EcoTrack/.github/workflows/deploy.yml at 100fcd267d1f42680983f8e5ddf6b015ae0d8ccc · garimasikka/EcoTrack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
name: Deploy
on:
  push:
    tags: ['v*']
  workflow_dispatch:
    inputs:
      environment:
        description: 'Deployment environment'
        required: true
        type: choice
        options: [staging, production]

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    strategy:
      matrix:
        service: [api-python, web, worker]
    steps:
      - uses: actions/checkout@v4
      - uses: docker/setup-buildx-action@v3
      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - uses: docker/build-push-action@v7
        with:
          context: .
          file: apps/${{ matrix.service }}/Dockerfile
          push: true
          tags: |
            ghcr.io/${{ github.repository }}/${{ matrix.service }}:${{ github.sha }}
            ghcr.io/${{ github.repository }}/${{ matrix.service }}:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max

  deploy-staging:
    needs: build-and-push
    if: github.event.inputs.environment == 'staging' || startsWith(github.ref, 'refs/tags/v')
    runs-on: ubuntu-latest
    environment: staging
    steps:
      - uses: actions/checkout@v4
      - name: Set up kubectl
        uses: azure/setup-kubectl@v3
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: us-east-1
      - name: Update kubeconfig
        run: aws eks update-kubeconfig --name ecotrack-staging --region us-east-1
      - name: Deploy to staging
        run: |
          echo "Deploying to staging..."
          kubectl apply -k infrastructure/kubernetes/overlays/staging/
      - name: Verify deployment
        run: |
          kubectl wait --for=condition=available --timeout=300s deployment/api-python -n ecotrack
          kubectl wait --for=condition=available --timeout=300s deployment/web -n ecotrack
          kubectl wait --for=condition=available --timeout=300s deployment/worker -n ecotrack

  deploy-production:
    needs: [build-and-push, deploy-staging]
    if: github.event.inputs.environment == 'production'
    runs-on: ubuntu-latest
    environment: production
    steps:
      - uses: actions/checkout@v4
      - name: Set up kubectl
        uses: azure/setup-kubectl@v3
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: us-east-1
      - name: Update kubeconfig
        run: aws eks update-kubeconfig --name ecotrack-production --region us-east-1
      - name: Deploy to production
        run: |
          echo "Deploying to production..."
          kubectl apply -k infrastructure/kubernetes/overlays/production/
      - name: Verify deployment
        run: |
          kubectl wait --for=condition=available --timeout=300s deployment/api-python -n ecotrack
          kubectl wait --for=condition=available --timeout=300s deployment/web -n ecotrack
          kubectl wait --for=condition=available --timeout=300s deployment/worker -n ecotrack