Merge pull request #1136 from snyk/chore/deploy-to-prod

chore: approve deploy to prod in CircleCI

Author: dkontorovskyy

.circleci/config.yml

@@ -192,13 +192,7 @@ jobs:
             - checkout
             - install_python_requests
             - run:
-                command: |
-                    LATEST_TAG_WITH_V=`git describe --abbrev=0 --tags ${CIRCLE_SHA1}` &&
-                    LATEST_TAG=${LATEST_TAG_WITH_V:1} &&
-                    ./scripts/slack/notify_deploy.py $LATEST_TAG prod &&
-                    curl -s --fail --show-error -i -H "Accept: application/json" -H "Content-Type: application/json" \
-                        -X POST -d "{}" \
-                        https://my.prod.snyk.io/${PROD_DEPLOY_TOKEN}
+                command: ./scripts/circleci-jobs/deploy_to_prod.sh
                 name: Deploy to prod
             - run:
                 command: ./scripts/slack/notify_failure.py "${CIRCLE_BRANCH}" "${CIRCLE_JOB}" "${CIRCLE_BUILD_URL}" "${CIRCLE_PULL_REQUEST}" "${SLACK_WEBHOOK}"

.circleci/config/jobs/deploy_to_prod.yml

@@ -10,13 +10,7 @@ steps:
 
   - run:
       name: Deploy to prod
-      command: |
-        LATEST_TAG_WITH_V=`git describe --abbrev=0 --tags ${CIRCLE_SHA1}` &&
-        LATEST_TAG=${LATEST_TAG_WITH_V:1} &&
-        ./scripts/slack/notify_deploy.py $LATEST_TAG prod &&
-        curl -s --fail --show-error -i -H "Accept: application/json" -H "Content-Type: application/json" \
-            -X POST -d "{}" \
-            https://my.prod.snyk.io/${PROD_DEPLOY_TOKEN}
+      command: ./scripts/circleci-jobs/deploy_to_prod.sh
 
   - run:
       name: Notify Slack on failure

scripts/circleci-jobs/deploy_to_dev.sh

@@ -15,7 +15,7 @@ git config --global user.name "K-M Deploy Boy"
 
 git clone https://$GH_TOKEN@github.com/snyk/$KUBERNETES_MONITOR_DEPLOYER_REPO.git
 
-cp -r snyk-monitor/ $KUBERNETES_MONITOR_DEPLOYER_REPO/
+cp -r snyk-monitor/* $KUBERNETES_MONITOR_DEPLOYER_REPO/helm
 
 # Create helm values for different envs
 cat >$KUBERNETES_MONITOR_DEPLOYER_REPO/helm/values/pre-prod-mt.yaml <<EOF

scripts/circleci-jobs/deploy_to_prod.sh

@@ -0,0 +1,30 @@
+#! /bin/bash
+set -e
+
+PIPELINE_ID=$(curl -s --fail --show-error \
+  -H "Accept: application/json" \
+  -H "Content-Type: application/json" \
+  -H "Circle-Token: $CIRCLI_CI_API_TOKEN" \
+  https://circleci.com/api/v2/project/github/snyk/"${KUBERNETES_MONITOR_DEPLOYER_REPO}"/pipeline | jq -r .items[0].id)
+
+
+WORKFLOW_ID=$(curl -s --fail --show-error \
+  -H "Accept: application/json" \
+  -H "Content-Type: application/json" \
+  -H "Circle-Token: $CIRCLI_CI_API_TOKEN" \
+  https://circleci.com/api/v2/pipeline/"${PIPELINE_ID}"/workflow | jq -r .items[0].id)
+
+APPROVAL_REQUEST_ID=$(curl -s --fail --show-error \
+  -H "Accept: application/json" \
+  -H "Content-Type: application/json" \
+  -H "Circle-Token: $CIRCLI_CI_API_TOKEN" \
+  https://circleci.com/api/v2/workflow/"${WORKFLOW_ID}"/job | jq -r '.items[] | select(.name == "Approve Production deployment") | .approval_request_id')
+
+APPROVAL=$(curl -s --fail --show-error \
+  -H "Accept: application/json" \
+  -H "Content-Type: application/json" \
+  -H "Circle-Token: $CIRCLI_CI_API_TOKEN" \
+  -X POST -d "{}" \
+  https://circleci.com/api/v2/workflow/"${WORKFLOW_ID}"/approve/"${APPROVAL_REQUEST_ID}" | jq -r .message)
+
+[[ ${APPROVAL} == "Accepted." ]] && echo "Approved Production deployment!"