Workflows to deploy tagged releases to preprod and prod

Author: lottspot

.github/workflows/deploy.yml

@@ -0,0 +1,35 @@
+name: Deploy to production
+
+on:
+  pull_request:
+    branches:
+      - releases/v1
+    types:
+      - closed
+
+env:
+  # Required for action steebchen/kubectl
+  KUBE_CONFIG_DATA: ${{ secrets.kubeconfig_data_prod }}
+
+jobs:
+  deploy-prod:
+    if: github.event.pull_request.merged
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Deploy to prod
+        uses: steebchen/[email protected]
+        with:
+          args: apply -f k8s/app.yaml
+
+      - name: Wait for deploy to complete
+        uses: steebchen/[email protected]
+        with:
+          args: -n chime rollout status deployment.v1.apps/chime
+
+      - name: Show completed deployment
+        uses: steebchen/[email protected]
+        with:
+          args: -n chime get deployment chime -o yaml

.github/workflows/dockerpublish.yml

@@ -11,6 +11,9 @@ on:
 
 env:
   IMAGE_NAME: penn-chime
+  DEPLOY_PUSH_BRANCH: develop
+  # Required for action steebchen/kubectl
+  KUBE_CONFIG_DATA: ${{ secrets.kubeconfig_data_preprod }}
 
 jobs:
   # Run tests.
@@ -66,3 +69,52 @@ jobs:
 
           docker tag image $IMAGE_ID:$VERSION
           docker push $IMAGE_ID:$VERSION
+
+  deploy-preprod:
+
+    needs: push
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0  # Needed for proper rebase
+      - name: Update application manifest
+        run: |
+          # Strip git ref prefix from version
+          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
+
+          # Strip "v" prefix from tag name
+          [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
+
+          # Update image version in application manifest
+          sed -Ei "s,(- image: docker.pkg.github.com)(.*),\1/${{ github.repository }}/$IMAGE_NAME:$VERSION," k8s/app.yaml
+
+          # Show updated manifest file
+          cat k8s/app.yaml
+
+      - name: Deploy to preprod
+        uses: steebchen/[email protected]
+        with:
+          args: apply -f k8s/app.yaml
+
+      - name: Wait for deploy to complete
+        uses: steebchen/[email protected]
+        with:
+          args: -n chime rollout status deployment.v1.apps/chime
+
+      - name: Show completed deployment
+        uses: steebchen/[email protected]
+        with:
+          args: -n chime get deployment chime -o yaml
+
+      - name: Push manifest update
+        uses: github-actions-x/[email protected]
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          push-branch: ${{ env.DEPLOY_PUSH_BRANCH }}
+          commit-message: Deploy version ${VERSION} to preprod
+          rebase: 'true'
+          name: Chime CI
+          email: [email protected]