deploy-test.yml

name: 02.Deploy Test Environment

on:
  push:
    tags:
    - v*.*.*

env:
  GITHUB_REGISTRY: ghcr.io
  IMAGE_TAG: ${{ github.ref_name}}

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  packages: write
  contents: write
  security-events: write

jobs:
  set-tag:
    runs-on: ubuntu-22.04
    outputs:
      image_tag: ${{ steps.set-image-tag.outputs.image_tag }}
    steps:
    - name: Set IMAGE_TAG
      id: set-image-tag
      run: echo "::set-output name=image_tag::${GITHUB_REF_NAME#v}"

  build-push-app:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@401f2efdfeb6d63914aa3b87d90c88d04dbf58f9
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc
        docker-context: .
        docker-file: app/Dockerfile
        docker-args: |
          deployment_tag=${{ github.ref_name }}
        metadata-tags: |
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}

  build-push-pre-prisma:
    runs-on: ubuntu-22.04
    timeout-minutes: 10

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@401f2efdfeb6d63914aa3b87d90c88d04dbf58f9
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-pre-prisma
        docker-context: app
        docker-file: app/Dockerfile.db
        metadata-tags: |
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}

  build-push-pre-data-migrations:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@401f2efdfeb6d63914aa3b87d90c88d04dbf58f9
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-pre-data-migrations
        docker-context: data-migrations
        docker-file: data-migrations/Dockerfile
        metadata-tags: |
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}

  build-push-email:
    runs-on: ubuntu-22.04
    timeout-minutes: 10

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build and Push
      uses: egose/actions/docker-build-push@401f2efdfeb6d63914aa3b87d90c88d04dbf58f9
      with:
        registry-url: ${{ env.GITHUB_REGISTRY }}
        registry-username: ${{ github.actor }}
        registry-password: ${{ secrets.GITHUB_TOKEN }}
        image-name: bcgov/pltsvc-email
        docker-context: .
        docker-file: app/Dockerfile.email
        metadata-tags: |
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}

  deploy:
    needs: [set-tag, build-push-app, build-push-pre-prisma, build-push-pre-data-migrations, build-push-email]
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    permissions:
      contents: read
    environment:
      name: test
      url: https://test-pltsvc.apps.silver.devops.gov.bc.ca

    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb

    - name: Authenticate and set context
      uses: redhat-actions/oc-login@dfbd9912672664f9df2023c1c16e07bcf306043c
      with:
        openshift_server_url: ${{ secrets.OPENSHIFT_SERVER }}
        openshift_token: ${{ secrets.OPENSHIFT_TOKEN }}
        namespace: ${{ vars.OPENSHIFT_NAMESPACE }}
        insecure_skip_tls_verify: true

    - name: Deploy apps with Helm chart
      run: |
        vtag=${{ env.IMAGE_TAG }}
        make upgrade NAMESPACE=${{ vars.OPENSHIFT_NAMESPACE }} IMAGE_TAG=${vtag//v}
        kubectl rollout status deployment/pltsvc-app
      working-directory: ./helm/main

    - name: Notify RocketChat on Success
      if: success()
      uses: ./.github/actions/rocketchat-notification
      with:
        webhook-url: ${{ secrets.ROCKETCHAT_WEBHOOK_URL }}
        data: |
          {
            "text": ":rocket: Deployment to Test was successful! Read the changes here [${{ github.ref_name }}](https://github.com/bcgov/platform-services-registry/blob/main/CHANGELOG.md#${{ github.ref_name}})"
          }

    - name: Notify RocketChat on Failure
      if: failure()
      uses: ./.github/actions/rocketchat-notification
      with:
        webhook-url: ${{ secrets.ROCKETCHAT_WEBHOOK_URL }}
        data: |
          {
            "text": ":warning: Deployment to Test failed! [Investigate here](https://github.com/bcgov/platform-services-registry/)"
          }

  scan-app:
    needs: [set-tag, build-push-app, build-push-pre-prisma, build-push-pre-data-migrations, build-push-email]
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
    - name: Scan image
      uses: ./.github/actions/scan-docker-image
      with:
        image: ${{ env.GITHUB_REGISTRY }}/bcgov/pltsvc:${{ needs.set-tag.outputs.image_tag }}

  scan-pre-prisma:
    needs: [set-tag, build-push-app, build-push-pre-prisma, build-push-pre-data-migrations, build-push-email]
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
    - name: Scan image
      uses: ./.github/actions/scan-docker-image
      with:
        image: ${{ env.GITHUB_REGISTRY }}/bcgov/pltsvc-pre-prisma:${{ needs.set-tag.outputs.image_tag }}

  scan-pre-data-migrations:
    needs: [set-tag, build-push-app, build-push-pre-prisma, build-push-pre-data-migrations, build-push-email]
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
    - name: Scan image
      uses: ./.github/actions/scan-docker-image
      with:
        image: ${{ env.GITHUB_REGISTRY }}/bcgov/pltsvc-pre-data-migrations:${{ needs.set-tag.outputs.image_tag }}

  scan-email:
    needs: [set-tag, build-push-app, build-push-pre-prisma, build-push-pre-data-migrations, build-push-email]
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    steps:
    - uses: hmarr/debug-action@f7318c783045ac39ed9bb497e22ce835fdafbfe6
    - uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb
    - name: Scan image
      uses: ./.github/actions/scan-docker-image
      with:
        image: ${{ env.GITHUB_REGISTRY }}/bcgov/pltsvc-email:${{ needs.set-tag.outputs.image_tag }}