Browse Source
* Production deployment action * Add CI back to production deploy action * Consistent naming * Use PG13.5 everywhere * Pipeline name * No automated triggers * Indentation * Define workflow trigger * Shouldn't need to set timezone as env var * Add additional env vars * Update node and ruby * Checkout latest release tag for production pipeline * cf8 * Fix repo name * Repo name * Env var for repo urlpull/336/head v0.0.1
baarkerlounger
3 years ago
committed by
GitHub
2 changed files with 206 additions and 23 deletions
@ -0,0 +1,188 @@ |
|||||||
|
name: 'Production CI/CD Pipeline' |
||||||
|
|
||||||
|
on: |
||||||
|
release: |
||||||
|
types: [released] |
||||||
|
workflow_dispatch: |
||||||
|
|
||||||
|
concurrency: 'production' |
||||||
|
|
||||||
|
env: |
||||||
|
REPO_URL: communitiesuk/mhclg-data-collection-beta |
||||||
|
|
||||||
|
defaults: |
||||||
|
run: |
||||||
|
shell: bash |
||||||
|
|
||||||
|
jobs: |
||||||
|
test: |
||||||
|
name: Test |
||||||
|
runs-on: ubuntu-latest |
||||||
|
|
||||||
|
services: |
||||||
|
postgres: |
||||||
|
image: postgres:13.5 |
||||||
|
env: |
||||||
|
POSTGRES_PASSWORD: password |
||||||
|
POSTGRES_USER: postgres |
||||||
|
POSTGRES_DB: data_collector |
||||||
|
ports: |
||||||
|
- 5432:5432 |
||||||
|
# needed because the postgres container does not provide a healthcheck |
||||||
|
# tmpfs makes DB faster by using RAM |
||||||
|
options: >- |
||||||
|
--mount type=tmpfs,destination=/var/lib/postgresql/data |
||||||
|
--health-cmd pg_isready |
||||||
|
--health-interval 10s |
||||||
|
--health-timeout 5s |
||||||
|
--health-retries 5 |
||||||
|
env: |
||||||
|
RAILS_ENV: test |
||||||
|
GEMFILE_RUBY_VERSION: 3.1.0 |
||||||
|
DB_HOST: localhost |
||||||
|
DB_DATABASE: data_collector |
||||||
|
DB_USERNAME: postgres |
||||||
|
DB_PASSWORD: password |
||||||
|
|
||||||
|
steps: |
||||||
|
- name: Get latest release with tag |
||||||
|
id: latestrelease |
||||||
|
run: | |
||||||
|
echo "::set-output name=releasetag::$(curl -s https://api.github.com/repos/${REPO_URL}/releases/latest | jq '.tag_name' | sed 's/\"//g')" |
||||||
|
- name: Confirm release tag |
||||||
|
run: | |
||||||
|
echo ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
- name: Checkout tag |
||||||
|
uses: actions/checkout@v2 |
||||||
|
with: |
||||||
|
ref: ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
|
||||||
|
- name: Set up Ruby |
||||||
|
uses: ruby/setup-ruby@v1 |
||||||
|
with: |
||||||
|
# runs 'bundle install' and caches installed gems automatically |
||||||
|
bundler-cache: true |
||||||
|
- name: Set up node |
||||||
|
uses: actions/setup-node@v2 |
||||||
|
with: |
||||||
|
node-version: '16' |
||||||
|
|
||||||
|
- name: Create DB |
||||||
|
run: | |
||||||
|
bundle exec rake db:prepare |
||||||
|
|
||||||
|
- name: Compile Assets |
||||||
|
run: | |
||||||
|
bundle exec rake assets:precompile |
||||||
|
|
||||||
|
- name: Run tests |
||||||
|
run: | |
||||||
|
bundle exec rspec |
||||||
|
|
||||||
|
lint: |
||||||
|
name: Lint |
||||||
|
runs-on: ubuntu-latest |
||||||
|
steps: |
||||||
|
- name: Get latest release with tag |
||||||
|
id: latestrelease |
||||||
|
run: | |
||||||
|
echo "::set-output name=releasetag::$(curl -s https://api.github.com/repos/${REPO_URL}/releases/latest | jq '.tag_name' | sed 's/\"//g')" |
||||||
|
- name: Confirm release tag |
||||||
|
run: | |
||||||
|
echo ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
- name: Checkout tag |
||||||
|
uses: actions/checkout@v2 |
||||||
|
with: |
||||||
|
ref: ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
|
||||||
|
- name: Set up Ruby |
||||||
|
uses: ruby/setup-ruby@v1 |
||||||
|
with: |
||||||
|
