Deploy Managed EMA #10
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Managed EMA | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| releaseVersion: | |
| description: "The tag of the image to push. We'll pull the main image and re-tag it with this." | |
| required: true | |
| default: "A.B.C" | |
| deployEnvironment: | |
| description: "Environment to deploy to (development/staging/production)." | |
| required: true | |
| type: choice | |
| options: | |
| - development | |
| - staging | |
| - production | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| environment: prod | |
| steps: | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-access-key-id: ${{ secrets.EMA_AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.EMA_AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ secrets.EMA_AWS_DEFAULT_REGION }} | |
| - name: Login to Amazon ECR | |
| id: login-ecr | |
| uses: aws-actions/[email protected] | |
| - name: ECR (Dev) - Pull Image | |
| run: | | |
| ECR_DEV_IMAGE="${{ steps.login-ecr.outputs.registry }}/${{ github.event.repository.name }}:main" | |
| docker pull $ECR_DEV_IMAGE | |
| echo "ECR_DEV_IMAGE=$ECR_DEV_IMAGE" >> $GITHUB_ENV | |
| - name: GCR (Dev) - Login | |
| if: ${{ github.event.inputs.deployEnvironment == 'development' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: gcr.io | |
| username: _json_key | |
| password: ${{ secrets.DEV_GCP_SERVICE_ACCOUNT }} | |
| - name: GCR (Dev) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'development' }} | |
| run: | | |
| GCR_IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| GCR_DEV_IMAGE_REPO="gcr.io/${{ secrets.DEV_GCP_PROJECT_ID }}/${{ github.event.repository.name }}" | |
| for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $GCR_DEV_IMAGE_REPO:$current_tag | |
| docker push $GCR_DEV_IMAGE_REPO:$current_tag | |
| done | |
| - name: GCR (Staging) - Login | |
| if: ${{ github.event.inputs.deployEnvironment == 'staging' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: gcr.io | |
| username: _json_key | |
| password: ${{ secrets.STAGING_GCP_SERVICE_ACCOUNT }} | |
| - name: GCR (Staging) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'staging' }} | |
| run: | | |
| GCR_IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| GCR_STAGING_IMAGE_REPO="gcr.io/${{ secrets.STAGING_GCP_PROJECT_ID }}/${{ github.event.repository.name }}" | |
| for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $GCR_STAGING_IMAGE_REPO:$current_tag | |
| docker push $GCR_STAGING_IMAGE_REPO:$current_tag | |
| done | |
| - name: GCR (Production) - Login | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: gcr.io | |
| username: _json_key | |
| password: ${{ secrets.PROD_GCP_SERVICE_ACCOUNT }} | |
| - name: GCR (Prod) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| run: | | |
| GCR_IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| GCR_PROD_IMAGE_REPO="gcr.io/${{ secrets.PROD_GCP_PROJECT_ID }}/${{ github.event.repository.name }}" | |
| for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $GCR_PROD_IMAGE_REPO:$current_tag | |
| docker push $GCR_PROD_IMAGE_REPO:$current_tag | |
| done | |
| - name: Log in to Azure China prod docker registry | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ secrets.AZURE_CHINA_PROD_HOSTNAME }} | |
| username: ${{ secrets.AZURE_CHINA_PROD_USERNAME }} | |
| password: ${{ secrets.AZURE_CHINA_PROD_PASSWORD }} | |
| - name: Azure China (Prod) - Tag and Push | |
| if: ${{ github.event.inputs.deployEnvironment == 'production' }} | |
| run: | | |
| IMAGE_TAGS_TO_PUSH=( | |
| "${{ github.event.inputs.releaseVersion }}" | |
| ) | |
| PROD_IMAGE_REPO="${{ secrets.AZURE_CHINA_PROD_HOSTNAME }}/${{ github.event.repository.name }}" | |
| for current_tag in ${IMAGE_TAGS_TO_PUSH[@]} | |
| do | |
| docker tag $ECR_DEV_IMAGE $PROD_IMAGE_REPO:$current_tag | |
| docker push $PROD_IMAGE_REPO:$current_tag | |
| done |