create-instance.yml

name: Create Instance

on:
  workflow_call:
    inputs:
      INSTANCE_NAME:
        description: "Instance name (must be unique and DNS-compliant)"
        required: true
        type: string
      INSTANCE_TEMPLATE_REPOSITORY:
        description: "Template repository URL"
        required: false
        default: "https://github.com/open-craft/launchpad-cluster-template.git"
        type: string
      INSTANCE_TEMPLATE_VERSION:
        description: "Version of the instance template to use"
        required: false
        default: "main"
        type: string
      PLATFORM_NAME:
        description: 'Platform name (e.g., "My Open edX Platform")'
        required: true
        type: string
      EDX_PLATFORM_REPOSITORY:
        description: "edX Platform repository URL"
        required: false
        default: "https://github.com/openedx/edx-platform.git"
        type: string
      EDX_PLATFORM_VERSION:
        description: "edX Platform version/branch"
        required: false
        default: "master"
        type: string
      TUTOR_VERSION:
        description: "Tutor version"
        required: false
        default: "latest"
        type: string
      LAUNCHPAD_CLI_VERSION:
        description: "Launchpad CLI version"
        required: false
        default: "main"
        type: string
      RUNNER_WORKFLOW_LABEL:
        description: 'The label of the runner workflow to run'
        required: false
        default: "ubuntu-latest"
        type: string
    secrets:
      TERRAFORM_SECRETS:
        required: true
      LAUNCHPAD_DOCKER_REGISTRY_CREDENTIALS:
        required: true
      LAUNCHPAD_MYSQL_HOST:
        required: false
      LAUNCHPAD_MYSQL_PORT:
        required: false
      LAUNCHPAD_MYSQL_ROOT_USER:
        required: true
      LAUNCHPAD_MYSQL_ROOT_PASSWORD:
        required: true
      LAUNCHPAD_MONGODB_HOST:
        required: false
      LAUNCHPAD_MONGODB_PORT:
        required: false
      LAUNCHPAD_MONGODB_PROVIDER:
        required: true
      LAUNCHPAD_MONGODB_CLUSTER_ID:
        required: true
      LAUNCHPAD_MONGODB_REPLICA_SET:
        required: false
      LAUNCHPAD_MONGODB_AUTH_SOURCE:
        required: false
      LAUNCHPAD_DIGITALOCEAN_TOKEN:
        required: true
      LAUNCHPAD_STORAGE_TYPE:
        required: true
      LAUNCHPAD_STORAGE_REGION:
        required: true
      LAUNCHPAD_STORAGE_ACCESS_KEY_ID:
        required: true
      LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY:
        required: true
      SSH_PRIVATE_KEY:
        required: true

jobs:
  create-instance:
    runs-on: ${{ inputs.RUNNER_WORKFLOW_LABEL }}
    concurrency:
      group: create-instance-${{ inputs.INSTANCE_NAME }}
      cancel-in-progress: false

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Setup SSH agent for private repositories cloning
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}

      - name: Add GitHub to known hosts
        run: |
          ssh-keyscan github.com >> ~/.ssh/known_hosts

      - name: Configure git user
        run: |
          git config user.name "GitHub Actions"
          git config user.email "actions@github.com"

      - name: Install Launchpad CLI
        env:
          LAUNCHPAD_CLI_VERSION: ${{ inputs.LAUNCHPAD_CLI_VERSION }}
        run: |
          uv tool install git+https://github.com/open-craft/launchpad-cluster-template.git@${{ inputs.LAUNCHPAD_CLI_VERSION }}#subdirectory=tooling

      - name: Set up kubectl
        uses: azure/setup-kubectl@v4

      - name: Set up OpenTofu
        uses: opentofu/setup-opentofu@v1
        with:
          tofu_version: latest

      - name: Create Terraform secrets file
        working-directory: "infrastructure"
        env:
          TERRAFORM_SECRETS: ${{ secrets.TERRAFORM_SECRETS }}
        run: |
          echo "$TERRAFORM_SECRETS" > secrets.auto.tfvars

      - name: Initialize Terraform
        working-directory: "infrastructure"
        env:
          TF_CLI_ARGS: "-no-color"
          AWS_ACCESS_KEY_ID: ${{ secrets.LAUNCHPAD_STORAGE_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY }}
        run: |
          tofu init -input=false
          tofu refresh

