deploy-managed-ema-image.yaml

name: Deploy Managed EMA
on:
  workflow_dispatch:
    inputs:
      releaseVersion:
        description: "The tag of the image to push. For dev, we'll pull the 'main' image and for all other environments, we'll pull image A.B.C, then we push the image with tag A.B.C to where it needs to go."
        required: true
        default: "A.B.C"
      deployEnvironment:
        description: "Environment to deploy to (development/staging/production)."
        required: true
        type: choice
        options:
          - development
          - staging
          - production
jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: prod

    steps:
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-access-key-id: ${{ secrets.EMA_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.EMA_AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.EMA_AWS_DEFAULT_REGION }}
      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1.6.0
      - name: ECR (Dev) - Pull Main Image
        if: ${{ github.event.inputs.deployEnvironment == 'development' }}
        run: |
          ECR_DEV_IMAGE="${{ steps.login-ecr.outputs.registry }}/${{ github.event.repository.name }}:main"
          docker pull $ECR_DEV_IMAGE
          echo "ECR_DEV_IMAGE=$ECR_DEV_IMAGE" >> $GITHUB_ENV
      - name: ECR (Dev) - Pull Prod Ready Image Tag
        if: ${{ github.event.inputs.deployEnvironment != 'development' }}
        run: |
          ECR_DEV_IMAGE="${{ steps.login-ecr.outputs.registry }}/${{ github.event.repository.name }}:${{ github.event.inputs.releaseVersion }}"
          docker pull $ECR_DEV_IMAGE
          echo "ECR_DEV_IMAGE=$ECR_DEV_IMAGE" >> $GITHUB_ENV
      - name: GCR (Dev) - Login
        if: ${{ github.event.inputs.deployEnvironment == 'development' }}
        uses: docker/login-action@v3
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.DEV_GCP_SERVICE_ACCOUNT }}
      - name: GCR (Dev) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'development' }}
        run: |
          GCR_IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          GCR_DEV_IMAGE_REPO="gcr.io/${{ secrets.DEV_GCP_PROJECT_ID }}/${{ github.event.repository.name }}"
          for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $GCR_DEV_IMAGE_REPO:$current_tag
            docker push $GCR_DEV_IMAGE_REPO:$current_tag
          done
      - name: GCR (Staging) - Login
        if: ${{ github.event.inputs.deployEnvironment == 'staging' }}
        uses: docker/login-action@v3
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.STAGING_GCP_SERVICE_ACCOUNT }}
      - name: GCR (Staging) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'staging' }}
        run: |
          GCR_IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          GCR_STAGING_IMAGE_REPO="gcr.io/${{ secrets.STAGING_GCP_PROJECT_ID }}/${{ github.event.repository.name }}"
          for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $GCR_STAGING_IMAGE_REPO:$current_tag
            docker push $GCR_STAGING_IMAGE_REPO:$current_tag
          done
      - name: GCR (Production) - Login
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        uses: docker/login-action@v3
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.PROD_GCP_SERVICE_ACCOUNT }}
      - name: GCR (Prod) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        run: |
          GCR_IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          GCR_PROD_IMAGE_REPO="gcr.io/${{ secrets.PROD_GCP_PROJECT_ID }}/${{ github.event.repository.name }}"
          for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $GCR_PROD_IMAGE_REPO:$current_tag
            docker push $GCR_PROD_IMAGE_REPO:$current_tag
          done
      - name: Log in to Azure China prod docker registry
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ secrets.AZURE_CHINA_PROD_HOSTNAME }}
          username: ${{ secrets.AZURE_CHINA_PROD_USERNAME }}
          password: ${{ secrets.AZURE_CHINA_PROD_PASSWORD }}
      - name: Azure China (Prod) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        run: |
          IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          PROD_IMAGE_REPO="${{ secrets.AZURE_CHINA_PROD_HOSTNAME }}/${{ github.event.repository.name }}"
          for current_tag in ${IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $PROD_IMAGE_REPO:$current_tag
            docker push $PROD_IMAGE_REPO:$current_tag
          done