deploy-review.yml

name: Deploy Review App

on:
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  id-token: write
  contents: read
  packages: write
  pull-requests: write

concurrency:
  group: ${{ github.event.pull_request.number }}

jobs:
  package:
    uses: Chia-Network/actions/.github/workflows/docker-build.yaml@main

  deploy:
    needs:
      - package
    runs-on: [k8s-public]
    container:
      image: registry.gitlab.com/cmmarslender/kubectl-helm:v3
    environment:
      name: Review ${{ github.event.pull_request.number }}
      url: https://${{ github.event.pull_request.number }}.dashboard.chia.net
    steps:
      - uses: actions/checkout@v4

      - name: Vault Login
        uses: Chia-Network/actions/vault/login@main
        with:
          vault_url: ${{ secrets.VAULT_URL }}
          role_name: github-pub-metrics-grafana

      - name: Get secrets from vault
        uses: hashicorp/vault-action@v3
        with:
          url: ${{ secrets.VAULT_URL }}
          token: ${{ env.VAULT_TOKEN }}
          secrets: |
            secret/data/pub-metrics-eks/rds/rds-info db_host | BLOCK_METRICS_DB_HOST;
            secret/data/pub-metrics-eks/rds/blocks-read-user username | BLOCK_METRICS_USER;
            secret/data/pub-metrics-eks/rds/blocks-read-user password | BLOCK_METRICS_PASSWORD;

      - name: Template grafana configs
        run: |
          j2 templates/datasources.yaml.j2 -o helm/pub-metrics-grafana/datasources

      - name: Get ephemeral aws credentials
        uses: Chia-Network/actions/vault/aws-sts@main
        with:
          vault_url: ${{ secrets.VAULT_URL }}
          vault_token: ${{ env.VAULT_TOKEN }}
          role_name: pub-metrics-deploy

      - name: Log in to cluster
        run: aws eks update-kubeconfig --name pub-metrics --region us-west-2

      - uses: Chia-Network/actions/helm/deploy@main
        env:
          REPLICAS: 1
          HOSTNAME: "${{ github.event.pull_request.number }}.dashboard.chia.net"
          IMAGE_TAG: "sha-${{ github.sha }}"
          REVIEW_SLUG: ${{ github.event.pull_request.number }}
        with:
          namespace: grafana
          app_name: "grafana-${{ env.REVIEW_SLUG }}"
          helm_chart: "./helm/pub-metrics-grafana"
          helm_values: "./helm/values.yaml"