Merge pull request #109 from opensafely-core/one-ui-to-rule-them-all #384
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: CI | |
| env: | |
| IMAGE_NAME: airlock | |
| PUBLIC_IMAGE_NAME: ghcr.io/opensafely-core/airlock | |
| REGISTRY: ghcr.io | |
| on: | |
| push: | |
| jobs: | |
| check: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: "opensafely-core/setup-action@v1" | |
| with: | |
| python-version: "3.11" | |
| install-just: true | |
| - name: Set up development environment | |
| run: just devenv | |
| - name: Check formatting and linting rules | |
| run: just check | |
| test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: "opensafely-core/setup-action@v1" | |
| with: | |
| python-version: "3.11" | |
| install-just: true | |
| - name: Set up development environment | |
| run: just devenv | |
| - name: Run tests | |
| run: | | |
| just test-all | |
| docker-test-dev: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: "opensafely-core/setup-action@v1" | |
| with: | |
| install-just: true | |
| - name: Build docker image for both prod and dev | |
| run: | | |
| just docker/build dev | |
| - name: Run unit tests on docker dev image | |
| run: | | |
| # build docker and run test | |
| just docker/test | |
| docker-test-prod: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: "opensafely-core/setup-action@v1" | |
| with: | |
| install-just: true | |
| - name: Build docker image for both prod and dev | |
| run: | | |
| just docker/build prod | |
| - name: Run smoke test on prod | |
| run: | | |
| just docker/serve prod -d | |
| sleep 5 | |
| just docker/smoke-test || { docker logs airlock-prod-1; exit 1; } | |
| - name: Save docker image | |
| run: | | |
| docker save airlock | gzip > /tmp/airlock.tar.gz | |
| - name: Upload docker image | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: airlock-image | |
| path: /tmp/airlock.tar.gz | |
| docker-publish: | |
| needs: [check, test, docker-test-dev, docker-test-prod] | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| contents: read | |
| packages: write | |
| if: github.ref == 'refs/heads/main' | |
| concurrency: deploy-production | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: "opensafely-core/setup-action@v1" | |
| with: | |
| install-just: true | |
| - name: Download docker image | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: airlock-image | |
| path: /tmp/image | |
| - name: Import docker image | |
| run: gunzip -c /tmp/image/airlock.tar.gz | docker load | |
| - name: Test image we imported from previous job works | |
| run: | | |
| SKIP_BUILD=1 just docker/serve prod -d | |
| sleep 5 | |
| just docker/smoke-test || { docker logs airlock-prod-1; exit 1; } | |
| - name: Publish image | |
| run: | | |
| echo ${{ secrets.GITHUB_TOKEN }} | docker login $REGISTRY -u ${{ github.actor }} --password-stdin | |
| docker tag $IMAGE_NAME $PUBLIC_IMAGE_NAME:latest | |
| docker push $PUBLIC_IMAGE_NAME:latest |