deploy-daac.yml

name: Deploy DAAC Stacks to AWS

on:
  push:
    branches:
      - main
      - develop

concurrency: ${{ github.workflow }}-${{ github.ref }}

jobs:
  deploy:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          - environment: hyp3-edc-prod
            domain: ''
            api_name: hyp3
            template_bucket: cf-templates-118mtzosmrltk-us-west-2
            image_tag: latest
            product_lifetime_in_days: 14
            quota: 1000
            deploy_ref: refs/heads/main
            job_files: job_spec/AUTORIFT.yml job_spec/INSAR_GAMMA.yml job_spec/RTC_GAMMA.yml
            instance_types: r6id.xlarge,r6id.2xlarge,r6id.4xlarge,r6id.8xlarge,r6idn.xlarge,r6idn.2xlarge,r6idn.4xlarge,r6idn.8xlarge
            default_max_vcpus: 1500
            expanded_max_vcpus: 3000
            required_surplus: 3000
            security_environment: EDC
            ami_id: image_id_s1_ecs_amz2
            distribution_url: 'https://d3gm2hf49xd6jj.cloudfront.net'

          - environment: hyp3-edc-uat
            domain: ''
            api_name: hyp3-test
            template_bucket: cf-templates-118ylv0o6jp2n-us-west-2
            image_tag: test
            product_lifetime_in_days: 14
            quota: 1000
            deploy_ref: refs/heads/develop
            job_files: >-
              job_spec/AUTORIFT.yml
              job_spec/INSAR_GAMMA.yml
              job_spec/RTC_GAMMA.yml
              job_spec/INSAR_ISCE_TEST.yml
              job_spec/WATER_MAP.yml
              job_spec/INSAR_ISCE_BURST.yml
            instance_types: r6id.xlarge,r6id.2xlarge,r6id.4xlarge,r6id.8xlarge,r6idn.xlarge,r6idn.2xlarge,r6idn.4xlarge,r6idn.8xlarge
            default_max_vcpus: 1500
            expanded_max_vcpus: 3000
            required_surplus: 3000
            security_environment: EDC
            ami_id: image_id_s1_ecs_amz2
            distribution_url: 'https://d1riv60tezqha9.cloudfront.net'

    environment:
      name: ${{ matrix.environment }}
      url: https://${{ matrix.domain }}

    steps:
      - uses: actions/checkout@v3.6.0

      - uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-access-key-id: ${{ secrets.V2_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.V2_AWS_SECRET_ACCESS_KEY }}
          aws-session-token: ${{ secrets.V2_AWS_SESSION_TOKEN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - uses: actions/setup-python@v4
        with:
          python-version: 3.9

      - uses: ./.github/actions/deploy-hyp3
        if: github.ref == matrix.deploy_ref
        with:
          TEMPLATE_BUCKET:  ${{ matrix.template_bucket }}
          STACK_NAME: ${{ matrix.environment }}
          DOMAIN_NAME: ${{ matrix.domain }}
          API_NAME: ${{ matrix.api_name }}
          CERTIFICATE_ARN:  ${{ secrets.CERTIFICATE_ARN }}
          IMAGE_TAG: ${{ matrix.image_tag }}
          PRODUCT_LIFETIME: ${{ matrix.product_lifetime_in_days }}
          VPC_ID: ${{ secrets.VPC_ID }}
          SUBNET_IDS: ${{ secrets.SUBNET_IDS }}
          SECRET_ARN: ${{ secrets.SECRET_ARN }}
          CLOUDFORMATION_ROLE_ARN: ${{ secrets.CLOUDFORMATION_ROLE_ARN }}
          MONTHLY_JOB_QUOTA_PER_USER: ${{ matrix.quota }}
          JOB_FILES: ${{ matrix.job_files }}
          DEFAULT_MAX_VCPUS: ${{ matrix.default_max_vcpus }}
          EXPANDED_MAX_VCPUS: ${{ matrix.expanded_max_vcpus }}
          MONTHLY_BUDGET: ${{ secrets.MONTHLY_BUDGET }}
          REQUIRED_SURPLUS: ${{ matrix.required_surplus }}
          ORIGIN_ACCESS_IDENTITY_ID: ${{ secrets.ORIGIN_ACCESS_IDENTITY_ID }}
          SECURITY_ENVIRONMENT: ${{ matrix.security_environment }}
          AMI_ID: ${{ matrix.ami_id }}
          INSTANCE_TYPES: ${{ matrix.instance_types }}
          DISTRIBUTION_URL: ${{ matrix.distribution_url }}
          AUTH_PUBLIC_KEY: ${{ secrets.AUTH_PUBLIC_KEY }}

  call-bump-version-workflow:
    if: github.ref == 'refs/heads/main'
    needs: deploy
    uses: ASFHyP3/actions/.github/workflows/reusable-bump-version.yml@v0.8.2
    secrets:
      USER_TOKEN: ${{ secrets.TOOLS_BOT_PAK }}