New deploy way (#12)

Author: lukasz-wal

.github/workflows/manually-trigger-deploy.yml

@@ -0,0 +1,36 @@
+name: Manually trigger deploy to staging or production
+run-name: "Manually deploy ${{ github.ref_name }} triggered by ${{ github.actor }}; version: ${{ inputs.version }}"
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Enter the version number"
+        required: true
+        default: "main"
+      environment:
+        required: false
+        description: "Select the environment to deploy to"
+        type: choice
+        options:
+          - production
+        default: production
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  trigger-production-deploy:
+    runs-on: ubuntu-latest
+    if: ${{ github.ref_name == 'main' && inputs.version != '' && inputs.environment == 'production' }}
+    steps:
+      - name: Trigger production deploy
+        uses: neti-filplus-infra/filplus-deploy-action@main
+        with:
+          version: ${{ inputs.version }}
+          environment: production
+          ecr-repository: provider-sample-url-finder
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_IMAGE_DEPLOYER }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_IMAGE_DEPLOYER }}
+          aws-region: us-east-1

.github/workflows/publish-new-build.yml

@@ -13,6 +13,11 @@ on:
         description: "Enter the version number"
         required: true
         default: "latest"
+      deploy-to-production:
+        description: "Deploy the new version?"
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: write
@@ -70,7 +75,9 @@ jobs:
 
   git-tag:
     runs-on: ubuntu-latest
-    needs: build-and-publish
+    needs:
+      - bump-version
+      - build-and-publish
     if: |
       ${{ github.ref_name == 'main' && inputs.version != '' }} &&
       always() &&
@@ -87,3 +94,22 @@ jobs:
           TAG_NAME="v${{ inputs.version }}"
           git tag $TAG_NAME
           git push origin $TAG_NAME
+
+  trigger-production-deploy:
+    runs-on: ubuntu-latest
+    needs:
+      - code-check
+      - bump-version
+      - build-and-publish
+    if: ${{ github.ref_name == 'main' && inputs.version != '' && inputs.deploy-to-production == true }}
+    environment: production-fidl
+    steps:
+      - name: Trigger production deploy
+        uses: neti-filplus-infra/filplus-deploy-action@main
+        with:
+          version: ${{ inputs.version }}
+          environment: production
+          ecr-repository: provider-sample-url-finder
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_IMAGE_DEPLOYER }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_IMAGE_DEPLOYER }}
+          aws-region: us-east-1

ci/scripts/check-and-change-image.js

@@ -0,0 +1,65 @@
+const { execSync } = require("child_process");
+
+const ECR_REPOSITORY = process.env.ECR_REPOSITORY;
+const IMAGE_VERSION = process.env.IMAGE_VERSION;
+const SSM_PARAMETER_NAME = process.env.SSM_PARAMETER_NAME;
+const ENVIRONMENT = process.env.ENVIRONMENT;
+
+if (!ECR_REPOSITORY || !IMAGE_VERSION || !SSM_PARAMETER_NAME) {
+  console.error(
+    "Missing environment variables: ECR_REPOSITORY, IMAGE_VERSION, SSM_PARAMETER_NAME"
+  );
+  process.exit(1);
+}
+
+function runCommand(command) {
+  try {
+    const output = execSync(command, { encoding: "utf-8" });
+    return JSON.parse(output);
+  } catch (error) {
+    console.error(`Error running command: ${command}`);
+    console.error(error.message);
+  }
+}
+
+let currentVersions = runCommand(
+  `aws ssm get-parameter --name "${SSM_PARAMETER_NAME}" --query "Parameter.Value" --output json`
+);
+
+console.log("Current versions:", currentVersions);
+
+if (!currentVersions) {
+  console.error(
+    `This app is not supported in this environment: ${ENVIRONMENT}`
+  );
+  process.exit(1);
+}
+
+console.log("Checking image in ECR...");
+
+const imageExist = runCommand(
+  `aws ecr-public describe-images --repository-name ${ECR_REPOSITORY} --region us-east-1  --image-ids imageTag=${IMAGE_VERSION}`
+);
+
+if (!imageExist || !imageExist.imageDetails) {
+  console.error(`Image ${IMAGE_VERSION} not found in ECR.`);
+  process.exit(1);
+}
+
+console.log("Image was found in ECR:", imageExist);
+console.log("Checking version in SSM...");
+
+const newCurrentSSMParam = IMAGE_VERSION;
+
+console.log("New current SSM params:", newCurrentSSMParam);
+
+try {
+  const putNewVersion = `aws ssm put-parameter --name "${SSM_PARAMETER_NAME}" --value "${newCurrentSSMParam}" --type String --overwrite`;
+
+  execSync(putNewVersion, { stdio: "inherit" });
+  console.log(`Update version COMPLETE!`);
+  console.log(`Trigger the deployment process...`);
+} catch (error) {
+  console.error(`Failed to put a new version:`, error.message);
+  process.exit(1);
+}