Merge pull request #205 from Kerosene-Labs/BIL-6-update-fixed #39
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI/CD - Production | |
| on: | |
| push: | |
| tags: | |
| - "v*" | |
| jobs: | |
| backend_dist: | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| packages: write | |
| actions: read | |
| security-events: write | |
| defaults: | |
| run: | |
| working-directory: ./backend | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: "21" | |
| distribution: "corretto" | |
| server-id: github | |
| settings-path: ${{ github.workspace }} | |
| cache: "maven" | |
| - name: Cache Maven dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: ~/.m2/repository | |
| key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-maven- | |
| - name: Build with Maven | |
| run: ./mvnw -B package --file pom.xml | |
| - name: Upload Artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: backend | |
| path: | | |
| ./backend/target/billtracker-backend-1.0.0.jar | |
| backend_oci_image: | |
| runs-on: ubuntu-24.04 | |
| defaults: | |
| run: | |
| working-directory: ./backend | |
| needs: | |
| - backend_dist | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.ACCESS_TOKEN }} | |
| - name: Set Target | |
| uses: ./.github/actions/set-target | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: backend | |
| path: ./backend | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: ./backend | |
| push: true | |
| tags: ghcr.io/kerosene-labs/billtracker-backend:latest | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| frontend_dist: | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| contents: read | |
| packages: write | |
| actions: read | |
| security-events: write | |
| defaults: | |
| run: | |
| working-directory: ./frontend | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| lfs: true | |
| - name: Cache npm dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: ~/.npm | |
| key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }} | |
| restore-keys: | | |
| ${{ runner.os }}-node- | |
| - name: Install NPM Packages | |
| run: npm i | |
| - name: Set Target | |
| uses: ./.github/actions/set-target | |
| - name: Build Distributable | |
| run: npm run build -- --mode=production | |
| - run: ls | |
| - name: Upload Artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: frontend | |
| path: ./frontend/build | |
| frontend_oci_image: | |
| runs-on: ubuntu-24.04 | |
| defaults: | |
| run: | |
| working-directory: ./frontend | |
| needs: | |
| - frontend_dist | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.ACCESS_TOKEN }} | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: frontend | |
| path: ./frontend/build | |
| - name: Install NPM Packages | |
| run: npm i | |
| - run: ls | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: ./frontend | |
| push: true | |
| tags: ghcr.io/kerosene-labs/billtracker-frontend:latest | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| deploy: | |
| runs-on: ubuntu-24.04 | |
| defaults: | |
| run: | |
| working-directory: ./frontend | |
| needs: | |
| - frontend_oci_image | |
| - backend_oci_image | |
| environment: production | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Remote Command on Infrastructure | |
| uses: ./.github/actions/remote-command | |
| with: | |
| bastion_private_key: ${{ secrets.BASTION_PRIVATE_KEY }} | |
| bastion_ssh_user: ${{ secrets.BASTION_SSH_USER }} | |
| bastion_ssh_host: ${{ secrets.BASTION_HOST }} | |
| deployment_private_key: ${{secrets.DEPLOYMENT_PRIVATE_KEY}} | |
| deployment_ssh_user: infra | |
| deployment_server: mars1 | |
| command: cd billtracker && docker compose pull frontend backend && docker compose up frontend backend -d |