
 
 set +x  # Disable printing the variable values; values might be secret
-if [[ -n "${PROD_DEPLOY:=}" ]] ; then
+if [[ -n "${PROD_DEPLOY:-}" ]] ; then
   generate_vars "PROD"
 else
   generate_vars "TEST"
@@ -83,7 +81,7 @@ set -x  # Renable it
 
 auth
 
-if [[ -z "${CI_TAG:=}" ]]; then
+if [[ -z "${PROD_DEPLOY:-}" ]] ; then
     push_image backend
     push_image frontend
 fi