597 lines
24 KiB
YAML
597 lines
24 KiB
YAML
name: Build and Release
|
|
run-name: ${{ github.ref_name == 'release' && '[Prod]' || '[Dev]' }} Build ${{ github.run_number }} of branch ${{ github.ref_name }} by @${{ github.actor }}
|
|
|
|
on:
|
|
push:
|
|
branches: [release]
|
|
|
|
workflow_dispatch:
|
|
inputs:
|
|
deploy:
|
|
description: 'Deploy to K8S'
|
|
default: 'Skip'
|
|
required: true
|
|
type: choice
|
|
options:
|
|
- Skip
|
|
- Staging Only
|
|
- Staging + Prod
|
|
sandbox:
|
|
description: 'Deploy to Sandbox'
|
|
default: true
|
|
required: true
|
|
type: boolean
|
|
sandboxNoDbRefresh:
|
|
description: 'Sandbox Disable Daily DB Refresh'
|
|
default: false
|
|
required: true
|
|
type: boolean
|
|
skiptests:
|
|
description: 'Skip Tests'
|
|
default: false
|
|
required: true
|
|
type: boolean
|
|
skiparm:
|
|
description: 'Skip ARM64 Build'
|
|
default: false
|
|
required: true
|
|
type: boolean
|
|
ignoreLowerCoverage:
|
|
description: 'Ignore Lower Coverage'
|
|
default: false
|
|
required: true
|
|
type: boolean
|
|
updateCoverage:
|
|
description: 'Update Baseline Coverage'
|
|
default: false
|
|
required: true
|
|
type: boolean
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
# -----------------------------------------------------------------
|
|
# PREPARE
|
|
# -----------------------------------------------------------------
|
|
prepare:
|
|
name: Prepare Release
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
should_deploy: ${{ steps.buildvars.outputs.should_deploy }}
|
|
pkg_version: ${{ steps.buildvars.outputs.pkg_version }}
|
|
from_tag: ${{ steps.semver.outputs.nextStrict }}
|
|
to_tag: ${{ steps.semver.outputs.current }}
|
|
base_image_version: ${{ steps.baseimgversion.outputs.base_image_version }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
fetch-tags: false
|
|
|
|
- name: Get Next Version (Prod)
|
|
if: ${{ github.ref_name == 'release' }}
|
|
id: semver
|
|
uses: ietf-tools/semver-action@v1
|
|
with:
|
|
token: ${{ github.token }}
|
|
branch: release
|
|
skipInvalidTags: true
|
|
|
|
- name: Get Dev Version
|
|
if: ${{ github.ref_name != 'release' }}
|
|
id: semverdev
|
|
uses: ietf-tools/semver-action@v1
|
|
with:
|
|
token: ${{ github.token }}
|
|
branch: release
|
|
skipInvalidTags: true
|
|
noVersionBumpBehavior: 'current'
|
|
noNewCommitBehavior: 'current'
|
|
|
|
- name: Set Release Flag
|
|
if: ${{ github.ref_name == 'release' }}
|
|
run: |
|
|
echo "IS_RELEASE=true" >> $GITHUB_ENV
|
|
|
|
- name: Create Draft Release
|
|
uses: ncipollo/release-action@v1.14.0
|
|
if: ${{ github.ref_name == 'release' }}
|
|
with:
|
|
prerelease: true
|
|
draft: false
|
|
commit: ${{ github.sha }}
|
|
tag: ${{ steps.semver.outputs.nextStrict }}
|
|
name: ${{ steps.semver.outputs.nextStrict }}
|
|
body: '*pending*'
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Set Build Variables
|
|
id: buildvars
|
|
run: |
|
|
if [[ $IS_RELEASE ]]; then
|
|
echo "Using AUTO SEMVER mode: ${{ steps.semver.outputs.nextStrict }}"
|
|
echo "should_deploy=true" >> $GITHUB_OUTPUT
|
|
echo "pkg_version=${{ steps.semver.outputs.nextStrict }}" >> $GITHUB_OUTPUT
|
|
echo "::notice::Release ${{ steps.semver.outputs.nextStrict }} created using branch $GITHUB_REF_NAME"
|
|
else
|
|
echo "Using TEST mode: ${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER"
|
|
echo "should_deploy=false" >> $GITHUB_OUTPUT
|
|
echo "pkg_version=${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER" >> $GITHUB_OUTPUT
|
|
echo "::notice::Non-production build ${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER created using branch $GITHUB_REF_NAME"
|
|
fi
|
|
|
|
- name: Get Base Image Target Version
|
|
id: baseimgversion
|
|
run: |
|
|
echo "base_image_version=$(sed -n '1p' dev/build/TARGET_BASE)" >> $GITHUB_OUTPUT
|
|
|