# runs 'bundle install' and caches installed gems automatically |
||||||
|
bundler-cache: true |
||||||
|
|
||||||
|
- name: Rubocop |
||||||
|
run: | |
||||||
|
bundle exec rubocop |
||||||
|
|
||||||
|
audit: |
||||||
|
name: Audit dependencies |
||||||
|
runs-on: ubuntu-latest |
||||||
|
steps: |
||||||
|
- name: Get latest release with tag |
||||||
|
id: latestrelease |
||||||
|
run: | |
||||||
|
echo "::set-output name=releasetag::$(curl -s https://api.github.com/repos/${REPO_URL}/releases/latest | jq '.tag_name' | sed 's/\"//g')" |
||||||
|
- name: Confirm release tag |
||||||
|
run: | |
||||||
|
echo ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
- name: Checkout tag |
||||||
|
uses: actions/checkout@v2 |
||||||
|
with: |
||||||
|
ref: ${{ steps.latestrelease.outputs.releasetag }}SS |
||||||
|
|
||||||
|
- name: Set up Ruby |
||||||
|
uses: ruby/setup-ruby@v1 |
||||||
|
with: |
||||||
|
# runs 'bundle install' and caches installed gems automatically |
||||||
|
bundler-cache: true |
||||||
|
|
||||||
|
- name: Audit |
||||||
|
run: | |
||||||
|
bundle exec bundler-audit |
||||||
|
|
||||||
|
deploy: |
||||||
|
name: Deploy |
||||||
|
|
||||||
|
runs-on: ubuntu-latest |
||||||
|
environment: 'production' |
||||||
|
needs: [lint, test, audit] |
||||||
|
|
||||||
|
steps: |
||||||
|
- name: Get latest release with tag |
||||||
|
id: latestrelease |
||||||
|
run: | |
||||||
|
echo "::set-output name=releasetag::$(curl -s https://api.github.com/repos/communitiesuk/mhclg-data-collection-beta/releases/latest | jq '.tag_name' | sed 's/\"//g')" |
||||||
|
- name: Confirm release tag |
||||||
|
run: | |
||||||
|
echo ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
- name: Checkout tag |
||||||
|
uses: actions/checkout@v2 |
||||||
|
with: |
||||||
|
ref: ${{ steps.latestrelease.outputs.releasetag }} |
||||||
|
|
||||||
|
- name: Install Cloud Foundry CLI |
||||||
|
run: | |
||||||
|
wget -q -O - https://packages.cloudfoundry.org/debian/cli.cloudfoundry.org.key | sudo apt-key add - |
||||||
|
echo "deb https://packages.cloudfoundry.org/debian stable main" | sudo tee /etc/apt/sources.list.d/cloudfoundry-cli.list |
||||||
|
sudo apt-get update |
||||||
|
sudo apt-get install cf8-cli |
||||||
|
- name: Deploy |
||||||
|
env: |
||||||
|
CF_USERNAME: ${{ secrets.CF_USERNAME }} |
||||||
|
CF_PASSWORD: ${{ secrets.CF_PASSWORD }} |
||||||
|
CF_API_ENDPOINT: ${{ secrets.CF_API_ENDPOINT }} |
||||||
|
CF_SPACE: ${{ secrets.CF_SPACE }} |
||||||
|
CF_ORG: ${{ secrets.CF_ORG }} |
||||||
|
API_USER: ${{ secrets.API_USER }} |
||||||
|
API_KEY: ${{ secrets.API_KEY }} |
||||||
|
APP_NAME: dluhc-core-staging |
||||||
|
GOVUK_NOTIFY_API_KEY: ${{ secrets.GOVUK_NOTIFY_API_KEY }} |
||||||
|
APP_HOST: ${{ secrets.APP_HOST }} |
||||||
|
RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }} |
||||||
|
IMPORT_PAAS_INSTANCE: ${{ secrets.IMPORT_PAAS_INSTANCE }} |
||||||
|
EXPORT_PAAS_INSTANCE: ${{ secrets.EXPORT_PAAS_INSTANCE }} |
||||||
|
SENTRY_DSN: ${{ secrets.SENTRY_DSN }} |
||||||
|
run: | |
||||||
|
cf api $CF_API_ENDPOINT |
||||||
|
cf auth |
||||||
|
cf target -o $CF_ORG -s $CF_SPACE |
||||||
|
cf set-env $APP_NAME API_USER $API_USER |
||||||
|
cf set-env $APP_NAME API_KEY $API_KEY |
||||||
|
cf set-env $APP_NAME GOVUK_NOTIFY_API_KEY $GOVUK_NOTIFY_API_KEY |
||||||
|
cf set-env $APP_NAME APP_HOST $APP_HOST |
||||||
|
cf set-env $APP_NAME RAILS_MASTER_KEY $RAILS_MASTER_KEY |
||||||
|
cf set-env $APP_NAME IMPORT_PAAS_INSTANCE $IMPORT_PAAS_INSTANCE |
||||||
|
cf set-env $APP_NAME EXPORT_PAAS_INSTANCE $EXPORT_PAAS_INSTANCE |
||||||
|
cf set-env $APP_NAME SENTRY_DSN $SENTRY_DSN |
||||||
|
cf push $APP_NAME --strategy rolling |
||||||
Loading…
Reference in new issue