feat: setup stg-alt2 and clean up old pre-iac scripts (#8837)

* feat: remove deprecated pre-iac scripts

* feat: add cd scripts for stg-alt2

* feat: add stg-alt2 to serverless config

* feat: provide sam bucket

Author: kevin9foong

.github/workflows/aws-deploy-scanner.yml

@@ -4,16 +4,16 @@ on:
   push:
     branches-ignore:
       - stg
-      - staging-alt2
       - stg-alt
+      - stg-alt2
       - stg-alt3
       - uat
   pull_request:
     types: [opened, reopened]
     branches-ignore:
       - stg
-      - staging-alt2
       - stg-alt
+      - stg-alt2
       - stg-alt3
       - uat
 

.github/workflows/ci.yml

@@ -0,0 +1,51 @@
+name: Deploy FormSG app to stg-alt2
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  push:
+    branches:
+      - stg-alt2
+
+jobs:
+  deploy:
+    name: Deploy
+    uses: ./.github/workflows/deploy-ecs.yml
+    with:
+      gha-environment: 'stg-alt2'
+      # Environment configuration
+      environment: 'stg-alt2'
+      environment-site-name: 'stg-alt2'
+      app-version: ${{ github.sha }}
+      app-url: 'https://stg-alt2.form.gov.sg'
+      react-app-form-sg-sdk-mode: 'staging'
+      # AWS configuration
+      aws-region: 'ap-southeast-1'
+      ecr-repository: 'formsg'
+      # ECS configuration
+      ecs-cpu: 1024
+      ecs-memory: 2048
+      ecs-cluster-name: 'formsg-stg-alt2-ecs'
+      ecs-service-name: 'formsg-stg-alt2-ecs-service'
+      ecs-task-definition: 'formsg-stg-alt2-ecs'
+      ecs-task-definition-path: 'deploy/ecs-task-definition.json'
+      ecs-container-name: 'formsg-app'
+      # CodeDeploy configuration
+      codedeploy-application: 'formsg-stg-alt2-ecs-app'
+      codedeploy-appspec-path: deploy/appspec.yml
+      codedeploy-deployment-group: 'formsg-stg-alt2-ecs-dg'
+      # Datadog config
+      dd-env: 'stg-alt2'
+    secrets:
+      # AWS credentials and configuration
+      aws-account-id: ${{ secrets.AWS_ACCOUNT_ID }}
+      cicd-role: ${{ secrets.IAC_AWS_CI_ROLE_TO_ASSUME }}
+      # Monitoring and analytics configuration
+      ga-tracking-id: ${{ secrets.GA_TRACKING_ID }}
+      dd-rum-app-id: ${{ secrets.DD_RUM_APP_ID }}
+      dd-rum-client-token: ${{ secrets.DD_RUM_CLIENT_TOKEN }}
+      dd-sample-rate: ${{ secrets.DD_SAMPLE_RATE }}
+      DD_API_KEY: ${{ secrets.DD_API_KEY }}
+      S3_STATIC_ASSETS_BUCKET_NAME: ${{ secrets.S3_STATIC_ASSETS_BUCKET_NAME }}

.github/workflows/deploy-eb.yml

@@ -0,0 +1,25 @@
+name: Deploy PDF Generator Lambda to stg-alt2
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write
+  contents: read
+
+on:
+  push:
+    branches:
+      - stg-alt2
+
+jobs:
+  deploy-pdf-gen-lambda:
+    name: Deploy PDF Generator Lambda
+    uses: ./.github/workflows/deploy-pdf-gen-lambda.yml
+    with:
+      gha-environment: 'stg-alt2'
+      checkoutBranch: 'stg-alt2'
+      environment: 'stg-alt2'
+    secrets:
+      cicd-role: ${{ secrets.IAC_AWS_CI_ROLE_TO_ASSUME }}

.github/workflows/deploy-ecs-stg-alt2.yml

@@ -0,0 +1,26 @@
+name: Deploy Virus Scanner GuardDuty to stg-alt2
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write
+  contents: read
+
+on:
+  push:
+    branches:
+      - stg-alt2
+
+jobs:
+  deploy-scanner-guardduty:
+    name: Deploy Scanner GuardDuty
+    uses: ./.github/workflows/aws-deploy-scanner-guardduty-iac.yml
+    with:
+      checkoutBranch: 'stg-alt2'
+      gha-environment: 'stg-alt2'
+      environment: 'stg-alt2'
+      provisionedConcurrency: 1
+    secrets:
+      cicd-role: ${{ secrets.IAC_AWS_CI_ROLE_TO_ASSUME }}

.github/workflows/deploy-pdf-gen-stg-alt2.yml

@@ -0,0 +1,29 @@
+name: Deploy Legacy Virus Scanner to stg-alt2
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  id-token: write
+  contents: read
+
+on:
+  push:
+    branches:
+      - stg-alt2
+  # For legacy virus scanner: schedule builds for 12:00AM GMT+8 everyday to get latest ClamAV virus definitions
+  schedule:
+    - cron: '0 16 * * *'
+
+jobs:
+  deploy-scanner:
+    name: Deploy Scanner
+    uses: ./.github/workflows/aws-deploy-scanner-legacy.yml
+    with:
+      checkoutBranch: 'stg-alt2'
+      gha-environment: 'stg-alt2'
+      environment: 'stg-alt2'
+      provisionedConcurrency: 1
+    secrets:
+      cicd-role: ${{ secrets.IAC_AWS_CI_ROLE_TO_ASSUME }}

.github/workflows/deploy-virus-scanner-guardduty-stg-alt2.yml

@@ -4,16 +4,16 @@ on:
   push:
     branches-ignore:
       - stg
-      - staging-alt2
       - stg-alt
+      - stg-alt2
       - stg-alt3
       - uat
   pull_request:
     types: [opened, reopened]
     branches-ignore:
       - stg
-      - staging-alt2
       - stg-alt
+      - stg-alt2
       - stg-alt3
       - uat
 

.github/workflows/deploy-virus-scanner-legacy-stg-alt2.yml

@@ -26,6 +26,19 @@ stg-alt:
       confirm_changeset: true
       parameter_overrides: Environment=stg-alt
 
+stg-alt2:
+  deploy:
+    parameters:
+      stack_name: pdf-gen-sparticuz-stg-alt2
+      s3_bucket: pdf-gen-lambda-code-zip-stg-alt2-8ea8a44 # Created by pulumi in formsg-infra to store AWS SAM builds. 
+      region: ap-southeast-1
+      capabilities: CAPABILITY_IAM # Allows the deployment to create IAM resources 
+      s3_prefix: stg-alt2
+      image_repositories: [] 
+      disable_rollback: false # Rolls back to previous version if the deployment fails 
+      confirm_changeset: true
+      parameter_overrides: Environment=stg-alt2
+
 stg-alt3:
   deploy:
     parameters: