Merge pull request #2738 from ohcnetwork/rithviknishad/feat/reschedule #370
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Care | |
| on: | |
| workflow_dispatch: | |
| push: | |
| tags: | |
| - "v*" | |
| branches: | |
| - develop | |
| paths-ignore: | |
| - "docs/**" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| AWS_DEFAULT_REGION: ap-south-1 | |
| AWS_DEFAULT_OUTPUT: json | |
| ECS_SERVICE_BACKEND: "care-backend" | |
| ECS_SERVICE_CELERY: "care-celery" | |
| ECS_CLUSTER: "egov" | |
| CONTAINER_NAME_BACKEND: "care-backend" | |
| CONTAINER_NAME_WORKER: "care-celery-worker" | |
| CONTAINER_NAME_CRON: "care-celery-beat" | |
| jobs: | |
| test: | |
| uses: ./.github/workflows/reusable-test.yml | |
| secrets: | |
| CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} | |
| with: | |
| event_name: ${{ github.event_name }} | |
| build: | |
| needs: test | |
| name: Build & Push to container registries | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Generate docker tags | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: | | |
| ghcr.io/${{ github.repository }} | |
| ${{ secrets.DOCKER_HUB_USERNAME }}/${{ github.event.repository.name }} | |
| tags: | | |
| type=raw,value=production-latest,enable=${{ startsWith(github.event.ref, 'refs/tags/v') }} | |
| type=raw,value=production-latest-${{ github.run_number }}-{{date 'YYYYMMDD'}}-{{sha}},enable=${{ startsWith(github.event.ref, 'refs/tags/v') }} | |
| type=raw,value=staging-latest,enable=${{ github.ref == 'refs/heads/staging' }} | |
| type=raw,value=staging-latest-${{ github.run_number }}-{{date 'YYYYMMDD'}}-{{sha}},enable=${{ github.ref == 'refs/heads/staging' }} | |
| type=raw,value=latest,enable=${{ github.ref == 'refs/heads/develop' }} | |
| type=raw,value=latest-${{ github.run_number }},enable=${{ github.ref == 'refs/heads/develop' }} | |
| type=semver,pattern={{version}} | |
| flavor: | | |
| latest=false | |
| - name: Setup QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Setup Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Cache Docker layers | |
| uses: actions/cache@v4 | |
| with: | |
| path: /tmp/.buildx-cache | |
| key: ${{ runner.os }}-buildx-build-${{ hashFiles('Pipfile.lock', 'docker/prod.Dockerfile') }} | |
| restore-keys: | | |
| ${{ runner.os }}-buildx-build- | |
| - name: Create new cache | |
| run: | | |
| mkdir -p /tmp/.buildx-cache | |
| mkdir -p /tmp/.buildx-cache-new | |
| - name: Build and push image | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| file: docker/prod.Dockerfile | |
| push: true | |
| provenance: false | |
| platforms: linux/amd64,linux/arm64 | |
| tags: ${{ steps.meta.outputs.tags }} | |
| build-args: | | |
| APP_VERSION=${{ github.sha }} | |
| ADDITIONAL_PLUGS=${{ env.ADDITIONAL_PLUGS }} | |
| cache-from: type=local,src=/tmp/.buildx-cache | |
| cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max | |
| - name: Create Sentry release | |
| uses: getsentry/action-release@v1 | |
| env: | |
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | |
| SENTRY_ORG: ${{ secrets.SENTRY_ORG }} | |
| SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }} | |
| with: | |
| version: ${{ github.sha }} | |
| - name: Update cache | |
| if: always() # Run even if previous steps fail | |
| run: | | |
| if [ -d "/tmp/.buildx-cache-new" ]; then | |
| rm -rf /tmp/.buildx-cache | |
| mv /tmp/.buildx-cache-new /tmp/.buildx-cache | |
| fi | |
| notify-release: | |
| needs: build | |
| if: startsWith(github.event.ref, 'refs/tags/v') | |
| name: Notify release | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Notify release | |
| run: | | |
| echo "Release ${{ github.sha }} is ready to be deployed to production" | |
| deploy-staging-egov: | |
| needs: build | |
| if: github.ref == 'refs/heads/develop' | |
| name: Deploy to ECS API Egov | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: Staging-egov | |
| url: https://careapi.ohc.network | |
| steps: | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ env.AWS_DEFAULT_REGION }} | |
| - name: IMAGE Tagging | |
| env: | |
| ECR_REGISTRY: ghcr.io/${{ github.repository }} | |
| IMAGE_TAG: latest-${{ github.run_number }} | |
| run: echo "IMAGE_VALUE=`echo ghcr.io/${{ github.repository }}:$IMAGE_TAG`" >> $GITHUB_ENV | |
| - name: Download task definition for Celery Service | |
| run: | | |
| set -e | |
| if aws ecs describe-task-definition --task-definition ${{ env.ECS_SERVICE_CELERY }} --query taskDefinition > celery-task-definition.json; then | |
| echo "Successfully downloaded Celery task definition." | |
| else | |
| echo "Failed to download Celery task definition." >&2 | |
| exit 1 | |
| fi | |
| - name: Fill in the new image ID in the Celery task definition | |
| id: celery-task-def | |
| uses: aws-actions/amazon-ecs-render-task-definition@v1 | |
| with: | |
| task-definition: celery-task-definition.json | |
| container-name: ${{ env.CONTAINER_NAME_WORKER }} | |
| image: ${{ env.IMAGE_VALUE }} | |
| - name: Deploy Celery task definition | |
| uses: aws-actions/amazon-ecs-deploy-task-definition@v2 | |
| with: | |
| task-definition: ${{ steps.celery-task-def.outputs.task-definition }} | |
| service: ${{ env.ECS_SERVICE_CELERY }} | |
| cluster: ${{ env.ECS_CLUSTER }} | |
| wait-for-service-stability: true | |
| - name: Download task definition for Backend Service | |
| run: | | |
| set -e | |
| if aws ecs describe-task-definition --task-definition ${{ env.ECS_SERVICE_BACKEND }} --query taskDefinition > backend-task-definition.json; then | |
| echo "Successfully downloaded Backend task definition." | |
| else | |
| echo "Failed to download Backend task definition." >&2 | |
| exit 1 | |
| fi | |
| - name: Fill in the new image ID in the Backend task definition | |
| id: backend-task-def | |
| uses: aws-actions/amazon-ecs-render-task-definition@v1 | |
| with: | |
| task-definition: backend-task-definition.json | |
| container-name: ${{ env.CONTAINER_NAME_BACKEND }} | |
| image: ${{ env.IMAGE_VALUE }} | |
| - name: Deploy Backend task definition | |
| uses: aws-actions/amazon-ecs-deploy-task-definition@v2 | |
| with: | |
| task-definition: ${{ steps.backend-task-def.outputs.task-definition }} | |
| service: ${{ env.ECS_SERVICE_BACKEND }} | |
| cluster: ${{ env.ECS_CLUSTER }} | |
| wait-for-service-stability: true |