|
# -----------------------------------------------------------------
|
|
# TESTS
|
|
# -----------------------------------------------------------------
|
|
|
|
tests:
|
|
name: Run Tests
|
|
uses: ./.github/workflows/tests.yml
|
|
if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
|
|
needs: [prepare]
|
|
with:
|
|
ignoreLowerCoverage: ${{ github.event.inputs.ignoreLowerCoverage == 'true' }}
|
|
skipSelenium: true
|
|
targetBaseVersion: ${{ needs.prepare.outputs.base_image_version }}
|
|
|
|
# -----------------------------------------------------------------
|
|
# RELEASE
|
|
# -----------------------------------------------------------------
|
|
release:
|
|
name: Make Release
|
|
if: ${{ !failure() && !cancelled() }}
|
|
needs: [tests, prepare]
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
packages: write
|
|
env:
|
|
SHOULD_DEPLOY: ${{needs.prepare.outputs.should_deploy}}
|
|
PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
|
|
FROM_TAG: ${{needs.prepare.outputs.from_tag}}
|
|
TO_TAG: ${{needs.prepare.outputs.to_tag}}
|
|
TARGET_BASE: ${{needs.prepare.outputs.base_image_version}}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
fetch-tags: false
|
|
|
|
- name: Launch build VM
|
|
id: azlaunch
|
|
timeout-minutes: 10
|
|
run: |
|
|
echo "Authenticating to Azure..."
|
|
az login --service-principal -u ${{ secrets.AZ_BUILD_APP_ID }} -p ${{ secrets.AZ_BUILD_PWD }} --tenant ${{ secrets.AZ_BUILD_TENANT_ID }}
|
|
|
|
echo "Creating VM..."
|
|
vminfo=$(az vm create \
|
|
--resource-group ghaDatatracker \
|
|
--name tmpGhaBuildVM-${{ github.run_number }} \
|
|
--image Ubuntu2204 \
|
|
--admin-username azureuser \
|
|
--generate-ssh-keys \
|
|
--priority Spot \
|
|
--size Standard_D8ads_v5 \
|
|
--max-price -1 \
|
|
--ephemeral-os-disk \
|
|
--os-disk-size-gb 100 \
|
|
--eviction-policy Delete \
|
|
--nic-delete-option Delete \
|
|
--os-disk-delete-option Delete \
|
|
--output tsv \
|
|
--query "publicIpAddress")
|
|
echo "ipaddr=$vminfo" >> "$GITHUB_OUTPUT"
|
|
echo "VM Public IP: $vminfo"
|
|
cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
|
|
|
|
echo "Fetching SSH host public keys..."
|
|
until ssh-keyscan -t rsa $vminfo 2> /dev/null
|
|
do
|
|
echo "Will try again in 5 seconds..."
|
|
sleep 5
|
|
done
|
|
ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
|
|
|
|
- name: Remote SSH into Build VM
|
|
uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
GITHUB_ACTOR: ${{ github.actor }}
|
|
GITHUB_SHA: ${{ github.sha }}
|
|
GITHUB_REF_NAME: ${{ github.ref_name }}
|
|
GITHUB_RUN_ID: ${{ github.run_id }}
|
|
AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_STATIC_KEY_ID }}
|
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_STATIC_KEY_SECRET }}
|
|
AWS_DEFAULT_REGION: auto
|
|
AWS_ENDPOINT_URL: ${{ secrets.CF_R2_ENDPOINT }}
|
|
PKG_VERSION: ${{ env.PKG_VERSION }}
|
|
SHOULD_DEPLOY: ${{ env.SHOULD_DEPLOY }}
|
|
SKIP_TESTS: ${{ github.event.inputs.skiptests }}
|
|
DEBIAN_FRONTEND: noninteractive
|
|
BROWSERSLIST_IGNORE_OLD_DATA: 1
|
|
TARGET_BASE: ${{ env.TARGET_BASE }}
|
|
with:
|
|
host: ${{ steps.azlaunch.outputs.ipaddr }}
|
|
port: 22
|
|
username: azureuser
|
|
command_timeout: 60m
|
|
key_path: ${{ github.workspace }}/prvkey.key
|
|
envs: GITHUB_TOKEN,GITHUB_ACTOR,GITHUB_SHA,GITHUB_REF_NAME,GITHUB_RUN_ID,AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_DEFAULT_REGION,AWS_ENDPOINT_URL,PKG_VERSION,SHOULD_DEPLOY,SKIP_TESTS,DEBIAN_FRONTEND,BROWSERSLIST_IGNORE_OLD_DATA
|
|
script_stop: true
|
|
script: |
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
lsb_release -a
|
|
sudo apt-get update
|
|
sudo apt-get upgrade -y
|
|
sudo apt-get install wget unzip curl -y
|
|
|
|
echo "=========================================================================="
|
|
echo "Installing Docker..."
