Merge branch 'new-article' #64
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build And Deploy Services | |
| on: | |
| push: | |
| branches: | |
| - "master" | |
| env: | |
| PROJECT_ID: crows-moe | |
| LOCATION: asia-southeast1 | |
| IMAGE_LOCATION: "asia-southeast1-docker.pkg.dev/crows-moe/images" | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Google Auth | |
| id: auth | |
| uses: "google-github-actions/auth@v1" | |
| with: | |
| credentials_json: "${{ secrets.GOOGLE_CREDENTIALS }}" | |
| token_format: "access_token" | |
| - name: Docker Auth | |
| id: docker-auth | |
| uses: "docker/login-action@v2" | |
| with: | |
| registry: "${{ env.LOCATION }}-docker.pkg.dev" | |
| username: "oauth2accesstoken" | |
| password: "${{ steps.auth.outputs.access_token }}" | |
| - name: Set service tag from datetime | |
| run: echo "TAG=$(date +'%Y%m%d%H%M')" >> $GITHUB_ENV | |
| - name: build blog | |
| run: |- | |
| docker build --platform=linux/amd64 -t "${{ env.IMAGE_LOCATION }}/blog:${{ env.TAG }}" service/blog | |
| docker push "${{ env.IMAGE_LOCATION }}/blog:${{ env.TAG }}" | |
| - name: build ema | |
| run: |- | |
| docker build --platform=linux/amd64 -t "${{ env.IMAGE_LOCATION }}/ema:${{ env.TAG }}" service/ema | |
| docker push "${{ env.IMAGE_LOCATION }}/ema:${{ env.TAG }}" | |
| - name: build urldbot | |
| run: |- | |
| docker build --platform=linux/amd64 -t "${{ env.IMAGE_LOCATION }}/urldbot:${{ env.TAG }}" service/urldbot | |
| docker push "${{ env.IMAGE_LOCATION }}/urldbot:${{ env.TAG }}" | |
| outputs: | |
| tag: ${{ env.TAG }} | |
| deploy: | |
| runs-on: ubuntu-latest | |
| needs: build | |
| defaults: | |
| run: | |
| working-directory: infra | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Make Variables | |
| run: |- | |
| echo '{"deploy_tag":"${{ env.TAG }}",' > deploy.auto.tfvars.json | |
| echo '"urldbot_token":"${{ env.URLDBOT_TOKEN }}",' >> deploy.auto.tfvars.json | |
| echo '"ema_invite_key":"${{ env.EMA_INVITE_KEY }}",' >> deploy.auto.tfvars.json | |
| echo '"ema_jwt_secret":"${{ env.EMA_JWT_SECRET }}",' >> deploy.auto.tfvars.json | |
| echo '"ema_postgres_url":"${{ env.EMA_POSTGRES_URL }}"}' >> deploy.auto.tfvars.json | |
| env: | |
| TAG: ${{needs.build.outputs.tag}} | |
| URLDBOT_TOKEN: ${{ secrets.URLDBOT_TOKEN }} | |
| EMA_INVITE_KEY: ${{ secrets.EMA_INVITE_KEY }} | |
| EMA_JWT_SECRET: ${{ secrets.EMA_JWT_SECRET }} | |
| EMA_POSTGRES_URL: ${{ secrets.EMA_POSTGRES_URL }} | |
| - name: Terraform Setup | |
| uses: hashicorp/setup-terraform@v2 | |
| with: | |
| cli_config_credentials_token: ${{ secrets.TF_TOKEN }} | |
| - name: Terraform Format Check | |
| run: terraform fmt -check | |
| - name: Terraform Init | |
| run: terraform init | |
| - name: Terraform Validate | |
| run: terraform validate -no-color | |
| - name: Terraform Apply | |
| if: github.ref == 'refs/heads/master' && github.event_name == 'push' | |
| run: terraform apply -auto-approve |