Push image for 05-assistive-chatbot to bdt-chatbot.navalabs.co #91
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Build and deploy Docker image" | |
| run-name: "Push image for ${{inputs.dockerfile_folder}} to ${{ inputs.subdomain }}.navalabs.co" | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| dockerfile_folder: | |
| description: 'Folder containing Dockerfile to build' | |
| required: true | |
| type: choice | |
| options: | |
| - '05-assistive-chatbot' | |
| - '04-call-summaries' | |
| - '02-household-queries' | |
| subdomain: | |
| description: 'Subdomain of navalabs.co' | |
| required: true | |
| default: 'chat' | |
| type: choice | |
| options: | |
| - 'chat' | |
| - 'chatbot' | |
| - 'chatbdt' | |
| - 'chat-bdt' | |
| - 'bdtbot' | |
| - 'bdt-bot' | |
| - 'bdt-chat' | |
| - 'bdt-chatbot' | |
| - 'chatbot-prototype' | |
| - 'chat.zone' | |
| build_image: | |
| description: "Build and push image" | |
| required: true | |
| type: boolean | |
| default: true | |
| deploy_image: | |
| description: "Deploy image" | |
| required: true | |
| type: boolean | |
| default: true | |
| permissions: | |
| id-token: write # This is required for requesting the JWT from GitHub's OIDC provider for AWS authentication | |
| env: | |
| AWS_REGION: us-east-1 | |
| SERVICE_NAME: ${{ inputs.subdomain }}-svc | |
| jobs: | |
| publish-image: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "Configure AWS credentials" | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: ${{ env.AWS_REGION }} | |
| role-to-assume: arn:aws:iam::654654379445:role/Lightsail_Mgmt_role | |
| role-session-name: GitHub_to_AWS_via_FederatedOIDC | |
| - name: "Setup AWS lightsail command" | |
| run: | | |
| aws --version | |
| aws sts get-caller-identity | |
| sudo curl "https://s3.us-west-2.amazonaws.com/lightsailctl/latest/linux-amd64/lightsailctl" -o "/usr/local/bin/lightsailctl" | |
| sudo chmod +x /usr/local/bin/lightsailctl | |
| echo "Services:" | |
| aws lightsail get-container-services | jq -r '.containerServices[] | "\(.containerServiceName): \tstate=\(.state) \tisDisabled=\(.isDisabled)"' | |
| - name: "Check preconditions" | |
| run: | | |
| echo "Checking if service '$SERVICE_NAME' exists" | |
| aws lightsail get-container-services --service-name "$SERVICE_NAME" | |
| - name: "Checkout source code" | |
| if: inputs.build_image | |
| uses: actions/checkout@v4 | |
| - name: "Populate 05-assistive-chatbot folder with input files" | |
| if: inputs.build_image && inputs.dockerfile_folder == '05-assistive-chatbot' | |
| run: | | |
| # The DOT_ENV_FILE_CONTENTS contains API keys, like LITERAL_API_KEY and OPENAI_API_KEY | |
| # As such, make sure the built image is not publicly accessible | |
| echo "${{ secrets.DOT_ENV_FILE_CONTENTS }}" > .env | |
| - name: "Populate 04-call-summaries folder with input files" | |
| if: inputs.build_image && inputs.dockerfile_folder == '04-call-summaries' | |
| run: | | |
| # The DOT_ENV_FILE_CONTENTS_04 contains API keys, like LITERAL_API_KEY and OPENAI_API_KEY | |
| # As such, make sure the built image is not publicly accessible | |
| echo "${{ secrets.DOT_ENV_FILE_CONTENTS_04 }}" > .env | |
| - name: "Build image: ${{ github.sha }}" | |
| if: inputs.build_image | |
| env: | |
| GURU_CARDS_URL_ID: ${{ secrets.GURU_CARDS_URL_ID }} | |
| run: | | |
