WIP #982
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: push | |
| name: Public Gateway | |
| env: | |
| CI: true | |
| jobs: | |
| integration_tests: | |
| uses: ./.github/workflows/integration_tests.yml | |
| with: | |
| context: public_gateway | |
| secrets: inherit | |
| build: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| outputs: | |
| matrix: ${{ steps.set-deployment-matrix.outputs.matrix }} | |
| matrixLength: ${{ steps.set-deployment-matrix.outputs.matrixLength }} | |
| deploy: ${{ steps.set-deployment-matrix.outputs.deploy }} | |
| steps: | |
| - name: Set Deployment Matrix | |
| id: set-deployment-matrix | |
| run: | | |
| branchName=$(echo '${{ github.ref }}' | sed 's,refs/heads/,,g') | |
| matrixSource=$(cat << EOF | |
| [ | |
| { | |
| "identifier": "public-gateway-staging", | |
| "branch": "develop", | |
| "image_tag": "staging", | |
| "ecs_service": "public-gateway-staging", | |
| "ecs_cluster": "somleng-switch-staging", | |
| "deploy": false | |
| }, | |
| { | |
| "identifier": "public-gateway", | |
| "branch": "master", | |
| "image_tag": "latest", | |
| "ecs_service": "public-gateway", | |
| "ecs_cluster": "somleng-switch", | |
| "deploy": true | |
| } | |
| ] | |
| EOF | |
| ) | |
| matrix=$(echo $matrixSource | jq --arg branchName "$branchName" 'map(. | select((.branch==$branchName)) )') | |
| echo "matrix={\"include\":$(echo $matrix)}" >> $GITHUB_OUTPUT | |
| echo "matrixLength=$(echo $matrix | jq length)" >> $GITHUB_OUTPUT | |
| echo "deploy=$(echo $matrix | jq '.[0].deploy')" >> $GITHUB_OUTPUT | |
| build_packages: | |
| name: Build Packages | |
| runs-on: ubuntu-latest | |
| needs: | |
| - integration_tests | |
| - build | |
| if: needs.build.outputs.matrixLength > 0 | |
| defaults: | |
| run: | |
| working-directory: components/gateway | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: ap-southeast-1 | |
| ECR_PUBLIC_REGISTRY: public.ecr.aws | |
| ECR_REPOSITORY: public.ecr.aws/somleng/public-gateway | |
| GHCR_REPOSITORY: ghcr.io/somleng/public-gateway | |
| OPENSIPS_SCHEDULER_ECR_REPOSITORY: public.ecr.aws/somleng/opensips-scheduler | |
| IMAGE_TAG: ${{ github.sha }} | |
| strategy: | |
| matrix: ${{fromJson(needs.build.outputs.matrix)}} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Configure AWS credentials | |
| id: aws-login | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} | |
| role-skip-session-tagging: true | |
| role-duration-seconds: 3600 | |
| aws-region: ap-southeast-1 | |
| - name: Login to AWS Public ECR | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ env.ECR_PUBLIC_REGISTRY }} | |
| env: | |
| AWS_REGION: us-east-1 | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build and push Public Gateway | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: components/gateway | |
| target: public_gateway | |
| push: true | |
| platforms: linux/amd64 | |
| cache-from: type=gha,scope=${{ matrix.identifier }} | |
| cache-to: type=gha,mode=max,scope=${{ matrix.identifier }} | |
| tags: | | |
| ${{ env.ECR_REPOSITORY }}:${{ matrix.image_tag }} | |
| ${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }} | |
| ${{ env.GHCR_REPOSITORY }}:${{ matrix.image_tag }} | |
| deploy: | |
| name: Deploy | |
| runs-on: ubuntu-latest | |
| needs: | |
| - build | |
| - build_packages | |
| if: needs.build.outputs.deploy == 'true' | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: ap-southeast-1 | |
| ECR_REPOSITORY: public.ecr.aws/somleng/public-gateway | |
| OPENSIPS_SCHEDULER_ECR_REPOSITORY: public.ecr.aws/somleng/opensips-scheduler | |
| IMAGE_TAG: ${{ github.sha }} | |
| strategy: | |
| matrix: ${{fromJson(needs.build.outputs.matrix)}} | |
| steps: | |
| - name: Configure AWS credentials | |
| id: aws-login | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} | |
| role-skip-session-tagging: true | |
| role-duration-seconds: 3600 | |
| aws-region: ap-southeast-1 | |
| - name: Get current task definition | |
| run: | | |
| aws ecs describe-task-definition --task-definition "${{ matrix.identifier }}" --query 'taskDefinition' > task-definition.json | |
| - name: Prepare task definition with OpenSIPS scheduler | |
| id: render-opensips-scheduler-task-def | |
| uses: aws-actions/amazon-ecs-render-task-definition@v1 | |
| with: | |
| task-definition: task-definition.json | |
| container-name: opensips_scheduler | |
| image: ${{ env.OPENSIPS_SCHEDULER_ECR_REPOSITORY }}:${{ env.IMAGE_TAG }} | |
| - name: Prepare task definition | |
| id: render-task-def | |
| uses: aws-actions/amazon-ecs-render-task-definition@v1 | |
| with: | |
| task-definition: ${{ steps.render-opensips-scheduler-task-def.outputs.task-definition }} | |
| container-name: public_gateway | |
| image: ${{ env.ECR_REPOSITORY }}:${{ env.IMAGE_TAG }} | |
| - name: Deploy | |
| uses: aws-actions/amazon-ecs-deploy-task-definition@v2 | |
| with: | |
| task-definition: ${{ steps.render-task-def.outputs.task-definition }} | |
| service: ${{ matrix.ecs_service }} | |
| cluster: ${{ matrix.ecs_cluster }} | |
| wait-for-service-stability: true |