Deploy Managed EMA #100
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Managed EMA | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| releaseVersion: | |
| description: "The tag of the image to push. We'll pull image A.B.C from ECR Dev, then push the image with tag A.B.C to where it needs to go." | |
| required: true | |
| default: "A.B.C" | |
| deployEnvironment: | |
| description: "Environment to deploy to (staging/production)." | |
| required: true | |
| type: choice | |
| options: | |
| - staging | |
| - production | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| environment: prod | |
| steps: | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-access-key-id: ${{ secrets.EMA_AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.EMA_AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ secrets.EMA_AWS_DEFAULT_REGION }} | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/[email protected] | |
| - name: ECR - Pull Prod Ready Image Tag from ECR Dev | |
| run: | | |
| ECR_DEV_IMAGE="${{ steps.login-ecr.outputs.registry }}/${{ github.event.repository.name }}:${{ github.event.inputs.releaseVersion }}" | |
| docker pull $ECR_DEV_IMAGE | |
| echo "ECR_DEV_IMAGE=$ECR_DEV_IMAGE" >> $GITHUB_ENV | |
| - name: GCR (Staging) - Login | |
| if: ${{ github.event.inputs.deployEnvironment == 'staging' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: gcr.io | |
| username: _json_key | |
| password: ${{ secrets.STAGING_GCP_SERVICE_ACCOUNT }} | |
| - name: GCR (Staging) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'staging' }} | |
| run: | | |
| GCR_IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| GCR_STAGING_IMAGE_REPO="gcr.io/${{ secrets.STAGING_GCP_PROJECT_ID }}/${{ github.event.repository.name }}" | |
| for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $GCR_STAGING_IMAGE_REPO:$current_tag | |
| docker push $GCR_STAGING_IMAGE_REPO:$current_tag | |
| done | |
| - name: GCR (Production) - Login | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: gcr.io | |
| username: _json_key | |
| password: ${{ secrets.PROD_GCP_SERVICE_ACCOUNT }} | |
| - name: GCR (Prod) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| run: | | |
| GCR_IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| GCR_PROD_IMAGE_REPO="gcr.io/${{ secrets.PROD_GCP_PROJECT_ID }}/${{ github.event.repository.name }}" | |
| for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $GCR_PROD_IMAGE_REPO:$current_tag | |
| docker push $GCR_PROD_IMAGE_REPO:$current_tag | |
| done | |
| - name: Log in to Azure China prod docker registry | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ secrets.AZURE_CHINA_PROD_HOSTNAME }} | |
| username: ${{ secrets.AZURE_CHINA_PROD_USERNAME }} | |
| password: ${{ secrets.AZURE_CHINA_PROD_PASSWORD }} | |
| - name: Azure China (Prod) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| run: | | |
| IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| PROD_IMAGE_REPO="${{ secrets.AZURE_CHINA_PROD_HOSTNAME }}/${{ github.event.repository.name }}" | |
| for current_tag in ${IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $PROD_IMAGE_REPO:$current_tag | |
| docker push $PROD_IMAGE_REPO:$current_tag | |
| done |