main-api.yml

name: Push API main to ECR stable

on:
  workflow_dispatch:
  push:
    paths:
      - api/**
      - k8s/prod/openclimate-api-deployment.yml.m4
    branches: [ "main" ]

jobs:
  pushToECR:
    runs-on: ubuntu-latest
    steps:

    - uses: actions/checkout@v3

    - name: Logging in to ECR
      env:
        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      run: aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws/openearthfoundation

    - name: Pushing OC-API to ECR
      env:
        SHA: ${{ github.sha }}
        IMAGE: public.ecr.aws/openearthfoundation/openclimate-api

      run: |
        export VERSION=`node -pe "require('./api/package.json').version"`
        export MAJOR=${VERSION%.*.*}
        export MINOR=${VERSION%.*}
        echo Version: ${VERSION} Major: ${MAJOR} Minor: ${MINOR}
        docker build -t $IMAGE:$SHA api
        docker tag $IMAGE:$SHA $IMAGE:$VERSION
        docker tag $IMAGE:$SHA $IMAGE:$MAJOR
        docker tag $IMAGE:$SHA $IMAGE:$MINOR
        docker tag $IMAGE:$SHA $IMAGE:stable
        docker push $IMAGE:$SHA
        docker push $IMAGE:$VERSION
        docker push $IMAGE:$MAJOR
        docker push $IMAGE:$MINOR
        docker push $IMAGE:stable

  deployToEKS:
    needs: pushToECR
    runs-on: ubuntu-latest
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_EKS_PROD_USER }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_EKS_PROD_USER }}
    steps:

    - uses: actions/checkout@v3

    - name: Creating kubeconfig file
      run: aws eks update-kubeconfig --name ${{ secrets.EKS_PROD_NAME }} --region us-east-1

    - name: Testing connection to EKS
      run: kubectl get pods -n default

    - name: Deploying service
      run: |

        kubectl run latest-population \
          --restart=OnFailure \
          --generate-name \
          --image=public.ecr.aws/openearthfoundation/openclimate-api:stable \
          --env POSGRES_ADDRESS=${{secrets.PROD_POSTGRESQL_ADDRESS}} \
          --env POSGRES_DB=${{secrets.PROD_POSTGRESQL_DB}} \
          --env POSTGRES_USER=${{secrets.PROD_POSTGRESQL_USER}} \
          --env POSGRES_PASSWORD=${{secrets.PROD_POSTGRESQL_PASSWORD}} \
          --command -- npm run latest-population

        m4 -DENV_JWT_SECRET=${{secrets.PROD_API_JWT_SECRET}} \
          -DENV_SESSION_SECRET=${{secrets.PROD_API_SESSION_SECRET}} \
          -DENV_POSTGRESQL_HOST=${{secrets.PROD_POSTGRESQL_ADDRESS}} \
          -DENV_POSTGRESQL_DB=${{secrets.PROD_POSTGRESQL_DB}} \
          -DENV_POSTGRESQL_USER=${{secrets.PROD_POSTGRESQL_USER}} \
          -DENV_POSTGRESQL_PASSWORD=${{secrets.PROD_POSTGRESQL_PASSWORD}} \
          -DENV_ELASTIC_PASSWORD="${{secrets.PROD_ELASTIC_PASSWORD}}" \
          k8s/prod/openclimate-api-deployment.yml.m4 > k8s/prod/openclimate-api-deployment.yml

        kubectl apply -f k8s/prod/openclimate-api-deployment.yml -n default
        kubectl rollout restart deployment openclimate-api-deployment -n default