move to production

.github/workflows/deploy-frontend-azurepreview.yml

@@ -13,25 +13,33 @@ env:
   KEYVAULT: airqo-kv-staging
 
 jobs:
-
-#########################################
-# FORMAT BRANCH NAME
-#########################################
+  #########################################
+  # FORMAT BRANCH NAME
+  #########################################
 
   branch-name:
     runs-on: ubuntu-latest
     outputs:
       lowercase: ${{ steps.string.outputs.lowercase }}
+      sanitized: ${{ steps.sanitize.outputs.sanitized }}
 
     steps:
       - id: string
         uses: ASzc/change-string-case-action@v5
         with:
           string: ${{ github.head_ref || github.ref_name }}
 
-#########################################
-# DETECT CHANGED SERVICES
-#########################################
+      - name: sanitize branch name
+        id: sanitize
+        env:
+          RAW: ${{ steps.string.outputs.lowercase }}
+        run: |
+          CLEAN=$(printf '%s' "${RAW:0:12}" | sed 's/-*$//')
+          echo "sanitized=$CLEAN" >> $GITHUB_OUTPUT
+
+  #########################################
+  # DETECT CHANGED SERVICES
+  #########################################
 
   check:
     runs-on: ubuntu-latest
@@ -94,9 +102,9 @@ jobs:
             fi
           done < files.txt
 
-#########################################
-# WEBSITE PREVIEW
-#########################################
+  #########################################
+  # WEBSITE PREVIEW
+  #########################################
 
   website:
     needs: [check, branch-name]
@@ -132,8 +140,8 @@ jobs:
 
       - name: Deploy Container App
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-website-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-website-preview"
           ENV_VARS="SECRET=${{ secrets.WEBSITE_SECRET }} API_URL=${{ secrets.WEBSITE_STAGE_API_URL }} OPENCAGE_API_KEY=${{ secrets.WEBSITE_STAGE_OPENCAGE_API_KEY }} API_TOKEN=${{ secrets.WEBSITE_STAGE_API_TOKEN }} SLACK_WEBHOOK_URL=${{ secrets.WEBSITE_STAGE_SLACK_WEBHOOK_URL }} SLACK_CHANNEL=${{ secrets.WEBSITE_STAGE_SLACK_CHANNEL }} NEXT_PUBLIC_MAPBOX_ACCESS_TOKEN=${{ secrets.WEBSITE_STAGE_NEXT_PUBLIC_MAPBOX_ACCESS_TOKEN }} NEXT_PUBLIC_GA_MEASUREMENT_ID=${{ secrets.WEBSITE_STAGE_NEXT_PUBLIC_GA_MEASUREMENT_ID }} GOOGLE_SITE_VERIFICATION=${{ secrets.WEBSITE_STAGE_GOOGLE_SITE_VERIFICATION }} NEXT_PUBLIC_SITE_URL=${{ secrets.WEBSITE_STAGE_NEXT_PUBLIC_SITE_URL }}"
           az containerapp up \
             --name $APP \
@@ -149,8 +157,8 @@ jobs:
 
       - id: preview
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-website-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-website-preview"
 
           URL=$(az containerapp show \
             --name $APP \
@@ -174,9 +182,9 @@ jobs:
               body: 'New azure website changes available for preview [here](${{ needs.website.outputs.url }})'
             })
 
-#########################################
-# BEACON PREVIEW
-#########################################
+  #########################################
+  # BEACON PREVIEW
+  #########################################
 
   beacon:
     name: build-push-deploy-beacon-preview
@@ -214,8 +222,10 @@ jobs:
 
       - name: Deploy Container App
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-beacon-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-beacon-preview"
+
+          mapfile -t ENV_VARS < <(jq -r 'to_entries[] | "\(.key)=\(.value|tostring)"' secrets.json)
 
           az containerapp up \
             --name $APP \
@@ -227,12 +237,12 @@ jobs:
             --registry-server ${{ env.REGISTRY_URL }} \
             --registry-username airqoacr \
             --registry-password ${{ secrets.ACR_PASSWORD }} \
-            --env-vars "$(jq -r 'to_entries | map("\(.key)=\(.value|tostring)") | join(" ")' secrets.json)"
+            --env-vars "${ENV_VARS[@]}"
 
       - id: preview
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-beacon-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-beacon-preview"
 
           URL=$(az containerapp show \
             --name $APP \
@@ -256,9 +266,9 @@ jobs:
               body: 'New azure beacon changes available for preview [here](${{ needs.beacon.outputs.url }})'
             })
 
-#########################################
-# CALIBRATE APP PREVIEW
-#########################################
+  #########################################
+  # CALIBRATE APP PREVIEW
+  #########################################
 
   calibrate_app:
     name: build-push-deploy-calibrate-app-preview
@@ -295,8 +305,10 @@ jobs:
 
