gitops-stg for ECS #5
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: deploy reviewapp | |
| on: | |
| push: | |
| branches-ignore: | |
| - main | |
| pull_request: | |
| types: | |
| - labeled | |
| # this workflow should not work with cleanup workflow | |
| concurrency: reviewapps | |
| jobs: | |
| reviewapp: | |
| name: create reviewapp files to dreamkast-infra | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: write | |
| if: ${{ ! startsWith(github.head_ref, 'renovate/') }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| # checout branch even if triggered by PullRequest Label | |
| ref: ${{ github.head_ref }} | |
| - id: check_if_reviewapp | |
| continue-on-error: true | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| run: | | |
| PR_NUMBER=$(gh pr view --json number -q .number) | |
| gh pr view --json labels -q .labels | jq '.[] | select(.name == "reviewapps")' -e | |
| echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT" | |
| # the following is needed because it cannot be retrieved | |
| # from ${{ github.sha }} if triggered by PullRequest Label | |
| echo "pr_commit=$(gh pr view --json commits | jq -r '.commits[-1].oid')" >> "$GITHUB_OUTPUT" | |
| - name: Install Go | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| uses: actions/setup-go@v5 | |
| - name: Install jsonnet | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| run: | | |
| go install github.com/google/go-jsonnet/cmd/jsonnet@latest | |
| go install github.com/google/go-jsonnet/cmd/jsonnetfmt@latest | |
| - name: Generate token | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| id: generate_token | |
| uses: tibdex/github-app-token@v2 | |
| with: | |
| app_id: ${{ secrets.APP_ID }} | |
| private_key: ${{ secrets.PRIVATE_KEY }} | |
| - name: Configure AWS Credentials | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: us-west-2 | |
| - name: Checkout dreamkast-infra | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: cloudnativedaysjp/dreamkast-infra | |
| path: dreamkast-infra | |
| token: ${{ steps.generate_token.outputs.token }} | |
| - name: Create reviewapps | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| working-directory: dreamkast-infra/ | |
| run: ecspresso/reviewapps/build-reviewapp.sh | |
| env: | |
| REPOSITORY_NAME: ${{ github.repository }} | |
| PR_NUMBER: ${{ steps.check_if_reviewapp.outputs.pr_number }} | |
| IMAGE_TAG: ${{ steps.check_if_reviewapp.outputs.pr_commit }} | |
| - name: Commit files | |
| id: commit_files | |
| if: steps.check_if_reviewapp.outcome == 'success' | |
| continue-on-error: true | |
| working-directory: dreamkast-infra/ | |
| run: | | |
| git config --local user.email "[email protected]" | |
| git config --local user.name "GitHub Action" | |
| git status | |
| git add -A | |
| git commit -a -F- <<EOM | |
| Bump docker tag by ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/pull/${{ steps.check_if_reviewapp.outputs.pr_number }} | |
| commit: ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/commit/${{ steps.check_if_reviewapp.outputs.pr_commit }} | |
| EOM | |
| - name: Push changes | |
| if: steps.commit_files.outcome == 'success' | |
| uses: ad-m/github-push-action@master | |
| with: | |
| github_token: ${{ steps.generate_token.outputs.token }} | |
| repository: cloudnativedaysjp/dreamkast-infra | |
| directory: dreamkast-infra | |
| branch: staging/weaver-main | |
| - name: Create and Merge Pull Request | |
| if: steps.commit_files.outcome == 'success' | |
| uses: "actions/github-script@v7" | |
| with: | |
| github-token: ${{ steps.generate_token.outputs.token }} | |
| script: | | |
| const pr = await github.rest.pulls.create({ | |
| owner: "cloudnativedaysjp", | |
| repo: "dreamkast-infra", | |
| title: "Automated PR (staging/weaver-main)", | |
| body: "**this PR is automatically created & merged**", | |
| head: "staging/weaver-main", | |
| base: "main" | |
| }); | |
| await github.rest.pulls.merge({ | |
| owner: "cloudnativedaysjp", | |
| repo: "dreamkast-infra", | |
| pull_number: pr.data.number, | |
| merge_method: "squash", | |
| }); | |
| - uses: marocchino/sticky-pull-request-comment@v2 | |
| with: | |
| number: ${{ steps.check_if_reviewapp.outputs.pr_number }} | |
| message: | | |
| Review app | |
| * https://dreamkast-weaver-${{ steps.check_if_reviewapp.outputs.pr_number }}.dev.cloudnativedays.jp |