production #154
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Deploy to Production | |
| name: production | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| git-ref: | |
| description: 'Git Ref to Deploy (hash: 40 hex digits)' | |
| required: true | |
| option: | |
| description: use --override to allow any ref | |
| required: false | |
| default: '' | |
| jobs: | |
| build: | |
| name: Build for Production | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Clone Repository (Custom Ref) | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.event.inputs.git-ref }} | |
| lfs: false | |
| - name: Calculate Tag Name | |
| id: tagname | |
| run: > | |
| echo "::set-output name=tag::$(env TZ=UTC date +'production/%Y-%m-%d-%H%Mz')" | |
| - name: Set up JDK | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: 11 | |
| distribution: 'temurin' | |
| - name: Cache local Maven repository | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.m2/repository | |
| key: ${{ runner.os }}-maven-${{ hashFiles('tools/**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-maven- | |
| - name: Cache local npm repository | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.npm | |
| key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-node- | |
| node- | |
| - name: Build with Maven | |
| run: > | |
| mvn -s .github/workflows/mvn-settings.xml -B compile install package --file tools/pom.xml | |
| -DskipTests=true | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build liberty server | |
| run: > | |
| mvn -s .github/workflows/mvn-settings.xml -B -pl cldr-apps liberty:create liberty:deploy liberty:package -Dinclude=usr --file tools/pom.xml | |
| -DskipTests=true | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Cleanup liberty server | |
| run: > | |
| zip tools/cldr-apps/target/cldr-apps.zip -d wlp/usr/servers/cldr/apps/expanded/\* | |
| - name: Upload cldr-apps.zip | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: cldr-apps-server | |
| path: tools/cldr-apps/target/cldr-apps.zip | |
| - name: Create Release for Production | |
| uses: ncipollo/[email protected] | |
| with: | |
| commit: ${{ github.event.inputs.git-ref }} | |
| prerelease: true | |
| tag: "${{ steps.tagname.outputs.tag }}" | |
| body: "Automated release from ’production’ Action" | |
| deploy: | |
| name: Deploy to Production | |
| needs: | |
| - build | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Download cldr-apps.zip | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: cldr-apps-server | |
| - name: Deploy to st | |
| # Deploys only on push to main. | |
| # Does not deploy for PRs. | |
| shell: bash | |
| env: | |
| # the RSA key for connecting | |
| RSA_KEY_SURVEYTOOL: ${{ secrets.RSA_KEY_SURVEYTOOL }} | |
| # the SSH port | |
| SURVEYTOOL_PORT: ${{ secrets.SURVEYTOOL_PORT }} | |
| # the SSH host | |
| SURVEYTOOL_HOST: ${{ secrets.SURVEYTOOL_HOST }} | |
| # the ~/.ssh/known_hosts line mentioning SMOKETEST_HOST | |
| SURVEYTOOL_KNOWNHOSTS: ${{ secrets.SURVEYTOOL_KNOWNHOSTS }} | |
| DEPLOY_SHA: ${{ github.event.inputs.git-ref }} | |
| OVERRIDE: ${{ github.event.inputs.override }} | |
| run: | | |
| echo "${RSA_KEY_SURVEYTOOL}" > .key && chmod go= .key | |
| echo "${SURVEYTOOL_KNOWNHOSTS}" > .knownhosts && chmod go= .knownhosts | |
| ssh -C -o UserKnownHostsFile=.knownhosts -i .key -p ${SURVEYTOOL_PORT} surveytool@${SURVEYTOOL_HOST} bash /usr/local/bin/deploy-to-openliberty.sh < cldr-apps.zip ${DEPLOY_SHA} ${OVERRIDE} |