cdkactions_build-and-deploy.yaml

# Generated by cdkactions. Do not modify
# Generated as part of the 'website' stack.
name: Build and Deploy
on: push
jobs:
  react-check:
    name: React Check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - name: Cache
        uses: actions/cache@v2
        with:
          path: "**/node_modules"
          key: v0-${{ hashFiles('./yarn.lock') }}
      - name: Install Dependencies
        run: |-
          cd .
          yarn install --frozen-lockfile
      - name: Lint
        run: |-
          cd .
          yarn lint
      - name: Test
        run: |-
          cd .
          yarn test
      - name: Upload Code Coverage
        run: |-
          ROOT=$(pwd)
          cd .
          yarn run codecov -p $ROOT -F frontend
    container:
      image: node:14
  publish-frontend:
    name: Publish frontend
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: docker/setup-qemu-action@v1
      - uses: docker/setup-buildx-action@v1
      - name: Cache Docker layers
        uses: actions/cache@v2
        with:
          path: /tmp/.buildx-cache
          key: buildx-publish-frontend
      - uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
      - name: Build/Publish
        uses: docker/build-push-action@v2
        with:
          context: .
          file: ./Dockerfile
          push: ${{ github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/heads/feat/') == true }}
          cache-from: type=local,src=/tmp/.buildx-cache,type=registry,ref=pennlabs/website:latest
          cache-to: type=local,dest=/tmp/.buildx-cache
          tags: pennlabs/website:latest,pennlabs/website:${{ github.sha }}
    needs: react-check
  deploy:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/master'
    steps:
      - uses: actions/checkout@v2
      - id: synth
        name: Synth cdk8s manifests
        run: |-
          cd k8s
          yarn install --frozen-lockfile

          # Get repo name (by removing owner/organization)
          export RELEASE_NAME=${REPOSITORY#*/}

          # Export RELEASE_NAME as an output
          echo "::set-output name=RELEASE_NAME::$RELEASE_NAME"

          yarn build
        env:
          PR_NUMBER: ${{ steps.pr.outputs.pull_request_number }}
          GIT_SHA: ${{ github.sha }}
          REPOSITORY: ${{ github.repository }}
          AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
      - name: Deploy
        if: steps.synth.outcome == 'success'
        run: |-
          aws eks --region us-east-1 update-kubeconfig --name production --role-arn arn:aws:iam::${AWS_ACCOUNT_ID}:role/kubectl

          # Get repo name from synth step
          RELEASE_NAME=${{ steps.synth.outputs.RELEASE_NAME }}

          # Deploy
          kubectl apply -f k8s/dist/ -l app.kubernetes.io/component=certificate
          kubectl apply -f k8s/dist/ --prune -l app.kubernetes.io/part-of=$RELEASE_NAME
        env:
          AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
          AWS_ACCESS_KEY_ID: ${{ secrets.GH_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.GH_AWS_SECRET_ACCESS_KEY }}
    needs:
      - publish-frontend
  feature-branch-deploy:
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/heads/feat/') == true
    steps:
      - uses: actions/checkout@v2
      - name: Get Pull Request Metadata
        id: pr
        run: |-
          echo "::set-output name=pull_request_number::$(gh pr view --json number -q .number || echo "")"
          echo "::set-output name=pull_request_closed::$(gh pr view --json closed -q .closed || echo "")"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - id: synth
        name: Synth cdk8s manifests
        if: (steps.pr.outputs.pull_request_number) && (steps.pr.outputs.pull_request_closed == 'false')
        run: |-
          cd k8s
          yarn install --frozen-lockfile

          # Get repo name (by removing owner/organization)
          export DEPLOY_TO_FEATURE_BRANCH=true
          export RELEASE_NAME=${REPOSITORY#*/}-pr-${{ steps.pr.outputs.pull_request_number }}

          # Export RELEASE_NAME as an output
          echo "::set-output name=RELEASE_NAME::$RELEASE_NAME"

          yarn build
        env:
          PR_NUMBER: ${{ steps.pr.outputs.pull_request_number }}
          GIT_SHA: ${{ github.sha }}
          REPOSITORY: ${{ github.repository }}
          AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
      - name: Deploy
        if: steps.synth.outcome == 'success'
        run: |-
          aws eks --region us-east-1 update-kubeconfig --name production --role-arn arn:aws:iam::${AWS_ACCOUNT_ID}:role/kubectl

          # Get repo name from synth step
          RELEASE_NAME=${{ steps.synth.outputs.RELEASE_NAME }}

          # Deploy
          kubectl apply -f k8s/dist/ -l app.kubernetes.io/component=certificate
          kubectl apply -f k8s/dist/ --prune -l app.kubernetes.io/part-of=$RELEASE_NAME
        env:
          AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
          AWS_ACCESS_KEY_ID: ${{ secrets.GH_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.GH_AWS_SECRET_ACCESS_KEY }}
      - name: Find announcement if exists
        uses: peter-evans/find-comment@v2
        id: find-announcement
        with:
          issue-number: ${{ steps.pr.outputs.pull_request_number }}
          body-includes: Deployment preview for
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Announce successful feature branch deployment
        uses: peter-evans/create-or-update-comment@v2
        with:
          comment-id: ${{ steps.find-announcement.outputs.comment-id }}
          issue-number: ${{ steps.pr.outputs.pull_request_number }}
          edit-mode: replace
          body: |-
            Deployment preview for commit `${{ github.sha }}` ready at:
            [pr-${{ steps.pr.outputs.pull_request_number }}.pennlabs.org](https://pr-${{ steps.pr.outputs.pull_request_number }}.pennlabs.org)
    needs:
      - publish-frontend