-
Notifications
You must be signed in to change notification settings - Fork 654
260 lines (228 loc) Β· 8.59 KB
/
deploy-site.yml
File metadata and controls
260 lines (228 loc) Β· 8.59 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
name: π Deploy Site
on:
workflow_call:
inputs:
should_deploy:
required: false
type: boolean
default: false
run_pre_deploy_health_check:
required: false
type: boolean
default: false
workflow_dispatch:
inputs:
should_deploy:
description: Whether to run the Fly deploy job.
required: false
type: boolean
default: true
run_pre_deploy_health_check:
description: Whether to run the production pre-deploy health check.
required: false
type: boolean
default: false
env:
# Set `SITE_CACHE_VERSION` as a repository variable so all workflows share one
# knob for invalidation.
SITE_CACHE_VERSION: ${{ vars.SITE_CACHE_VERSION }}
NODE_VERSION: 24
jobs:
verify:
name: β
Site Gate
runs-on: ubuntu-latest
steps:
- name: β¬οΈ Checkout repo
uses: actions/checkout@v6
- name: β Setup node
uses: actions/setup-node@v6
with:
node-version: ${{ env.NODE_VERSION }}
cache: npm
cache-dependency-path: package-lock.json
- name: π₯ Install site deps
run: npm ci --workspace=kentcdodds.com
- name: π Copy test env vars
run: cp services/site/.env.example services/site/.env
- name: π§° Cache Playwright browsers
id: playwright-cache
uses: actions/cache@v5
with:
path: ~/.cache/ms-playwright
key: playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-${{ hashFiles('package-lock.json') }}
restore-keys: |
playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-
- name: π Install Playwright browsers
if: steps.playwright-cache.outputs.cache-hit != 'true'
run: npm run test:e2e:install --workspace kentcdodds.com
- name: π¬ Verify site
run: npm run ci:verify --workspace=kentcdodds.com
- name: π¦ Prime Site Cache
id: site-cache
if: ${{ inputs.run_pre_deploy_health_check }}
uses: actions/cache@v5
with:
path: services/site/other/cache.db
# `other/cache.db` is a derived artifact. Key it off the inputs that can
# make it stale (content + cache/MDX code + deps), not `github.sha`.
key: >-
site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os
}}-node${{ env.NODE_VERSION }}-${{ hashFiles(
'package-lock.json',
'services/site/app/utils/cache.server.ts',
'services/site/app/utils/compile-mdx.server.ts',
'services/site/app/utils/github.server.ts',
'services/site/app/utils/markdown.server.ts',
'services/site/app/utils/mdx.server.ts',
'services/site/content/**',
'services/site/mocks/**'
) }}
restore-keys: |
site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os }}-node${{ env.NODE_VERSION }}-
- name: π Setup Database (migrations)
if:
${{ inputs.run_pre_deploy_health_check &&
steps.site-cache.outputs.cache-hit != 'true' }}
run: npx prisma migrate deploy
working-directory: services/site
- name: π
Generate Site Cache
if:
${{ inputs.run_pre_deploy_health_check &&
steps.site-cache.outputs.cache-hit != 'true' }}
run: npm run prime-cache:mocks
- name: π©Ί Smoke test /healthcheck (production build)
if: ${{ inputs.run_pre_deploy_health_check }}
run: npm run predeploy:healthcheck
env:
MOCKS: 'true'
- name: π¦ Upload site build artifacts
uses: actions/upload-artifact@v6
with:
name: site-build-artifacts
path: |
services/site/build/
services/site/server-build/
services/site/app/utils/prisma-generated.server/
retention-days: 7
playwright:
name: π Playwright
needs: [verify]
runs-on: ubuntu-latest
timeout-minutes: 60
continue-on-error: true
steps:
- name: β¬οΈ Checkout repo
uses: actions/checkout@v6
- name: π Copy test env vars
