national-document-repository/.github/workflows/full-deploy-to-pre-prod.yml at 1d9912b708ba23c5cb047f01b65b39047629f7b1 · NHSDigital/national-document-repository · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
name: "PRE PROD Full - Deploy to Pre-Prod"

on:
  workflow_dispatch:
    inputs:
      branch_or_tag:
        description: "Which branch or tag do you want to deploy to pre-prod?"
        required: true
        type: string
        default: main
      mock_login_enabled:
        description: "Do you want to deploy with mock login enabled?"
        required: true
        type: boolean
        default: false

permissions:
  pull-requests: write
  id-token: write # This is required for requesting the JWT
  contents: read # This is required for actions/checkout

jobs:
  view_action_parameters:
    name: View input params
    runs-on: ubuntu-latest
    steps:
      - name: Display client passed variables
        run: |
          echo Build Branch: main
          echo Sandbox: pre-prod
          echo Environment: pre-prod
          echo Cypress Base Url: ${{ vars.CYPRESS_BASE_URL }}

  lambda_test_job:
    name: Run Lambda Unit Tests
    uses: ./.github/workflows/base-lambdas-reusable-test.yml
    with:
      python_version: "3.11"
      build_branch: main

  react_testing_job:
    name: Run UI Unit Tests
    uses: ./.github/workflows/base-vitest-test.yml
    with:
      build_branch: main

  cypress_build_job:
    name: Build UI version for E2E Tests
    uses: ./.github/workflows/base-cypress-build.yml
    with:
      build_branch: main

  cypress_test_job:
    name: Run Cypress E2E Tests
    needs: [cypress_build_job]
    uses: ./.github/workflows/base-cypress-test-all-env.yml
    with:
      cypress_base_url: ${{ vars.CYPRESS_BASE_URL }}
      build_branch: main

  tag_and_release:
    needs: ["lambda_test_job", "react_testing_job", "cypress_test_job"]
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.versioning.outputs.tag || github.event.inputs.branch_or_tag }}
    permissions: write-all

    steps:
    - name: Checkout main
      if: ${{ github.event.inputs.branch_or_tag == 'main' }}
      uses: actions/checkout@v4
      with:
        ref: main
        fetch-depth: '0'

    - name: Bump version and push tag
      if: ${{ github.event.inputs.branch_or_tag == 'main' }}
      id: versioning
      uses: anothrNick/github-tag-action@1.64.0
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        WITH_V: false
        DEFAULT_BUMP: patch

    - name: View outputs
      run: |
        echo Deploying branch or tagged version to pre-prod: ${{ steps.versioning.outputs.tag || github.event.inputs.branch_or_tag }}

  publish_all_lambda_layers:
    name: Publish all Lambda Layers
    needs: ["tag_and_release"]
    uses: ./.github/workflows/base-lambda-layer-reusable-publish-all.yml
    with:
      build_branch: ${{ needs.tag_and_release.outputs.version }}
      sandbox: pre-prod
      environment: pre-prod
      python_version: "3.11"
    secrets:
      AWS_ASSUME_ROLE: ${{ secrets.AWS_ASSUME_ROLE }}

  deploy_all_lambdas:
    name: Deploy all Lambdas
    needs: ["tag_and_release", "publish_all_lambda_layers"]
    uses: ./.github/workflows/base-lambdas-reusable-deploy-all.yml
    with:
      build_branch: ${{ needs.tag_and_release.outputs.version }}
      sandbox: pre-prod
      environment: pre-prod
      python_version: "3.11"
      mock_login_enabled: ${{ inputs.mock_login_enabled }}
    secrets:
      AWS_ASSUME_ROLE: ${{ secrets.AWS_ASSUME_ROLE }}

  deploy_ui:
    name: Deploy UI
    needs: ["tag_and_release"]
    uses: ./.github/workflows/base-deploy-ui.yml
    with:
      build_branch: ${{ needs.tag_and_release.outputs.version }}
      environment: pre-prod
      sandbox: pre-prod
    secrets:
      AWS_ASSUME_ROLE: ${{ secrets.AWS_ASSUME_ROLE }}

  deploy_data_collection:
    name: Deploy ODS Data Collection
    needs: ["tag_and_release"]
    uses: ./.github/workflows/base-data-collection.yml
    with:
      build_branch: ${{ needs.tag_and_release.outputs.version }}
      environment: pre-prod
      sandbox: pre-prod
    secrets:
      AWS_ASSUME_ROLE: ${{ secrets.AWS_ASSUME_ROLE }}