       - name: Deploy Container App
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-calibrate-app-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-calibrate-app-preview"
+
+          mapfile -t ENV_VARS < <(jq -r 'to_entries[] | "\(.key)=\(.value|tostring)"' secrets.json)
 
           az containerapp up \
             --name $APP \
@@ -308,12 +320,12 @@ jobs:
             --registry-server ${{ env.REGISTRY_URL }} \
             --registry-username airqoacr \
             --registry-password ${{ secrets.ACR_PASSWORD }} \
-            --env-vars "$(jq -r 'to_entries | map("\(.key)=\(.value|tostring)") | join(" ")' secrets.json)"
+            --env-vars "${ENV_VARS[@]}"
 
       - id: preview
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-calibrate-app-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-calibrate-app-preview"
 
           URL=$(az containerapp show \
             --name $APP \
@@ -337,9 +349,9 @@ jobs:
               body: 'New azure calibrate_app changes available for preview [here](${{ needs.calibrate_app.outputs.url }})'
             })
 
-#########################################
-# ANALYTICS PLATFORM PREVIEW
-#########################################
+  #########################################
+  # ANALYTICS PLATFORM PREVIEW
+  #########################################
 
   analytics_platform:
     name: build-push-deploy-analytics-platform-preview
@@ -364,13 +376,27 @@ jobs:
 
       - name: Pull secrets from Key Vault
         run: |
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-analytics-p-preview"
+
+          DEFAULT_DOMAIN=$(az containerapp env show \
+            --name ${{ env.PR_PREVIEW_ENV }} \
+            --resource-group ${{ env.RG }} \
+            --query properties.defaultDomain -o tsv)
+
+          NEXTAUTH_URL="https://$APP.$DEFAULT_DOMAIN"
+
           az keyvault secret show \
             --vault-name ${{ env.KEYVAULT }} \
             --name sta-env-next-platform \
             --query value -o tsv > secrets.json
 
-          # Write .env into the build context for Next.js build time
-          jq -r 'to_entries | .[] | "\(.key)=\(.value|tojson)"' secrets.json > src/platform/.env
+          jq -r 'to_entries | .[] | select(.key != "NEXTAUTH_URL" and .key != "NEXTAUTH_URL_INTERNAL" and .key != "NEXTAUTH_COOKIE_DOMAIN" and .key != "AUTH_URL" and .key != "AUTH_TRUST_HOST") | "\(.key)=\(.value|tojson)"' secrets.json > src/platform/.env
+          {
+            echo "NEXTAUTH_URL=$NEXTAUTH_URL"
+            echo "NEXTAUTH_URL_INTERNAL=$NEXTAUTH_URL"
+            echo "AUTH_TRUST_HOST=true"
+          } >> src/platform/.env
 
       - name: Build image
         run: |
@@ -379,8 +405,22 @@ jobs:
 
       - name: Deploy Container App
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-analytics-p-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-analytics-p-preview"
+
+          DEFAULT_DOMAIN=$(az containerapp env show \
+            --name ${{ env.PR_PREVIEW_ENV }} \
+            --resource-group ${{ env.RG }} \
+            --query properties.defaultDomain -o tsv)
+
+          NEXTAUTH_URL="https://$APP.$DEFAULT_DOMAIN"
+
+          mapfile -t ENV_VARS < <(jq -r 'to_entries[] | select(.key != "NEXTAUTH_URL" and .key != "NEXTAUTH_URL_INTERNAL" and .key != "NEXTAUTH_COOKIE_DOMAIN" and .key != "AUTH_URL" and .key != "AUTH_TRUST_HOST") | "\(.key)=\(.value|tostring)"' secrets.json)
+          ENV_VARS+=("NEXTAUTH_URL=$NEXTAUTH_URL")
+          ENV_VARS+=("NEXTAUTH_URL_INTERNAL=$NEXTAUTH_URL")
+          ENV_VARS+=("AUTH_TRUST_HOST=true")
+
+          jq -e '((.NEXTAUTH_SECRET // .AUTH_SECRET) | length > 0)' secrets.json >/dev/null
 
           az containerapp up \
             --name $APP \
@@ -392,12 +432,28 @@ jobs:
             --registry-server ${{ env.REGISTRY_URL }} \
             --registry-username airqoacr \
             --registry-password ${{ secrets.ACR_PASSWORD }} \
-            --env-vars "$(jq -r 'to_entries | map("\(.key)=\(.value|tostring)") | join(" ")' secrets.json)"
+            --env-vars "${ENV_VARS[@]}"
+
+          az containerapp update \
+            --name $APP \
+            --resource-group ${{ env.RG }} \
+            --replace-env-vars "${ENV_VARS[@]}"
+
+          AUTH_STATUS=$(curl -sS -o /tmp/nextauth-providers.json -w "%{http_code}" "$NEXTAUTH_URL/api/auth/providers")
+          if [ "$AUTH_STATUS" != "200" ]; then
+            echo "NextAuth providers endpoint returned HTTP $AUTH_STATUS"
+            cat /tmp/nextauth-providers.json || true
+            az containerapp logs show \
+              --name $APP \
+              --resource-group ${{ env.RG }} \
+              --tail 80 || true
+            exit 1
+          fi
 