|
|
echo "=========================================================================="
|
|
curl -fsSL https://get.docker.com -o get-docker.sh
|
|
sudo sh get-docker.sh
|
|
sudo docker buildx create \
|
|
--name container-builder \
|
|
--driver docker-container \
|
|
--bootstrap --use
|
|
|
|
echo "=========================================================================="
|
|
echo "Login to ghcr.io..."
|
|
echo "=========================================================================="
|
|
echo $GITHUB_TOKEN | sudo docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
|
|
|
|
echo "=========================================================================="
|
|
echo "Installing GH CLI..."
|
|
echo "=========================================================================="
|
|
sudo mkdir -p -m 755 /etc/apt/keyrings \
|
|
&& wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
|
|
&& sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
|
|
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
|
|
&& sudo apt update \
|
|
&& sudo apt install gh -y
|
|
|
|
echo "=========================================================================="
|
|
echo "Installing AWS CLI..."
|
|
echo "=========================================================================="
|
|
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
|
|
unzip awscliv2.zip
|
|
sudo ./aws/install
|
|
|
|
echo "=========================================================================="
|
|
echo "Install Node.js..."
|
|
echo "=========================================================================="
|
|
curl -fsSL https://deb.nodesource.com/setup_18.x -o nodesource_setup.sh
|
|
sudo bash nodesource_setup.sh
|
|
sudo apt-get install -y nodejs
|
|
sudo corepack enable
|
|
|
|
echo "=========================================================================="
|
|
echo "Install Python 3.x..."
|
|
echo "=========================================================================="
|
|
sudo apt-get install python3 python3-dev -y
|
|
python3 --version
|
|
|
|
echo "=========================================================================="
|
|
echo "Clone project..."
|
|
echo "=========================================================================="
|
|
sudo mkdir -p /workspace
|
|
sudo chown azureuser /workspace
|
|
cd /workspace
|
|
gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags
|
|
cd datatracker
|
|
|
|
if [ "$SKIP_TESTS" = "false" ] || [ "$GITHUB_REF_NAME" = "release" ] ; then
|
|
echo "=========================================================================="
|
|
echo "Downloading coverage..."
|
|
echo "=========================================================================="
|
|
gh run download $GITHUB_RUN_ID -n coverage
|
|
fi
|
|
|
|
echo "=========================================================================="
|
|
echo "Building project..."
|
|
echo "=========================================================================="
|
|
echo "PKG_VERSION: $PKG_VERSION"
|
|
echo "GITHUB_SHA: $GITHUB_SHA"
|
|
echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
|
|
echo "Running frontend build script..."
|
|
echo "Compiling native node packages..."
|
|
yarn rebuild
|
|
echo "Packaging static assets..."
|
|
yarn build --base=https://static.ietf.org/dt/$PKG_VERSION/
|
|
yarn legacy:build
|
|
echo "Setting version $PKG_VERSION..."
|
|
sed -i -r -e "s|^__version__ += '.*'$|__version__ = '$PKG_VERSION'|" ietf/__init__.py
|
|
sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
|
|
sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
|
|
|
|
if [ "$SHOULD_DEPLOY" = "true" ] ; then
|
|
echo "=========================================================================="
|
|
echo "Setting production flags in settings.py..."
|
|
echo "=========================================================================="
|
|
sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
|
|
fi
|
|
|
|
echo "=========================================================================="
|
|
echo "Build release tarball..."
|
|
echo "=========================================================================="
|
|
mkdir -p /workspace/release
|
|
tar -czf /workspace/release.tar.gz -X dev/build/exclude-patterns.txt .
|
|
|
|
echo "=========================================================================="
|
|
echo "Collecting statics..."
|
|
echo "=========================================================================="
|
|
echo "Using ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }}"
|
|
sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
|
|
echo "Pushing statics..."
|
|
cd static
|
|
aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
|
|
cd ..
|
|
|
|
echo "=========================================================================="
|
|
echo "Augment dockerignore for docker image build..."
|
|
echo "=========================================================================="
|
|
cat >> .dockerignore <<EOL
|
|
.devcontainer
|
|
.github
|
|
.vscode
|
|
k8s
|
|
playwright
|
|
svn-history
|
|
docker-compose.yml
|
|
EOL
|
|
|
|
echo "=========================================================================="
|
|
echo "Building Images..."
