build-deploy-hello-app-image.yml

on:
  push:
    branches:
      - gke-terraform-deploy
    paths:
    - 'apps/hello-app/**'
    - 'infra/**'
    - .github/**

env:
  PROJECT_ID: "deployment-demo-311509"
  PROJECT_NAME: "deployment-demo"
  IMAGE: "hello-app"
  TAG: "v1"
  ENVIRONMENT: "dev"
  APP_LINK: ""
  VALIDATION_REPO: "ksiedlarek/gcp-deployment-validation"
  TRIGGER_VALIDATION: true

jobs:
  show-run-id:
    name: Display run id
    runs-on: ubuntu-latest
    steps:
    - name: Display run id
      run: echo "${{ github.run_id }}"

  setup-build-publish:
    name: Container image - setup, build and publish
    runs-on: ubuntu-latest
    steps:

    - name: Checkout
      uses: actions/checkout@v2

    # Setup gcloud CLI
    - uses: google-github-actions/setup-gcloud@v0.2.0
      with:
        service_account_key: ${{ secrets.GCLOUD_SERVICE_KEY }}
        project_id: ${{ env.PROJECT_ID }}

    # Configure docker to use the gcloud command-line tool as a credential helper
    - run: |-
        gcloud --quiet auth configure-docker

    # Build the Docker image
    - name: Build
      run: |-
        docker build \
          --tag "gcr.io/$PROJECT_ID/$IMAGE:$TAG" \
          --build-arg GITHUB_SHA="$GITHUB_SHA" \
          --build-arg GITHUB_REF="$GITHUB_REF" \
          --file apps/hello-app/Dockerfile .

    # Push the Docker image to Google Container Registry
    - name: Publish
      run: |-
        docker push "gcr.io/$PROJECT_ID/$IMAGE:$TAG"
  
  terraform-plan:
    name: Terraform Plan
    runs-on: ubuntu-latest
    needs: setup-build-publish
    defaults:
      run:
        working-directory: infra
    steps:

      - name: Checkout
        uses: actions/checkout@v2

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v1
        with:
          terraform_version: 0.15.0
          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

      - name: Terraform Init
        id: init
        run: terraform init -backend-config="config/$ENVIRONMENT/backend.tfvars"

      - name: Terraform Plan
        id: plan
        run: terraform plan
        continue-on-error: true

      - name: Terraform Plan Status
        if: steps.plan.outcome == 'failure'
        run: exit 1

      # - name: Terraform Apply
      #   if: github.ref == 'refs/heads/gke-terraform-deploy' && github.event_name == 'push'
      #   run: terraform apply -auto-approve
  terraform-apply:
    name: Terraform Apply
    runs-on: ubuntu-latest
    needs: terraform-plan
    environment:
        name: dev
    defaults:
      run:
        working-directory: infra
    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v1
        with:
          terraform_version: 0.15.0
          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
          terraform_wrapper: false

      - name: Terraform Init
        id: init
        run: terraform init -backend-config="config/$ENVIRONMENT/backend.tfvars"

      - name: Terraform Apply
        if: github.ref == 'refs/heads/gke-terraform-deploy' && github.event_name == 'push'
        run: terraform apply -auto-approve
      
      - name: Save output link
        run: |
          output=$(terraform output -raw lb_ip)
          echo "$output"
          echo "APP_LINK=$output" >> $GITHUB_ENV
      
      - name: Repository Dispatch
        uses: peter-evans/repository-dispatch@v1
        if: ${{ env.TRIGGER_VALIDATION }}
        with:
          token: ${{ secrets.REPO_ACCESS_TOKEN }}
          repository: ${{ env.VALIDATION_REPO }}
          event-type: deployment-validation
          client-payload: |
            {
              "ref": "${{ github.ref }}",
              "sha": "${{ github.sha }}",
              "project_name": "${{ env.PROJECT_NAME }}",
              "app_link": "${{ env.APP_LINK }}",
              "run_id": "${{ github.run_id }}",
              "repo": "${{ github.repository }}"
            }