Merge pull request #1925 from NDLANO/film-spec-to-playwright #1010
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - master | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.CI_AWS_CLIENT_ID }} | |
| AWS_DEFAULT_REGION: 'eu-west-1' | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.CI_AWS_CLIENT_SECRET }} | |
| NDLA_AWS_ECR_REPO: ${{ secrets.NDLA_AWS_ECR_REPO }} | |
| CI_RELEASE_ROLE: ${{ secrets.CI_RELEASE_ROLE }} | |
| CI_GITHUB_TOKEN: ${{ secrets.CI_GITHUB_TOKEN }} | |
| DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }} | |
| DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }} | |
| NDLA_RELEASES: ${{ secrets.NDLA_RELEASES }} | |
| PACT_BROKER_PASSWORD: ${{ secrets.PACT_BROKER_PASSWORD }} | |
| PACT_BROKER_URL: ${{ secrets.PACT_BROKER_URL }} | |
| PACT_BROKER_USERNAME: ${{ secrets.PACT_BROKER_USERNAME }} | |
| NDLA_ENVIRONMENT: local | |
| NDLA_HOME: ${{ github.workspace }}/ndla | |
| NDLA_DEPLOY: ${{ github.workspace }}/ndla/deploy | |
| NODE_OPTIONS: '--max_old_space_size=4096' | |
| COMPONENT: ${{ github.event.repository.name }} | |
| GPG_KEY: ${{ secrets.DEPLOY_BLACKBOX_GPG_KEY_B64 }} | |
| jobs: | |
| release: | |
| name: 'Release and push to registry' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| path: ndla/${{ github.event.repository.name }} | |
| - uses: actions/checkout@v3 | |
| with: | |
| repository: NDLANO/deploy | |
| token: ${{ secrets.CI_GITHUB_TOKEN }} | |
| path: ndla/deploy | |
| - uses: actions/setup-python@v2 | |
| with: | |
| python-version: "3.10" | |
| - uses: olafurpg/setup-scala@v13 | |
| with: | |
| java-version: [email protected] | |
| - name: "Setup ~/bin directory" | |
| run: | | |
| mkdir -p /home/runner/bin | |
| echo "/home/runner/bin" >> $GITHUB_PATH | |
| - name: 'Login to ECR repo' | |
| run: | |
| RES=$(aws sts assume-role --role-arn $CI_RELEASE_ROLE --role-session-name github-actions-ecr-login) | |
| AWS_ACCESS_KEY_ID=$(echo $RES | jq -r .Credentials.AccessKeyId) | |
| AWS_SECRET_ACCESS_KEY=$(echo $RES | jq -r .Credentials.SecretAccessKey) | |
| AWS_SESSION_TOKEN=$(echo $RES | jq -r .Credentials.SessionToken) | |
| aws ecr get-login-password --region eu-central-1 | docker login --username AWS --password-stdin $NDLA_AWS_ECR_REPO | |
| - name: 'Login to dockerhub' | |
| run: echo $DOCKER_HUB_PASSWORD | docker login --username $DOCKER_HUB_USERNAME --password-stdin | |
| - name: 'Cache pip' | |
| uses: actions/cache@v2 | |
| with: | |
| path: ~/.cache/pip | |
| key: ${{ runner.os }}-pip-${{ hashFiles('ndla/deploy/scripts/pyshare/requirements.txt') }} | |
| restore-keys: | | |
| ${{ runner.os }}-pip- | |
| ${{ runner.os }}- | |
| - name: 'Install python dependencies' | |
| run: | | |
| python -m pip install --upgrade pip | |
| python -m pip install -r ndla/deploy/scripts/pyshare/requirements.txt | |
| - name: "Download blackbox" | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: StackExchange/blackbox | |
| path: blackbox | |
| - name: "Install Blackbox and key" | |
| run: | | |
| # Move binaries to path | |
| sudo mv blackbox/bin/* /home/runner/bin/ | |
| echo -n "$GPG_KEY" | base64 --decode | gpg --import | |
| - name: 'Install kubectl' | |
| run: | | |
| curl -L https://storage.googleapis.com/kubernetes-release/release/v1.21.11/bin/linux/amd64/kubectl > kubectl | |
| sudo mv kubectl /home/runner/bin/kubectl | |
| sudo chmod +x /home/runner/bin/kubectl | |
| mkdir -p ~/.kube | |
| - name: 'Install aws-iam-authenticator' | |
| run: | | |
| sudo curl -L https://amazon-eks.s3-us-west-2.amazonaws.com/1.12.7/2019-03-27/bin/linux/amd64/aws-iam-authenticator > aws-iam-authenticator | |
| sudo mv aws-iam-authenticator /home/runner/bin/aws-iam-authenticator | |
| sudo chmod +x /home/runner/bin/aws-iam-authenticator | |
| - name: 'Install helm /w push-plugin' | |
| run: | | |
| curl -L https://get.helm.sh/helm-v3.2.0-linux-amd64.tar.gz > /tmp/helm.tar.gz | |
| tar xvzf /tmp/helm.tar.gz -C /tmp/ | |
| sudo mv /tmp/linux-amd64/helm /home/runner/bin/ | |
| sudo chmod +x /home/runner/bin/helm | |
| helm plugin install https://github.com/chartmuseum/helm-push.git --version 0.9.0 | |
| - name: Build kubernetes config | |
| run: | | |
| eval "$($NDLA_DEPLOY/scripts/bin/ndla init -)" | |
| _ndla_wrapper env kubeconfig test | |
| - name: 'Do release' | |
| shell: bash | |
| run: | | |
| eval "$($NDLA_DEPLOY/scripts/bin/ndla init -)" | |
| _ndla_wrapper release $COMPONENT --update-chart |