|
|
echo "=========================================================================="
|
|
sudo docker buildx build --file dev/build/Dockerfile --platform linux/amd64,linux/arm64 --tag ghcr.io/ietf-tools/datatracker:$PKG_VERSION --push .
|
|
|
|
- name: Fetch release tarball
|
|
run: |
|
|
mkdir -p /home/runner/work/release
|
|
chmod 0600 ${{ github.workspace }}/prvkey.key
|
|
scp -i ${{ github.workspace }}/prvkey.key azureuser@${{ steps.azlaunch.outputs.ipaddr }}:/workspace/release.tar.gz /home/runner/work/release/release.tar.gz
|
|
|
|
- name: Destroy Build VM + resources
|
|
if: always()
|
|
run: |
|
|
echo "Terminate VM..."
|
|
az vm delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }} --yes --force-deletion true
|
|
echo "Delete Public IP..."
|
|
az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}PublicIP --resource-type "Microsoft.Network/publicIPAddresses"
|
|
echo "Delete Network Security Group..."
|
|
az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}NSG --resource-type "Microsoft.Network/networkSecurityGroups"
|
|
echo "Delete Virtual Network..."
|
|
az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}VNET --resource-type "Microsoft.Network/virtualNetworks"
|
|
echo "Logout from Azure..."
|
|
az logout
|
|
|
|
- name: Update CHANGELOG
|
|
id: changelog
|
|
uses: Requarks/changelog-action@v1
|
|
if: ${{ env.SHOULD_DEPLOY == 'true' }}
|
|
with:
|
|
token: ${{ github.token }}
|
|
fromTag: ${{ env.FROM_TAG }}
|
|
toTag: ${{ env.TO_TAG }}
|
|
writeToFile: false
|
|
|
|
- name: Download Coverage Results
|
|
if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
|
|
uses: actions/download-artifact@v4.1.8
|
|
with:
|
|
name: coverage
|
|
|
|
- name: Prepare Coverage Action
|
|
if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
|
|
working-directory: ./dev/coverage-action
|
|
run: npm install
|
|
|
|
- name: Process Coverage Stats + Chart
|
|
id: covprocess
|
|
uses: ./dev/coverage-action/
|
|
if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
|
|
with:
|
|
token: ${{ github.token }}
|
|
tokenCommon: ${{ secrets.GH_COMMON_TOKEN }}
|
|
repoCommon: common
|
|
version: ${{needs.prepare.outputs.pkg_version}}
|
|
changelog: ${{ steps.changelog.outputs.changes }}
|
|
summary: ''
|
|
coverageResultsPath: coverage.json
|
|
histCoveragePath: historical-coverage.json
|
|
|
|
- name: Create Release
|
|
uses: ncipollo/release-action@v1.14.0
|
|
if: ${{ env.SHOULD_DEPLOY == 'true' }}
|
|
with:
|
|
allowUpdates: true
|
|
makeLatest: true
|
|
draft: false
|
|
tag: ${{ env.PKG_VERSION }}
|
|
name: ${{ env.PKG_VERSION }}
|
|
body: ${{ steps.covprocess.outputs.changelog }}
|
|
artifacts: "/home/runner/work/release/release.tar.gz,coverage.json,historical-coverage.json"
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Update Baseline Coverage
|
|
uses: ncipollo/release-action@v1.14.0
|
|
if: ${{ github.event.inputs.updateCoverage == 'true' || github.ref_name == 'release' }}
|
|
with:
|
|
allowUpdates: true
|
|
tag: baseline
|
|
omitBodyDuringUpdate: true
|
|
omitNameDuringUpdate: true
|
|
omitPrereleaseDuringUpdate: true
|
|
replacesArtifacts: true
|
|
artifacts: "coverage.json"
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Upload Build Artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: release-${{ env.PKG_VERSION }}
|
|
path: /home/runner/work/release/release.tar.gz
|
|
|
|
# -----------------------------------------------------------------
|
|
# NOTIFY
|
|
# -----------------------------------------------------------------
|
|
notify:
|
|
name: Notify
|
|
if: ${{ always() }}
|
|
needs: [prepare, tests, release]
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
|
|
|
|
steps:
|
|
- name: Notify on Slack (Success)
|
|
if: ${{ !contains(join(needs.*.result, ','), 'failure') }}
|
|
uses: slackapi/slack-github-action@v1.27.0
|
|
with:
|
|
channel-id: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
|
|
payload: |
|
|
{
|
|
"text": "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }} - <@${{ secrets.SLACK_UID_RJSPARKS }}>",
|
|
"attachments": [
|
|
{
|
|
"color": "28a745",
|
|
"fields": [