       - id: preview
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-analytics-p-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-analytics-p-preview"
 
           URL=$(az containerapp show \
             --name $APP \
@@ -421,9 +477,9 @@ jobs:
               body: 'New azure analytics_platform changes available for preview [here](${{ needs.analytics_platform.outputs.url }})'
             })
 
-#########################################
-# VERTEX PREVIEW
-#########################################
+  #########################################
+  # VERTEX PREVIEW
+  #########################################
 
   vertex:
     name: build-push-deploy-vertex-preview
@@ -448,8 +504,8 @@ jobs:
 
       - name: Pull secrets from Key Vault
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-vertex-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-vertex-preview"
 
           DEFAULT_DOMAIN=$(az containerapp env show \
             --name ${{ env.PR_PREVIEW_ENV }} \
@@ -477,8 +533,15 @@ jobs:
 
       - name: Deploy Container App
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-vertex-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-vertex-preview"
+
+          DEFAULT_DOMAIN=$(az containerapp env show \
+            --name ${{ env.PR_PREVIEW_ENV }} \
+            --resource-group ${{ env.RG }} \
+            --query properties.defaultDomain -o tsv)
+
+          NEXTAUTH_URL="https://$APP.$DEFAULT_DOMAIN"
 
           mapfile -t ENV_VARS < <(jq -r 'to_entries[] | select(.key != "NEXTAUTH_URL" and .key != "NEXTAUTH_URL_INTERNAL" and .key != "NEXTAUTH_COOKIE_DOMAIN") | "\(.key)=\(.value|tostring)"' secrets.json)
           ENV_VARS+=("NEXTAUTH_URL=$NEXTAUTH_URL")
@@ -510,13 +573,6 @@ jobs:
             --query "properties.template.containers[0].env[].name" \
             -o tsv | sort
 
-          DEFAULT_DOMAIN=$(az containerapp env show \
-            --name ${{ env.PR_PREVIEW_ENV }} \
-            --resource-group ${{ env.RG }} \
-            --query properties.defaultDomain -o tsv)
-
-          NEXTAUTH_URL="https://$APP.$DEFAULT_DOMAIN"
-
           AUTH_STATUS=$(curl -sS -o /tmp/nextauth-providers.json -w "%{http_code}" "$NEXTAUTH_URL/api/auth/providers")
           if [ "$AUTH_STATUS" != "200" ]; then
             echo "NextAuth providers endpoint returned HTTP $AUTH_STATUS"
@@ -530,8 +586,8 @@ jobs:
 
       - id: preview
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-vertex-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-vertex-preview"
 
           URL=$(az containerapp show \
             --name $APP \
@@ -555,9 +611,9 @@ jobs:
               body: 'New azure vertex changes available for preview [here](${{ needs.vertex.outputs.url }})'
             })
 
-#########################################
-# DOCS PREVIEW
-#########################################
+  #########################################
+  # DOCS PREVIEW
+  #########################################
 
   docs:
     name: build-push-deploy-docs-preview
@@ -594,8 +650,10 @@ jobs:
 
       - name: Deploy Container App
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-docs-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-docs-preview"
+
+          mapfile -t ENV_VARS < <(jq -r 'to_entries[] | "\(.key)=\(.value|tostring)"' secrets.json)
 
           az containerapp up \
             --name $APP \
@@ -607,12 +665,12 @@ jobs:
             --registry-server ${{ env.REGISTRY_URL }} \
             --registry-username airqoacr \
             --registry-password ${{ secrets.ACR_PASSWORD }} \
-            --env-vars "$(jq -r 'to_entries | map("\(.key)=\(.value|tostring)") | join(" ")' secrets.json)"
+            --env-vars "${ENV_VARS[@]}"
 
       - id: preview
         run: |
-          BRANCH="${{ needs.branch-name.outputs.lowercase }}"
-          APP="${BRANCH:0:12}-docs-preview"
+          BRANCH="${{ needs.branch-name.outputs.sanitized }}"
+          APP="${BRANCH}-docs-preview"
 
           URL=$(az containerapp show \
             --name $APP \
@@ -634,4 +692,4 @@ jobs:
               owner: context.repo.owner,
               repo: context.repo.repo,
               body: 'New azure docs changes available for preview [here](${{ needs.docs.outputs.url }})'
-            })
+            })