dev.yml

name: Deploy API Gateway

on:
  workflow_dispatch:
    inputs:
      environment:
        description: "API Gateway Environment to deploy"
        required: true
        type: choice
        options:
          - dev
          - staging
          - prod

jobs:
  deploy-api-gateway:
    name: Deploy API Gateway
    runs-on: ubuntu-latest
    timeout-minutes: 20
    env:
      CONFIG_NAME: "api-${{ inputs.environment }}-${{ github.run_id }}-${{ github.run_attempt }}"
      OPENAPI_SPEC_PATH: "${{ inputs.environment }}.yaml"

    permissions:
      contents: "write"
      id-token: "write"

    steps:
      - name: Set Gateway Name environment variable
        run: |
          if [[ ${{ inputs.environment }} == prod ]]; then
            echo "GATEWAY_NAME=binit-api-gateway" >> $GITHUB_ENV
          elif [[ ${{ inputs.environment }} == staging ]]; then
            echo "GATEWAY_NAME=binit-api-gateway-staging" >> $GITHUB_ENV
          else
            echo "GATEWAY_NAME=binit-api-gateway-dev" >> $GITHUB_ENV
          fi
      - name: Checkout Repo
        id: "checkout"
        uses: actions/checkout@v3
        with:
          persist-credentials: false

      - name: Authenticate with GCloud
        id: "auth"
        uses: "google-github-actions/auth@v0.4.0"
        with:
          workload_identity_provider: "projects/354086251636/locations/global/workloadIdentityPools/gh-ci-pool/providers/gh-ci-provider"
          service_account: "github-actions@binit-244703.iam.gserviceaccount.com"

      - name: Create new API Config
        run: |
          gcloud api-gateway api-configs create $CONFIG_NAME \
            --api=binit-api --openapi-spec=$OPENAPI_SPEC_PATH \
            --project=binit-244703 --backend-auth-service-account=api-gateway@binit-244703.iam.gserviceaccount.com
      - name: Update API Gateway
        run: |
          gcloud api-gateway gateways update $GATEWAY_NAME \
            --api-config=$CONFIG_NAME --api=binit-api --location=us-east1 --project=binit-244703