release.yml

name: release

# 1. Run unit and integration tests
# 2. Push containers to AWS ECR and dockerhub tagged with release
# 3. Recommit an update to the chart's deployments with the updated build number in the `deployment` branch

on:
  release:
    types: [created]
    tags:
      - "v*.*.*"

jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - name: Install deps
        run: |
          pip3 install -r requirements_api.txt -r requirements_worker.txt -r requirements_dev.txt
          pip3 install --upgrade protobuf

      - name: Bring up stack
        run: make up-dbs && sleep 30

      - name: Check stack
        run: make ps

      - name: Run tests with coverage
        run: make test-coverage

      - uses: codecov/codecov-action@v2
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ./coverage.xml
          fail_ci_if_error: true

      - name: Tag name
        id: source
        run: |
          echo ::set-output name=TAG::${GITHUB_REF#refs/tags/}

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_WORKER }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_WORKER }}
          aws-region: us-west-2

      - name: Login to Amazon ECR
        id: login-ecr-worker
        uses: aws-actions/amazon-ecr-login@v1

      - name: Worker - Build, tag, and push image to Amazon ECR
        env:
          ECR_REGISTRY: ${{ steps.login-ecr-worker.outputs.registry }}
          ECR_REPOSITORY: icon-metrics-worker
          IMAGE_TAG: prod-${{ steps.source.outputs.TAG }}
        run: |
          docker build --target prod --build-arg SERVICE_NAME=worker -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
          docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_API }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_API }}
          aws-region: us-west-2

      - name: Login to Amazon ECR
        id: login-ecr-api
        uses: aws-actions/amazon-ecr-login@v1

      - name: API - Build, tag, and push image to Amazon ECR
        env:
          ECR_REGISTRY: ${{ steps.login-ecr-api.outputs.registry }}
          ECR_REPOSITORY: icon-metrics-api
          IMAGE_TAG: prod-${{ steps.source.outputs.TAG }}
        run: |
          docker build --target prod  --build-arg SERVICE_NAME=api -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
          docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG

      - name: Login to DockerHub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}

      - name: Build and push (API) - latest
        uses: docker/build-push-action@v2
        with:
          context: .
          build-args: |
            SERVICE_NAME=api
          file: ./Dockerfile
          target: prod
          push: true
          tags: geometrylabs/icon-metrics-api:latest

      - name: Build and push (API)
        uses: docker/build-push-action@v2
        with:
          context: .
          build-args: |
            SERVICE_NAME=api
          file: ./Dockerfile
          target: prod
          push: true
          tags: geometrylabs/icon-metrics-api:${{ steps.source.outputs.TAG }}

      - name: Build and push (WORKER) - latest
        uses: docker/build-push-action@v2
        with:
          context: .
          build-args: |
            SERVICE_NAME=api
          file: ./Dockerfile
          target: prod
          push: true
          tags: geometrylabs/icon-metrics-api:latest

      - name: Build and push (WORKER)
        uses: docker/build-push-action@v2
        with:
          context: .
          build-args: |
            SERVICE_NAME=api
          file: ./Dockerfile
          target: prod
          push: true
          tags: geometrylabs/icon-metrics-api:${{ steps.source.outputs.TAG }}

      - name: Checkout charts repo
        uses: actions/checkout@v2
        with:
          repository: geometry-labs/icon-charts
          ref: main
          path: charts
          token: ${{ secrets.ICON_CHARTS_PAT }}

      - name: Update prod-sejong-us-west-2 deployment values file (API)
        uses: fjogeleit/yaml-update-action@master
        with:
          workDir: charts
          repository: geometry-labs/icon-charts
          valueFile: 'deployments/prod-us-west-2/sejong/metrics/values.yaml'
          propertyPath: 'api.image.tag'
          value: prod-${{ steps.source.outputs.TAG }}
          branch: main
          createPR: 'false'
          updateFile: true
          commitChange: false

      - name: Update prod-sejong-us-west-2 deployment values file (WORKER)
        uses: fjogeleit/yaml-update-action@master
        with:
          workDir: charts
          repository: geometry-labs/icon-charts
          valueFile: 'deployments/prod-us-west-2/sejong/metrics/values.yaml'
          propertyPath: 'worker.image.tag'
          value: prod-${{ steps.source.outputs.TAG }}
          branch: main
          createPR: 'false'
          updateFile: true
          commitChange: false

      - name: Update prod-mainnet-eu-west-1 deployment values file (API)
        uses: fjogeleit/yaml-update-action@master
        with:
          workDir: charts
          repository: geometry-labs/icon-charts
          valueFile: 'deployments/prod-eu-west-1/mainnet/metrics/values.yaml'
          propertyPath: 'api.image.tag'
          value: prod-${{ steps.source.outputs.TAG }}
          branch: main
          createPR: 'false'
          updateFile: true
          commitChange: false

      - name: Update prod-mainnet-eu-west-1 deployment values file (WORKER)
        uses: fjogeleit/yaml-update-action@master
        with:
          workDir: charts
          repository: geometry-labs/icon-charts
          valueFile: 'deployments/prod-eu-west-1/mainnet/metrics/values.yaml'
          propertyPath: 'worker.image.tag'
          value: prod-${{ steps.source.outputs.TAG }}
          branch: main
          createPR: 'false'
          updateFile: true
          commitChange: false

      - name: Update prod-mainnet-us-west-2 deployment values file (API)
        uses: fjogeleit/yaml-update-action@master
        with:
          workDir: charts
          repository: geometry-labs/icon-charts
          valueFile: 'deployments/prod-us-west-2/mainnet/metrics/values.yaml'
          propertyPath: 'api.image.tag'
          value: prod-${{ steps.source.outputs.TAG }}
          branch: main
          createPR: 'false'
          updateFile: true
          commitChange: false

      - name: Update prod-mainnet-us-west-2 deployment values file (WORKER) and re-commit
        uses: fjogeleit/yaml-update-action@master
        with:
          workDir: charts
          repository: geometry-labs/icon-charts
          valueFile: 'deployments/prod-us-west-2/mainnet/metrics/values.yaml'
          propertyPath: 'worker.image.tag'
          value: prod-${{ steps.source.outputs.TAG }}
          branch: main
          createPR: 'false'
          updateFile: true
          commitChange: false

      - name: Configure credentials
        uses: oleksiyrudenko/gha-git-credentials@v2-latest
        with:
          token: '${{ secrets.ICON_CHARTS_PAT }}'
          global: true

      - name: Commit all updates
        run: |
          git add -A
          git commit -m "metrics prod deployment (mainnet) image versions to ${{ steps.source.outputs.TAG }}"
          git push origin
        working-directory: charts

      - name: Push tags
        run: |
          git tag -f metrics-prod-uswest2
          git tag -f metrics-prod-euwest1
          git push -f origin --tags
        working-directory: charts