Merge pull request #13 from datavisyn/add_revision_as_tag

Add revision as tag

Author: dvvanessastoiber

.github/workflows/deploy-product.yml

@@ -14,7 +14,12 @@ on:
       DV_AWS_ECR_REGISTRY:
         required: false
       DV_BOT_USER:
-        required: true
+        required: false
+      DV_AWS_ECR_ROLE:
+        required: false
+      DV_AWS_REGION:
+        required: false
+
     inputs:
       stage:
         description: "stage that should be deployed (develop|qa|production)"
@@ -24,6 +29,16 @@ on:
         description: "customer for that the app should be deployed"
         required: true
         type: string
+      add_revision_as_tag:
+        description: "add revision label as tag"
+        required: false
+        type: boolean
+        default: false
+    outputs:
+      revision_label:
+        description: "revision that is stored as a label"
+        value: ${{ jobs.deploy.outputs.revision_label }}
+
 
 permissions:
   id-token: write
@@ -40,6 +55,8 @@ env:
 jobs:
   deploy:
     runs-on: ubuntu-20.04
+    outputs:
+      revision_label: ${{ steps.get-revision-label.outputs.revision_label }}
     steps:
       # checkout repo to get package.json
       - uses: actions/checkout@v3
@@ -62,6 +79,7 @@ jobs:
           branch_name: ${{ github.ref_name }}
           time_zone: ${{ env.TIME_ZONE }}
       - name: trigger deployment
+        id: trigger-deployment
         uses: datavisyn/github-action-trigger-workflow@v1
         with:
           owner: "datavisyn"
@@ -70,4 +88,25 @@ jobs:
           workflow_file_name: "deploy-app.yml"
           ref: ${{ env.WORKFLOW_BRANCH }}
           github_user: ${{ secrets.DV_BOT_USER }}
-          client_payload: '{ "app": "${{ steps.get-parameters.outputs.app }}", "customer": "${{ inputs.customer }}", "stage": "${{ inputs.stage }}", "sub_app": "${{ steps.get-parameters.outputs.sub_app }}", "branch": "${{ steps.get-parameters.outputs.image_tag2 }}" }'
+          client_payload: '{ "app": "${{ steps.get-parameters.outputs.app }}", "customer": "${{ inputs.customer }}", "stage": "${{ inputs.stage }}", "sub_app": "${{ steps.get-parameters.outputs.sub_app }}", "branch": "${{ steps.get-parameters.outputs.image_tag2 }}", "add_revision_as_tag": "${{ inputs.add_revision_as_tag }}" }'
+      - name: Configure AWS Credentials
+        if: ${{ inputs.add_revision_as_tag == true }}
+        uses: aws-actions/[email protected]
+        with:
+          role-to-assume: ${{ secrets.DV_AWS_ECR_ROLE }}
+          aws_role: ${{ secrets.DV_AWS_ECR_ROLE }}
+          aws-region: ${{ secrets.DV_AWS_REGION }}
+      - name: Login to Amazon ECR
+        if: ${{ inputs.add_revision_as_tag == true }}
+        id: login-ecr
+        uses: aws-actions/[email protected]
+      - name: get revision label
+        id: get-revision-label
+        if: ${{ inputs.add_revision_as_tag == true }}
+        run: |
+          echo "fetch labels of image"
+          ECR_REPO=$(echo ${{ steps.get-parameters.outputs.ecr_repos }} | cut -d ',' -f 1)
+          echo "ECR_REPO: $ECR_REPO"
+          MANIFEST=$(aws ecr batch-get-image --repository-name "$ECR_REPO" --image-id imageTag="${{ steps.get-parameters.outputs.image_tag2 }}" --accepted-media-types "application/vnd.docker.distribution.manifest.v1+json" --output json |jq -r '.images[].imageManifest' |jq -r '.history[0].v1Compatibility' |jq -r '.config.Labels | to_entries | .[] | select(.key=="org.opencontainers.image.revision") | .value')
+          echo "$MANIFEST"
+          echo "revision_label=$MANIFEST" >> "$GITHUB_OUTPUT"