run: cp services/site/.env.example services/site/.env
- name: β Setup node
uses: actions/setup-node@v6
with:
node-version: ${{ env.NODE_VERSION }}
cache: npm
cache-dependency-path: package-lock.json
- name: π₯ Install site deps
run: npm ci --workspace=kentcdodds.com
- name: π§° Cache Playwright browsers
id: playwright-cache
uses: actions/cache@v5
with:
path: ~/.cache/ms-playwright
key: playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-${{ hashFiles('package-lock.json') }}
restore-keys: |
playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-
- name: π¬ Setup ffmpeg
uses: FedericoCarboni/setup-ffmpeg@v3
- name: π Install Playwright Browsers
if: steps.playwright-cache.outputs.cache-hit != 'true'
run: npm run test:e2e:install --workspace kentcdodds.com
- name: π¦ Download site build artifacts
uses: actions/download-artifact@v6
with:
name: site-build-artifacts
path: services/site
- name: π Setup Database
run: npx prisma migrate reset --force
working-directory: services/site
- name: π¦ Prime Site Cache
id: site-cache
uses: actions/cache@v5
with:
path: services/site/other/cache.db
# `other/cache.db` is a derived artifact. Key it off the inputs that can
# make it stale (content + cache/MDX code + deps), not `github.sha`.
key: >-
site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os
}}-node${{ env.NODE_VERSION }}-${{ hashFiles(
'package-lock.json',
'services/site/app/utils/cache.server.ts',
'services/site/app/utils/compile-mdx.server.ts',
'services/site/app/utils/github.server.ts',
'services/site/app/utils/markdown.server.ts',
'services/site/app/utils/mdx.server.ts',
'services/site/content/**',
'services/site/mocks/**'
) }}
restore-keys: |
site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os }}-node${{ env.NODE_VERSION }}-
- name: π
Generate Site Cache
if: steps.site-cache.outputs.cache-hit != 'true'
run: npm run prime-cache:mocks
- name: π Playwright tests
run: npx playwright test
working-directory: services/site
env:
PORT: 8811
- name: π Upload report
uses: actions/upload-artifact@v6
if: always()
with:
name: playwright-report
path: services/site/playwright-report/
retention-days: 30
deploy:
name: π Deploy Site
runs-on: ubuntu-latest
needs: [verify]
if:
${{ inputs.should_deploy && (github.ref == 'refs/heads/main' || github.ref
== 'refs/heads/dev') }}
environment: site-${{ github.ref_name == 'main' && 'production' || 'staging' }}
concurrency:
group: deploy-site-${{ github.ref_name }}
cancel-in-progress: true
steps:
- name: β¬οΈ Checkout repo
uses: actions/checkout@v6
with:
fetch-depth: '50'
- name: π Read app name
uses: SebRollen/toml-action@v1.2.0
id: app_name
with:
file: 'fly.toml'
field: 'app'
- name: π Setup Fly
uses: superfly/flyctl-actions/setup-flyctl@1.5
- name: π€ update robots
if: ${{ github.ref == 'refs/heads/dev' }}
run:
# replace "Allow" with "Disallow" in services/site/public/robots.txt for staging
sed -i 's/Allow/Disallow/g' services/site/public/robots.txt
- name: π Deploy Staging
if: ${{ github.ref == 'refs/heads/dev' }}
run:
flyctl deploy --depot --remote-only --build-arg COMMIT_SHA=${{
github.sha }} --dockerfile services/site/Dockerfile --app ${{
steps.app_name.outputs.value }}-staging
env:
FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
- name: π Deploy Production
if: ${{ github.ref == 'refs/heads/main' }}
run:
flyctl deploy --depot --remote-only --build-arg COMMIT_SHA=${{
github.sha }} --dockerfile services/site/Dockerfile --build-secret
SENTRY_AUTH_TOKEN=${{
secrets.SENTRY_AUTH_TOKEN }}
env:
FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}