Deploy CMS #11
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy CMS | |
| on: | |
| push: | |
| branches: ['main'] | |
| # Run only if there are at least one change matching the following paths | |
| paths: | |
| - 'apps/strapi-cms/**' | |
| - '.github/workflows/deploy_cms.yaml' | |
| workflow_dispatch: | |
| inputs: | |
| environment: | |
| description: 'The environment used as target' | |
| type: choice | |
| required: true | |
| default: dev | |
| options: | |
| - dev | |
| - prod | |
| logLevel: | |
| description: 'Log level' | |
| required: true | |
| default: 'warning' | |
| type: choice | |
| options: | |
| - warning | |
| defaults: | |
| run: | |
| shell: bash | |
| working-directory: apps/strapi-cms | |
| permissions: | |
| id-token: write # This is required for requesting the JWT | |
| contents: read # This is required for actions/checkout | |
| jobs: | |
| cd_deploy_cms: | |
| name: Build and push CMS image (on ${{ matrix.environment }}) | |
| if: github.event_name == 'push' && github.event.ref == 'refs/heads/main' | |
| runs-on: ubuntu-latest | |
| continue-on-error: false | |
| strategy: | |
| matrix: | |
| environment: [ 'dev' ] | |
| environment: ${{ matrix.environment }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 | |
| - name: Configure AWS Credentials | |
| uses: ./.github/actions/configure-aws-credentials | |
| with: | |
| aws_region: ${{ env.AWS_REGION || 'eu-south-1' }} | |
| role_to_assume: ${{ secrets.IAM_ROLE_DEPLOY_CMS }} | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1 | |
| - name: Build Push and Tag | |
| # Enabling the "continue on error" option allows for a manual rollback | |
| # to be performed in case of any issues. Without this option, the step | |
| # will fail if the image already exists in the Elastic Container | |
| # Registry (ECR). However, by activating this option, the deployment | |
| # process will proceed to the next steps even if the ECR image already | |
| # exists | |
| continue-on-error: true | |
| uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0 | |
| env: | |
| ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }} | |
| ECR_REPOSITORY: strapi | |
| IMAGE_TAG: ${{ github.sha }} | |
| with: | |
| context: apps/strapi-cms | |
| push: true | |
| tags: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }} | |
| provenance: false | |
| - name: Generate task-definition file | |
| run: aws ecs describe-task-definition --task-definition cms-task-def --query taskDefinition > task-definition.json | |
| - name: Update ImageTag in task-definition | |
| id: task-def | |
| uses: aws-actions/amazon-ecs-render-task-definition@4225e0b507142a2e432b018bc3ccb728559b437a # v1.2.0 | |
| with: | |
| task-definition: apps/strapi-cms/task-definition.json | |
| container-name: cms-docker | |
| image: ${{ steps.login-ecr.outputs.registry }}/strapi:${{ github.sha }} | |
| - name: Deploy new ECS task definition | |
| uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a # v1.4.11 | |
| with: | |
| task-definition: ${{ steps.task-def.outputs.task-definition }} | |
| service: cms-ecs | |
| cluster: cms-ecs-cluster | |
| manual_deploy: | |
| name: Build and push CMS image (manual trigger) - (${{ inputs.environment }}) | |
| if: github.event_name == 'workflow_dispatch' | |
| runs-on: ubuntu-latest | |
| continue-on-error: false | |
| environment: ${{ inputs.environment }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 | |
| - name: Configure AWS Credentials | |
| uses: ./.github/actions/configure-aws-credentials | |
| with: | |
| aws_region: ${{ env.AWS_REGION || 'eu-south-1' }} | |
| role_to_assume: ${{ secrets.IAM_ROLE_DEPLOY_CMS }} | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1 | |
| - name: Build Push and Tag | |
| # Enabling the "continue on error" option allows for a manual rollback | |
| # to be performed in case of any issues. Without this option, the step | |
| # will fail if the image already exists in the Elastic Container | |
| # Registry (ECR). However, by activating this option, the deployment | |
| # process will proceed to the next steps even if the ECR image already | |
| # exists | |
| continue-on-error: true | |
| uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0 | |
| env: | |
| ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }} | |
| ECR_REPOSITORY: strapi | |
| IMAGE_TAG: ${{ github.sha }} | |
| with: | |
| context: apps/strapi-cms | |
| push: true | |
| tags: ${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }} | |
| provenance: false | |
| - name: Generate task-definition file | |
| run: aws ecs describe-task-definition --task-definition cms-task-def --query taskDefinition > task-definition.json | |
| - name: Update ImageTag in task-definition | |
| id: task-def | |
| uses: aws-actions/amazon-ecs-render-task-definition@4225e0b507142a2e432b018bc3ccb728559b437a # v1.2.0 | |
| with: | |
| task-definition: apps/strapi-cms/task-definition.json | |
| container-name: cms-docker | |
| image: ${{ steps.login-ecr.outputs.registry }}/strapi:${{ github.sha }} | |
| - name: Deploy new ECS task definition | |
| uses: aws-actions/amazon-ecs-deploy-task-definition@df9643053eda01f169e64a0e60233aacca83799a # v1.4.11 | |
| with: | |
| task-definition: ${{ steps.task-def.outputs.task-definition }} | |
| service: cms-ecs | |
| cluster: cms-ecs-cluster |