github-release.yml

name: Weekly Release Build

on:
  push:
    branches: [API-37625-gh-release-build]
  workflow_dispatch:

jobs:
  install:
    runs-on: ubuntu-latest
    outputs:
      node_version: ${{ steps.node_version.outputs.node_version }}
    steps:
      - uses: actions/checkout@v2
      - name: Setup node
        uses: actions/setup-node@v2
        with:
          node-version: 16

      - id: node_version
        name: Set Node Version to ENV
        run: |
          NODE_VERSION=$(node -v)
          echo $NODE_VERSION
          echo "node_version=$NODE_VERSION" >> $GITHUB_OUTPUT

      - name: Install dependencies
        run: npm ci

  release_builds:
    needs: [install]
    runs-on: ubuntu-latest
    strategy:
      matrix:
        environment: ['dev', 'staging']

    steps:
      - uses: actions/checkout@v2
      - name: Setup node
        uses: actions/setup-node@v2
        with:
          node-version: 16

      - name: Install dependencies
        run: npm ci

      - name: Print env
        run: printenv

      - name: Run Build
        env:
          NODE_ENV: production
          BUILD_ENV: ${{ matrix.environment }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: npm run build -- --env=${{ matrix.environment }}

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{secrets.AWS_ACCESS_KEY_ID}}
          aws-secret-access-key: ${{secrets.AWS_SECRET_ACCESS_KEY}}
          aws-region: ${{secrets.AWS_REGION}}
          role-to-assume: ${{secrets.AWS_ROLE_ARN}}
          role-duration-seconds: 1200
          role-session-name: GitHubActions

      - name: Delay for CI jobs
        run: sleep 90s

      - name: Post to Slack
        run: ./slackpost.sh -t  started "started SAML Proxy release..."

      - name: Check CI status
        run: ./gh-status.sh -r ${REPO} -c ${COMMIT_HASH} -x ${XCHECKS}
      
      - name: Get Old Tag
        id: old_tag
        run: echo "::set-output name=old_tag::$(git tag --sort=creatordate | grep fargate-saml-proxy | head -1)"

      - name: Increment Tag
        id: new_tag
        run: echo "::set-output name=new_tag::$(./increment.sh ${{ steps.old_tag.outputs.old_tag }})"

      - name: Create Release
        run: |
          if [ "${{ github.event_name }}" == "schedule" ]; then
            gh release create ${{ steps.new_tag.outputs.new_tag }} -t ${{ steps.new_tag.outputs.new_tag }}
          else
            echo "Testing mode: Skipping release creation"
          fi

      - name: Tag ECR Image
        run: |
          if [ "${{ github.event_name }}" == "schedule" ]; then
            make tag IMAGE=${IMAGE} TAG=${GITHUB_SHA:0:7} NEW_TAG=${{ steps.new_tag.outputs.new_tag }}
          else
            echo "Testing mode: Skipping release creation"
          fi

      - name: Tag ECR Image Tests
        run: |
          if [ "${{ github.event_name }}" == "schedule" ]; then
            make tag IMAGE=${IMAGE}-tests TAG=${GITHUB_SHA:0:7} NEW_TAG=${{ steps.new_tag.outputs.new_tag }}
          else
            echo "Testing mode: Skipping release creation"
          fi

      - name: Deploy to AWS Codebuild
        run: |
          if [ "${{ github.event_name }}" == "schedule" ]; then
            aws codebuild start-build --project-name saml-proxy-deploy --environment-variables-override name=RELEASE,value${{ steps.new_tag.outputs.new_tag }}
          else
            echo "Testing mode: Skipping release creation"           
          fi

      - name: Post to Slack (Success or Failure)
        run: |
          if [ "${{ job.status }}" == "success" ]; then
            ./slackpost.sh -t success "SAML Proxy release ${{ steps.new_tag.outputs.new_tag }} was successful."
          else
            ./slackpost.sh -t "There was an error with the release process for SAML Proxy."
          fi