ci: refactor deployment pipelines and add manual deployment workflow for app whitelist

Author: TartanLeGrand

.drone.yml

@@ -758,106 +758,6 @@ steps:
       branch:
         - main
 
----
-#pipeline to deploy app whitelist on iexec
-kind: pipeline
-type: docker
-name: protected-data-delivery-dapp deploy whitelist
-
-trigger:
-  event:
-    - promote
-  target:
-    # deploy a whitelist for the protected-data-delivery-dapp on the staging env
-    - protected-data-delivery-dapp-deploy-app-whitelist-staging
-    # deploy a whitelist for the protected-data-delivery-dapp on the prod env
-    - protected-data-delivery-dapp-deploy-app-whitelist-prod
-  branch:
-    - develop
-    - main
-
-steps:
-  - name: install deps
-    image: node:18.19
-    pull: always
-    commands:
-      - cd packages/protected-data-delivery-dapp/deployment
-      - npm ci
-
-  - name: create app whitelist prod
-    image: node:18.19
-    pull: always
-    environment:
-      ENV: prod
-      WALLET_PRIVATE_KEY:
-        from_secret: protectedDataSharing-dapp-prod-privatekey
-    commands:
-      - cd packages/protected-data-delivery-dapp/deployment
-      - npm run create-app-whitelist
-    when:
-      target:
-        - protected-data-delivery-dapp-deploy-app-whitelist-prod
-      branch:
-        - main
-
-  - name: create app whitelist staging
-    image: node:18.19
-    pull: always
-    environment:
-      ENV: staging
-      WALLET_PRIVATE_KEY:
-        from_secret: protectedDataSharing-dapp-dev-privatekey
-    commands:
-      - cd packages/protected-data-delivery-dapp/deployment
-      - npm run create-app-whitelist
-    when:
-      target:
-        - protected-data-delivery-dapp-deploy-app-whitelist-staging
-      branch:
-        - develop
-
-  - name: update prod env
-    image: node:18.19
-    environment:
-      ENV: prod
-    commands:
-      - cd environments
-      - KEY=protectedDataDeliveryWhitelistAddress VALUE=$(cat ../packages/protected-data-delivery-dapp/deployment/.app-whitelist-address) npm run update-env
-      - git add environments.json
-      - git commit -m "$DRONE_DEPLOY_TO deployment $DRONE_BUILD_NUMBER $DRONE_COMMIT" --author="drone-product <[email protected]>"
-    when:
-      target:
-        - protected-data-delivery-dapp-deploy-app-whitelist-prod
-      branch:
-        - main
-
-  - name: update staging env
-    image: node:18.19
-    environment:
-      ENV: staging
-    commands:
-      - cd environments
-      - KEY=protectedDataDeliveryWhitelistAddress VALUE=$(cat ../packages/protected-data-delivery-dapp/deployment/.app-whitelist-address) npm run update-env
-      - git add environments.json
-      - git commit -m "$DRONE_DEPLOY_TO deployment $DRONE_BUILD_NUMBER $DRONE_COMMIT" --author="drone-product <[email protected]>"
-    when:
-      target:
-        - protected-data-delivery-dapp-deploy-app-whitelist-staging
-      branch:
-        - develop
-
-  - name: git-push
-    image: appleboy/drone-git-push
-    settings:
-      remote: ssh://[email protected]/iExecBlockchainComputing/dataprotector-sdk.git
-      branch: update-env-${DRONE_BUILD_NUMBER}
-      ssh_key:
-        from_secret: ssh-key-team-product-github-push
-    when:
-      target:
-        - protected-data-delivery-dapp-deploy-app-whitelist-staging
-        - protected-data-delivery-dapp-deploy-app-whitelist-prod
-
 ---
 # dapp content-creator: build non-scone (non-tee) docker image & publish on docker-regis (dev)
 kind: pipeline

.github/workflows/deploy-dapp.yml

@@ -0,0 +1,67 @@
+name: Deploy App Whitelist on iExec
+
+on:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: 'Select deployment target'
+        required: true
+        default: staging
+        type: choice
+        options:
+          - staging
+          - prod
+
+jobs:
+  deploy-app-whitelist:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 18
+
+      - name: Install Dependencies
+        working-directory: packages/protected-data-delivery-dapp/deployment
+        run: npm ci
+
+      - name: Create App Whitelist (Staging)
+        if: ${{ github.event.inputs.target == 'staging' }}
+        working-directory: packages/protected-data-delivery-dapp/deployment
+        run: npm run create-app-whitelist
+        env:
+          ENV: staging
+          WALLET_PRIVATE_KEY: ${{ secrets.PROTECTED_DAPP_DEV_PRIVATEKEY }}
+
+      - name: Create App Whitelist (Prod)
+        if: ${{ github.event.inputs.target == 'prod' }}
+        working-directory: packages/protected-data-delivery-dapp/deployment
+        run: npm run create-app-whitelist
+        env:
+          ENV: prod
+          WALLET_PRIVATE_KEY: ${{ secrets.PROTECTED_DAPP_PROD_PRIVATEKEY }}
+
+      - name: Update Environment File (Staging)
+        if: ${{ github.event.inputs.target == 'staging' }}
+        working-directory: environments
+        run: |
+          KEY=protectedDataDeliveryWhitelistAddress VALUE=$(cat ../packages/protected-data-delivery-dapp/deployment/.app-whitelist-address) npm run update-env
+          git add environments.json
+          git commit -m "Deploy staging whitelist - ${{ github.sha }}" --author="drone-product <[email protected]>" || echo "No changes to commit"
+
+      - name: Update Environment File (Prod)
+        if: ${{ github.event.inputs.target == 'prod' }}
+        working-directory: environments
+        run: |
+          KEY=protectedDataDeliveryWhitelistAddress VALUE=$(cat ../packages/protected-data-delivery-dapp/deployment/.app-whitelist-address) npm run update-env
+          git add environments.json
+          git commit -m "Deploy prod whitelist - ${{ github.sha }}" --author="drone-product <[email protected]>" || echo "No changes to commit"
+
+      - name: Setup SSH for Git Push
+        uses: webfactory/[email protected]
+        with:
+          ssh-private-key: ${{ secrets.SSH_KEY_TEAM_PRODUCT_GITHUB_PUSH }}
+
+      - name: Git Push Environment Update
+        run: git push ssh://[email protected]/iExecBlockchainComputing/dataprotector-sdk.git HEAD:update-env-${{ github.run_number }}