APT-1809-1773-1792-1810 (#89) #148
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CICD staging" | |
| on: | |
| # Test run before merging | |
| pull_request: | |
| branches: | |
| - main | |
| # On merged | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| build-docker: | |
| permissions: | |
| id-token: write | |
| contents: write | |
| runs-on: ubuntu-22.04 | |
| if: github.actor != 'dependabot[bot]' && github.ref_name == 'main' | |
| name: "Build image" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| application: | |
| - zq2-staking-frontend | |
| include: | |
| - application: zq2-staking-frontend | |
| image_name: zq2-staking-frontend | |
| file: images/frontend/Dockerfile | |
| context: . | |
| env: | |
| DOCKER_DOMAIN: asia-docker.pkg.dev | |
| REGISTRY: asia-docker.pkg.dev/prj-d-devops-services-4dgwlsse/zilliqa-public | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: "true" | |
| ref: ${{ github.event.pull_request.head.ref }} | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| fetch-depth: 0 | |
| - name: Docker build and push - staging | |
| uses: Zilliqa/gh-actions-workflows/actions/ci-dockerized-app-build-push@v2 | |
| with: | |
| file: ${{ matrix.file }} | |
| context: ${{ matrix.context }} | |
| push: ${{ github.ref_name == github.event.repository.default_branch }} | |
| tag: ${{ env.REGISTRY }}/${{ matrix.image_name }} | |
| tag-length: 8 | |
| tag-latest: ${{ github.ref_name == github.event.repository.default_branch }} | |
| registry: asia-docker.pkg.dev | |
| workload-identity-provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}" | |
| service-account: "${{ secrets.GCP_STG_GITHUB_SA_DOCKER_REGISTRY }}" | |
| cache-key: ${{ env.REGISTRY }}/${{ matrix.image_name }}-cache | |
| build-args: | | |
| DEPLOY_ENV=stg | |
| deploy-to-prototestnet-and-devnet: | |
| needs: [build-docker] | |
| permissions: | |
| id-token: write | |
| contents: write | |
| runs-on: ubuntu-22.04 | |
| if: github.actor != 'dependabot[bot]' && github.ref_name == 'main' | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| application: | |
| - zq2-stake-prototestnet | |
| - zq2-stake-devnet | |
| env: | |
| APP_NAME: ${{ matrix.application }} | |
| Z_ENV: infra/live/gcp/non-production/prj-d-staging/z_ase1.yaml | |
| Z_SERVICE_ACCOUNT: ${{ secrets.GCP_STG_GITHUB_SA_K8S_DEPLOY }} | |
| OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN_STG }} | |
| GITHUB_PAT: ${{ secrets.GH_PAT }} | |
| Z_IMAGE: asia-docker.pkg.dev/prj-d-devops-services-4dgwlsse/zilliqa-private/z:latest | |
| REGISTRY: asia-docker.pkg.dev | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 | |
| with: | |
| repository: Zilliqa/devops | |
| token: ${{ env.GITHUB_PAT }} | |
| ref: main | |
| sparse-checkout: | | |
| ${{ env.Z_ENV }} | |
| - name: Authenticate to Google Cloud | |
| id: google-auth | |
| uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa | |
| with: | |
| token_format: "access_token" | |
| workload_identity_provider: "${{ secrets.GCP_PRD_GITHUB_WIF }}" | |
| service_account: ${{ env.Z_SERVICE_ACCOUNT }} | |
| create_credentials_file: true | |
| - name: Deploy application | |
| run: | | |
| gcloud auth print-access-token | docker login -u oauth2accesstoken --password-stdin https://${{ env.REGISTRY }} | |
| docker run --rm \ | |
| -e ZQ_USER='${{ env.Z_SERVICE_ACCOUNT }}' \ | |
| -e Z_ENV='/devops/${{ env.Z_ENV }}' \ | |
| -e OP_SERVICE_ACCOUNT_TOKEN='${{ env.OP_SERVICE_ACCOUNT_TOKEN }}' \ | |
| -e GITHUB_PAT='${{ env.GITHUB_PAT }}' \ | |
| -e CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE='/google/application_default_credentials.json' \ | |
| -v `pwd`:/devops \ | |
| -v ${{ steps.google-auth.outputs.credentials_file_path }}:/google/application_default_credentials.json \ | |
| --name z_container ${{ env.Z_IMAGE }} \ | |
| bash -c "gcloud config set account ${{ env.Z_SERVICE_ACCOUNT }} && z /app /devops app sync --cache-dir .cache ${{ env.APP_NAME }}" |