Merge pull request #243 from RockefellerArchiveCenter/gha #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Deploy | |
| on: | |
| push: | |
| branches: | |
| - base | |
| - development | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: ${{ github.ref_name }} | |
| env: | |
| APP_NAME: docs-build | |
| LAMBDA_NAME: build_docs_site | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@v4 | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4.0.2 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE }} | |
| role-skip-session-tagging: true | |
| role-duration-seconds: 900 | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| - name: Login to Amazon ECR | |
| uses: aws-actions/amazon-ecr-login@v2.0.1 | |
| with: | |
| registries: ${{ secrets.ECR_REGISTRIES }} | |
| - name: Set environment variables | |
| run: | | |
| echo "DATE=$(date +'%Y%m%dT%H%M%S')" >> $GITHUB_ENV | |
| - name: Copy config file | |
| run: cp theme/_config.yml.example theme/config.yml | |
| - name: Build Docker image | |
| run: docker build -t ${{ env.APP_NAME }} . | |
| - name: Tag and push latest to ECR | |
| if: github.ref == 'refs/heads/base' | |
| run: | | |
| docker tag ${{ env.APP_NAME }} "${{ secrets.AWS_ACCOUNT_ID }}".dkr.ecr."${{ secrets.AWS_REGION }}".amazonaws.com/"${{ env.APP_NAME }}":latest | |
| docker push "${{ secrets.AWS_ACCOUNT_ID }}".dkr.ecr."${{ secrets.AWS_REGION }}".amazonaws.com/"${{ env.APP_NAME }}":latest | |
| - name: Tag and push dev to ECR | |
| if: github.ref == 'refs/heads/development' | |
| run: | | |
| docker tag ${{ env.APP_NAME }} "${{ secrets.AWS_ACCOUNT_ID }}".dkr.ecr."${{ secrets.AWS_REGION }}".amazonaws.com/"${{ env.APP_NAME }}":dev | |
| docker push "${{ secrets.AWS_ACCOUNT_ID }}".dkr.ecr."${{ secrets.AWS_REGION }}".amazonaws.com/"${{ env.APP_NAME }}":dev | |
| - name: Tag and push versioned image to ECR | |
| if: github.ref == 'refs/heads/development' | |
| run: | | |
| docker tag ${{ env.APP_NAME }} "${{ secrets.AWS_ACCOUNT_ID }}".dkr.ecr."${{ secrets.AWS_REGION }}".amazonaws.com/"${{ env.APP_NAME }}":"${{ env.DATE }}"-"${{ github.sha }}" | |
| docker push "${{ secrets.AWS_ACCOUNT_ID }}".dkr.ecr."${{ secrets.AWS_REGION }}".amazonaws.com/"${{ env.APP_NAME }}":"${{ env.DATE }}"-"${{ github.sha }}" | |
| - name: Tag image for production (base branch) | |
| if: github.ref == 'refs/heads/base' | |
| run: | | |
| MANIFEST=$(aws ecr batch-get-image --registry-id ${{ secrets.AWS_ACCOUNT_ID }} --repository-name ${{ env.APP_NAME }} --image-ids imageTag=dev --output json | jq -c --join-output '.images[0].imageManifest') | |
| aws ecr put-image --registry-id ${{ secrets.AWS_ACCOUNT_ID }} --repository-name ${{ env.APP_NAME }} --image-tag prod --image-manifest "$MANIFEST" | |
| - name: Deploy lambda | |
| if: github.ref == 'refs/heads/base' | |
| run: aws lambda update-function-code | |
| --function-name arn:aws:lambda:$AWS_REGION:${{ secrets.AWS_ACCOUNT_ID }}:function:$LAMBDA_NAME | |
| --image-uri ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.${{ secrets.AWS_REGION }}.amazonaws.com/${{ env.APP_NAME }}:prod |