      - name: Create instance
        env:
          LAUNCHPAD_LOG_LEVEL: DEBUG
          LAUNCHPAD_DOCKER_REGISTRY_CREDENTIALS: ${{ secrets.LAUNCHPAD_DOCKER_REGISTRY_CREDENTIALS }}
          LAUNCHPAD_MYSQL_HOST: ${{ secrets.LAUNCHPAD_MYSQL_HOST }}
          LAUNCHPAD_MYSQL_PORT: ${{ secrets.LAUNCHPAD_MYSQL_PORT }}
          LAUNCHPAD_MYSQL_ROOT_USER: ${{ secrets.LAUNCHPAD_MYSQL_ROOT_USER }}
          LAUNCHPAD_MYSQL_ROOT_PASSWORD: ${{ secrets.LAUNCHPAD_MYSQL_ROOT_PASSWORD }}
          LAUNCHPAD_MONGODB_HOST: ${{ secrets.LAUNCHPAD_MONGODB_HOST }}
          LAUNCHPAD_MONGODB_PORT: ${{ secrets.LAUNCHPAD_MONGODB_PORT }}
          LAUNCHPAD_MONGODB_PROVIDER: ${{ secrets.LAUNCHPAD_MONGODB_PROVIDER }}
          LAUNCHPAD_MONGODB_CLUSTER_ID: ${{ secrets.LAUNCHPAD_MONGODB_CLUSTER_ID }}
          LAUNCHPAD_MONGODB_REPLICA_SET: ${{ secrets.LAUNCHPAD_MONGODB_REPLICA_SET }}
          LAUNCHPAD_MONGODB_AUTH_SOURCE: ${{ secrets.LAUNCHPAD_MONGODB_AUTH_SOURCE }}
          LAUNCHPAD_DIGITALOCEAN_TOKEN: ${{ secrets.LAUNCHPAD_DIGITALOCEAN_TOKEN }}
          LAUNCHPAD_STORAGE_TYPE: ${{ secrets.LAUNCHPAD_STORAGE_TYPE }}
          LAUNCHPAD_STORAGE_REGION: ${{ secrets.LAUNCHPAD_STORAGE_REGION }}
          LAUNCHPAD_STORAGE_ACCESS_KEY_ID: ${{ secrets.LAUNCHPAD_STORAGE_ACCESS_KEY_ID }}
          LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY: ${{ secrets.LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY }}
          # OpenCraft manifests version override
          LAUNCHPAD_OPENCRAFT_MANIFESTS_VERSION: ${{ inputs.INSTANCE_TEMPLATE_VERSION }}
          # Backend credentials for Terraform state access
          AWS_ACCESS_KEY_ID: ${{ secrets.LAUNCHPAD_STORAGE_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY }}
        run: |
          launchpad_create_instance \
            "${{ inputs.INSTANCE_NAME }}" \
            --template-repository "${{ inputs.INSTANCE_TEMPLATE_REPOSITORY }}" \
            --template-version "${{ inputs.INSTANCE_TEMPLATE_VERSION }}" \
            --platform-name "${{ inputs.PLATFORM_NAME }}" \
            --edx-platform-repository "${{ inputs.EDX_PLATFORM_REPOSITORY }}" \
            --edx-platform-version "${{ inputs.EDX_PLATFORM_VERSION }}" \
            --tutor-version "${{ inputs.TUTOR_VERSION }}"

      - name: Push changes to remote repository
        run: |
          git add instances/${{ inputs.INSTANCE_NAME }}

          if git diff --cached --quiet; then
            echo "No changes to commit"
          else
            git commit -m "feat: add instance ${{ inputs.INSTANCE_NAME }}"
            git pull origin ${{ github.ref_name }} --rebase
            git push
          fi

      - name: Summary
        run: |
          echo "## Instance Created Successfully! 🎉" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "**Instance Name:** \`${{ inputs.INSTANCE_NAME }}\`" >> $GITHUB_STEP_SUMMARY
          echo "**Platform Name:** ${{ inputs.PLATFORM_NAME }}" >> $GITHUB_STEP_SUMMARY
          echo "**edX Platform:** ${{ inputs.EDX_PLATFORM_REPOSITORY }} @ ${{ inputs.EDX_PLATFORM_VERSION }}" >> $GITHUB_STEP_SUMMARY
          echo "**Tutor Version:** ${{ inputs.TUTOR_VERSION }}" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "### Next Steps" >> $GITHUB_STEP_SUMMARY
          echo "1. Check ArgoCD for application sync status" >> $GITHUB_STEP_SUMMARY
          echo "2. Monitor Argo Workflows for provisioning progress" >> $GITHUB_STEP_SUMMARY
          echo "3. Verify instance is accessible at your configured domain" >> $GITHUB_STEP_SUMMARY