Staging and production deployment workflows

.github/workflows/build.yml

@@ -1,12 +1,18 @@
-# this build is triggered when a new pre-release has been created
-# it creates a new docker build image based on the tag associated
+# this is a reusable workflow that will be called by the
+# push_staging and push_production workflows
+# more info: https://docs.github.com/en/actions/learn-github-actions/reusing-workflows
 
 name: build
 
 on:
-  release:
-    types:
-      - "prereleased"
+  workflow_call:
+    inputs:
+      is_production:
+        required: true
+        type: boolean
+        description: Determine whether the current workflow is executed against production or not
+
+# TODO: get the secrets via inputs, so we let the staging/production workflows retrieve their corresponding credentials
 env:
   AWS_REGION: ${{ secrets.AWS_REGION }}
   AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
@@ -19,17 +25,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      # download the source code into the runner
-      - name: checkout
-        uses: actions/checkout@v2
-
-      # gather metadata from git & github actions to reference in docker
-      - name: git & github metadata
-        id: metadata
-        uses: docker/metadata-action@v3
-        with:
-          images: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/openverse/frontend
-
       # setup docker buildx
       - name: setup docker buildx
         uses: docker/setup-buildx-action@v1
@@ -40,11 +35,47 @@ jobs:
       - name: docker login
         uses: aws-actions/amazon-ecr-login@v1
 
+      # for staging
+      # gather metadata from git & github actions to reference in docker
+      - name: git & github metadata staging
+        id: metadata_staging
+        uses: docker/metadata-action@v3
+        if: ${{ github.event.inputs.is_production == false }}
+        with:
+          images: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/openverse/frontend
+          tags: |
+            latest=auto
+            type=edge,branch=main
+
+      # build a docker image
+      - name: build docker image
+        uses: docker/build-push-action@v2
+        if: ${{ github.event.inputs.is_production == false }}
+        with:
+          context: .
+          tags: ${{ steps.metadata_staging.outputs.tags }}
+          labels: ${{ steps.metadata_staging.outputs.labels }}
+          push: true
+
+      # for production
+      # gather metadata from git & github actions to reference in docker
+      - name: git & github metadata production
+        id: metadata_production
+        uses: docker/metadata-action@v3
+        if: ${{ github.event.inputs.is_production == true }}
+        with:
+          images: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/openverse/frontend
+          tags: |
+            latest=false
+            type=raw,value=stable
+            type=semver,pattern={{version}}
+
       # build a docker image
       - name: build docker image
         uses: docker/build-push-action@v2
+        if: ${{ github.event.inputs.is_production == true }}
         with:
           context: .
-          tags: ${{ steps.metadata.outputs.tags }}
-          labels: ${{ steps.metadata.outputs.labels }}
+          tags: ${{ steps.metadata_production.outputs.tags }}
+          labels: ${{ steps.metadata_production.outputs.labels }}
           push: true

.github/workflows/push_production.yaml

@@ -0,0 +1,28 @@
+# this build is triggered when a new pre-release has been created
+# it creates a new docker build image based on the tag associated
+
+name: push_production
+
+on:
+  release:
+    types:
+      - 'released'
+
+jobs:
+  push:
+    name: push
+    runs-on: ubuntu-latest
+    environment:
+      name: production
+      url: https://search-prod.openverse.engineering
+
+    steps:
+      # download the source code into the runner
+      - name: checkout
+        uses: actions/checkout@v2
+
+      # build a new docker image and push it into the repository
+      - name: docker build
+        uses: ./.github/workflows/build.yaml@v1
+        with:
+          is_production: true

.github/workflows/push_staging.yaml

@@ -0,0 +1,29 @@
+# this build is triggered when a new pull request has been merged
+# into the main branch
+
+name: push_staging
+
+on:
+  push:
+    branches:
+      - main
+      - ci/* # allow any ci/* branch the ability to deploy to staging without the need to merge the PR
+
+jobs:
+  push:
+    name: push
+    runs-on: ubuntu-latest
+    environment:
+      name: staging
+      url: https://search-staging.openverse.engineering
+
+    steps:
+      # download the source code into the runner
+      - name: checkout
+        uses: actions/checkout@v2
+
+      # build a new docker image and push it into the repository
+      - name: docker build
+        uses: ./.github/workflows/build.yaml@v1
+        with:
+          is_production: false