build-test-deploy.yml

name: Build, Test, and Deploy

on:
  workflow_dispatch:
  push:
    tags:
      - v[0-9]+.[0-9]+.[0-9]+

env:
  DOCKERHUB_USERNAME: 'coralproject'
  GOOGLE_CLOUD_BUCKET: 'coral-cdn'
  IMAGE_REPOSITORY: 'coralproject/talk'
  SENTRY_ORG: 'voxmedia'
  SENTRY_PROJECT: 'coral'

jobs:
  build-and-test:
    name: Build, Test, and Deploy
    runs-on: ubuntu-22.04
    steps:
      -
        name: Checkout
        uses: actions/checkout@v2
      -
        uses: webfactory/ssh-agent@v0.7.0
        with:
          ssh-private-key: ${{ secrets.REPO_PATCHED_DEPLOY_KEY }}
      -
        name: Authenticate with GCP
        id: 'auth'
        uses: 'google-github-actions/auth@v1'
        with:
          credentials_json: '${{ secrets.GCR_JSON_KEY }}'
      -
        name: Set up Cloud SDK
        uses: 'google-github-actions/setup-gcloud@v1'
      -
        name: Login to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ env.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}
      -
        name: Define SHORT_SHA with commit short sha
        run: echo "SHORT_SHA=`echo ${GITHUB_SHA} | cut -c1-8`" >> $GITHUB_ENV
      -
        name: Define RC_TAG
        run: echo "RC_TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
      -
        name: Setup Node14.x
        uses: actions/setup-node@v3
        with:
          node-version: '14.x'
      -
        name: Install npm 8
        run: npm i -g npm@8.0.0 --registry=https://registry.npmjs.org
      - name: npm Lockfile Version
        uses: mansona/npm-lockfile-version@v1
        with:
          version: 2
      -
        name: Cache Dependencies
        id: cache
        uses: actions/cache@v3
        with:
          path: ./node_modules
          key: modules-${{ hashFiles('package-lock.json') }}
          restore-keys: npm-
      -
        name: npm ci
        run: npm ci
      -
        name: Generate schemas and types
        run: npm run generate
      -
        name: Lint Source Code
        run: npm run lint
      -
        name: Lint Markdown
        run: |
          npm run doctoc
          git diff --exit-code
      -
        name: Lint Versions
        run: npx @coralproject/package-version-lint
      -
        name: Run Server Unit Tests
        run: npm run test:server -- --ci --runInBand --reporters=default --reporters=jest-junit
      -
        name: Run Client Stream Unit Tests
        run: npm run test:client:stream -- --ci --runInBand --reporters=default --reporters=jest-junit
      -
        name: Run Client Admin Unit Tests
        run: npm run test:client:admin -- --ci --runInBand --reporters=default --reporters=jest-junit
      -
        name: Run Client Other Unit Tests
        run: npm run test:client:other -- --ci --runInBand --reporters=default --reporters=jest-junit
      -
        name: Build
        run: npm run build
      -
        name: Verify Bundle Size
        run: ./node_modules/.bin/bundlesize --enable-github-checks
      -
        name: Verify Release Version
        run: npx @coralproject/package-version-lint --expect ${RC_TAG/#v}
      -
        name: Create the Pre-Tag Names
        run: |
          echo "MAJOR=`echo ${RC_TAG/#v} | cut -d. -f1`" >> $GITHUB_ENV
          echo "MINOR=`echo ${RC_TAG/#v} | cut -d. -f2`" >> $GITHUB_ENV
          echo "PATCH=`echo ${RC_TAG/#v} | cut -d. -f3`" >> $GITHUB_ENV
      -
        name: Create Final Tag names
        run: |
          echo "MAJOR_TAG=${MAJOR}" >> $GITHUB_ENV
          echo "MINOR_TAG=${MAJOR}.${MINOR}" >> $GITHUB_ENV
          echo "PATCH_TAG=${MAJOR}.${MINOR}.${PATCH}" >> $GITHUB_ENV
      -
        name: Build, Tag, Push Major Tag
        uses: docker/build-push-action@v3
        with:
          push: true
          tags: ${{ env.IMAGE_REPOSITORY }}:${{ env.MAJOR_TAG }}
          build-args: |
              REVISION_HASH=${{ env.GITHUB_SHA }}
      -
        name: Build, Tag, Push Minor Tag
        uses: docker/build-push-action@v3
        with:
          push: true
          tags: ${{ env.IMAGE_REPOSITORY }}:${{ env.MINOR_TAG }}
          build-args: |
              REVISION_HASH=${{ env.GITHUB_SHA }}
      -
        name: Build, Tag, Push Patch Tag
        uses: docker/build-push-action@v3
        with:
          push: true
          tags: ${{ env.IMAGE_REPOSITORY }}:${{ env.PATCH_TAG }}
          build-args: |
              REVISION_HASH=${{ env.GITHUB_SHA }}
      -
        name: Deploy Static Assets to GCS Bucket
        run: |
            CONTAINER_ID=$(docker create "coralproject/talk:${PATCH_TAG}")
            docker cp "${CONTAINER_ID}:/usr/src/app/dist/static" static/
            docker rm "${CONTAINER_ID}"
            find ./static -type f -name "*.gz" -print -delete
            gsutil -m -h "Cache-Control: public, max-age=86400, immutable" cp -r -z "js,css,map,txt,json" ./static/** "gs://${GOOGLE_CLOUD_BUCKET}/${PATCH_TAG}/"
      -
        name: Upload to Sentry
        run: |
            CONTAINER_ID=$(docker create "coralproject/talk:${PATCH_TAG}")
            docker cp "${CONTAINER_ID}:/usr/src/app/dist" dist/
            docker rm "${CONTAINER_ID}"
            npx @sentry/cli -V
            npx @sentry/cli releases files "coral@${PATCH_TAG}" upload-sourcemaps ./dist --auth-token ${{ secrets.SENTRY_AUTH_TOKEN }}