| cd ${{ inputs.dockerfile_folder }} | |
| [ -f ./get_input_files.sh ] && ./get_input_files.sh | |
| # Add extra environment variables to facilitate traceability of an image back to the source code | |
| echo " | |
| BUILD_DATE=$(date +%Y-%m-%d-%T) | |
| GIT_SHA=${{ github.sha }} | |
| " >> .env | |
| docker build -t mylocalimage . | |
| - name: "Push image to Lightsail" | |
| if: inputs.build_image | |
| id: push_image | |
| env: | |
| # Lightsail requires that LABEL match regex ^(?:[a-z0-9]{1,2}|[a-z0-9][a-z0-9-]+[a-z0-9])$ | |
| LABEL: git-push | |
| run: | | |
| aws lightsail push-container-image --region $AWS_REGION --service-name "$SERVICE_NAME" --label "$LABEL" --image mylocalimage | |
| LS_DOCKER_IMAGE=$(aws lightsail get-container-images --service-name "$SERVICE_NAME" | jq -r .containerImages[0].image) | |
| echo "Lightsail assigned image name: '$LS_DOCKER_IMAGE'" | |
| echo "LS_DOCKER_IMAGE=$LS_DOCKER_IMAGE" >> $GITHUB_ENV | |
| - name: "Create new deployment" | |
| if: inputs.deploy_image | |
| run: | | |
| CONFIG_TEMPLATE='{ | |
| "serviceName": "$SERVICE_NAME", | |
| "containers": { | |
| "chatbot": { | |
| "image": "$LS_DOCKER_IMAGE", | |
| "command": [], | |
| "environment": { | |
| "ENV": "PROD", | |
| "BUILD_DATE": "$BUILD_DATE", | |
| "GIT_SHA": "${{ github.sha }}" | |
| }, | |
| "ports": { | |
| "8000": "HTTP" | |
| } | |
| } | |
| }, | |
| "publicEndpoint": { | |
| "containerName": "chatbot", | |
| "containerPort": 8000, | |
| "healthCheck": { | |
| "healthyThreshold": 2, | |
| "unhealthyThreshold": 4, | |
| "timeoutSeconds": 20, | |
| "intervalSeconds": 60, | |
| "path": "/healthcheck", | |
| "successCodes": "200-499" | |
| } | |
| } | |
| }' | |
| echo "$CONFIG_TEMPLATE" | BUILD_DATE=$(date +%Y-%m-%d-%T%z) envsubst > config.json | |
| cat config.json | |
| echo "Creating new deployment" | |
| aws lightsail create-container-service-deployment --cli-input-json file://config.json | |
| sleep 10 | |
| echo "Waiting for service to be Deploying" | |
| while true; do | |
| sleep 5 | |
| SVC_STATE=$(aws lightsail get-container-services --service-name "$SERVICE_NAME" | jq -r '.containerServices[0].state') | |
| echo "service state: $SVC_STATE" | |
| if [ "$SVC_STATE" == "DEPLOYING" ]; then | |
| break | |
| fi | |
| done | |
| echo "Waiting for container ${{ github.sha }} to be Active" | |
| while true; do | |
| sleep 30 | |
| NEXT_DEPLOYMENT=$(aws lightsail get-container-services --service-name "$SERVICE_NAME" | jq -r '.containerServices[0].nextDeployment') | |
| CURR_DEPLOYMENT=$(aws lightsail get-container-services --service-name "$SERVICE_NAME" | jq -r '.containerServices[0].currentDeployment') | |
| GIT_SHA=$(echo "$CURR_DEPLOYMENT" | jq -r '.containers.chatbot.environment.GIT_SHA') | |
| DEPLOYMENT_STATE=$(echo "$CURR_DEPLOYMENT" | jq -r '.state') | |
| echo "current container state: $GIT_SHA $DEPLOYMENT_STATE" | |
| if [ "$GIT_SHA" == "${{ github.sha }}" ] && [ "$DEPLOYMENT_STATE" == "ACTIVE" ]; then | |
| break | |
| fi | |
| if [ "$NEXT_DEPLOYMENT" == "null" ]; then | |
| echo "Deployment failed! Increase the power of the service or check logs at https://lightsail.aws.amazon.com/ls/webapp/home/containers" | |
| aws lightsail get-container-services --service-name "$SERVICE_NAME" | |
| exit 9 | |
| fi | |
| done | |
| # TODO: warm up vector DB on startup |