|
|
{
|
|
"title": "Status",
|
|
"short": true,
|
|
"value": "Completed"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
env:
|
|
SLACK_BOT_TOKEN: ${{ secrets.SLACK_GH_BOT }}
|
|
- name: Notify on Slack (Failure)
|
|
if: ${{ contains(join(needs.*.result, ','), 'failure') }}
|
|
uses: slackapi/slack-github-action@v1.27.0
|
|
with:
|
|
channel-id: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
|
|
payload: |
|
|
{
|
|
"text": "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }} - <@${{ secrets.SLACK_UID_RJSPARKS }}>",
|
|
"attachments": [
|
|
{
|
|
"color": "a82929",
|
|
"fields": [
|
|
{
|
|
"title": "Status",
|
|
"short": true,
|
|
"value": "Failed"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
env:
|
|
SLACK_BOT_TOKEN: ${{ secrets.SLACK_GH_BOT }}
|
|
|
|
# -----------------------------------------------------------------
|
|
# SANDBOX
|
|
# -----------------------------------------------------------------
|
|
sandbox:
|
|
name: Deploy to Sandbox
|
|
if: ${{ !failure() && !cancelled() && github.event.inputs.sandbox == 'true' }}
|
|
needs: [prepare, release]
|
|
runs-on: [self-hosted, dev-server]
|
|
environment:
|
|
name: sandbox
|
|
env:
|
|
PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Download a Release Artifact
|
|
uses: actions/download-artifact@v4.1.8
|
|
with:
|
|
name: release-${{ env.PKG_VERSION }}
|
|
|
|
- name: Deploy to containers
|
|
env:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
run: |
|
|
echo "Reset production flags in settings.py..."
|
|
sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = True/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'development'/" ietf/settings.py
|
|
echo "Install Deploy to Container CLI dependencies..."
|
|
cd dev/deploy-to-container
|
|
npm ci
|
|
cd ../..
|
|
echo "Start Deploy..."
|
|
node ./dev/deploy-to-container/cli.js --branch ${{ github.ref_name }} --domain dev.ietf.org --appversion ${{ env.PKG_VERSION }} --commit ${{ github.sha }} --ghrunid ${{ github.run_id }} --nodbrefresh ${{ github.event.inputs.sandboxNoDbRefresh }}
|
|
|
|
- name: Cleanup old docker resources
|
|
env:
|
|
DEBIAN_FRONTEND: noninteractive
|
|
run: |
|
|
docker image prune -a -f
|
|
|
|
# -----------------------------------------------------------------
|
|
# STAGING
|
|
# -----------------------------------------------------------------
|
|
staging:
|
|
name: Deploy to Staging
|
|
if: ${{ !failure() && !cancelled() && (github.event.inputs.deploy == 'Staging Only' || github.event.inputs.deploy == 'Staging + Prod' || github.ref_name == 'release') }}
|
|
needs: [prepare, release]
|
|
runs-on: ubuntu-latest
|
|
environment:
|
|
name: staging
|
|
env:
|
|
PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
|
|
|
|
steps:
|
|
- name: Deploy to staging
|
|
uses: the-actions-org/workflow-dispatch@v4
|
|
with:
|
|
workflow: deploy.yml
|
|
repo: ietf-tools/infra-k8s
|
|
ref: main
|
|
token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
|
|
inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
|
|
wait-for-completion: true
|
|
wait-for-completion-timeout: 10m
|
|
wait-for-completion-interval: 30s
|
|
display-workflow-run-url: false
|
|
|
|
# -----------------------------------------------------------------
|
|
# PROD
|
|
# -----------------------------------------------------------------
|
|
prod:
|
|
name: Deploy to Production
|
|
if: ${{ !failure() && !cancelled() && (github.event.inputs.deploy == 'Staging + Prod' || github.ref_name == 'release') }}
|
|
needs: [prepare, staging]
|
|
runs-on: ubuntu-latest
|
|
environment:
|
|
name: production
|
|
env:
|
|
PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
|
|
|
|
steps:
|
|
- name: Deploy to production
|
|
uses: the-actions-org/workflow-dispatch@v4
|
|
with:
|
|
workflow: deploy.yml
|
|
repo: ietf-tools/infra-k8s
|
|
ref: main
|
|
token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
|
|
inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
|
|
wait-for-completion: true
|
|
wait-for-completion-timeout: 10m
|
|
wait-for-completion-interval: 30s
|
|
display-workflow-run-url: false
|