228 lines
8.8 KiB
YAML
228 lines
8.8 KiB
YAML
name: (CD) Publish docker + s3
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
projects:
|
|
required: true
|
|
type: string
|
|
|
|
jobs:
|
|
publish-dist:
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
app: ${{ fromJSON(inputs.projects) }}
|
|
name: ${{ matrix.app }}
|
|
runs-on: ubuntu-22.04
|
|
timeout-minutes: 25
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Set up QEMU
|
|
id: quemu
|
|
uses: docker/setup-qemu-action@v2
|
|
|
|
- name: Available platforms
|
|
run: echo ${{ steps.qemu.outputs.platforms }}
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v2
|
|
|
|
- name: Log in to the Container registry (ghcr)
|
|
uses: docker/login-action@v2
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Log in to the Container registry (docker hub)
|
|
uses: docker/login-action@v2
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') }}
|
|
with:
|
|
# registry: registry.hub.docker.com
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
- name: Setup node
|
|
uses: actions/setup-node@v3
|
|
with:
|
|
node-version-file: '.nvmrc'
|
|
# https://stackoverflow.com/questions/61010294/how-to-cache-yarn-packages-in-github-actions
|
|
cache: yarn
|
|
|
|
- name: Cache node modules
|
|
uses: actions/cache@v3
|
|
with:
|
|
path: node_modules
|
|
key: ${{ runner.os }}-cache-node-modules-${{ hashFiles('yarn.lock') }}
|
|
|
|
# https://docs.github.com/en/actions/learn-github-actions/contexts
|
|
- name: Define variables
|
|
run: |
|
|
envName=''
|
|
if [[ "${{ github.event_name }}" = "push" ]]; then
|
|
domain="vega.rocks"
|
|
if [[ "${{ github.ref }}" =~ .*release/.* ]]; then
|
|
envName="$(echo ${{ github.ref }} | rev | cut -d '/' -f 1 | rev)"
|
|
if [[ "${{ github.ref }}" =~ .*mainnet.* ]]; then
|
|
domain="vega.community"
|
|
fi
|
|
elif [[ "${{ github.ref }}" =~ .*develop$ ]]; then
|
|
envName="stagnet1"
|
|
elif [[ "${{ matrix.app}}" = "trading" ]] && [[ ${{ startsWith(github.ref, 'refs/tags/v') && 'true' || 'false' }} = "true" ]]; then
|
|
envName="mainnet"
|
|
fi
|
|
bucketName="${{ matrix.app }}.${envName}.${domain}"
|
|
echo BUCKET_NAME=${bucketName} >> $GITHUB_ENV
|
|
fi
|
|
echo ENV_NAME=${envName} >> $GITHUB_ENV
|
|
|
|
- name: Build local dist
|
|
run: |
|
|
flags=""
|
|
if [[ ! -z "${{ env.ENV_NAME }}" ]]; then
|
|
if [[ "${{ env.ENV_NAME }}" != "ops-vega" ]]; then
|
|
flags="--env=${{ env.ENV_NAME }}"
|
|
fi
|
|
fi
|
|
|
|
if [ "${{ matrix.app }}" = "trading" ]; then
|
|
yarn nx export trading $flags || (yarn install && yarn nx export trading $flags)
|
|
DIST_LOCATION=dist/apps/trading/exported
|
|
else
|
|
yarn nx build ${{ matrix.app }} $flags || (yarn install && yarn nx build ${{ matrix.app }} $flags)
|
|
DIST_LOCATION=dist/apps/${{ matrix.app }}
|
|
fi
|
|
mv $DIST_LOCATION dist-result
|
|
tree dist-result
|
|
|
|
- name: Build and export to local Docker
|
|
id: docker_build
|
|
uses: docker/build-push-action@v3
|
|
with:
|
|
context: .
|
|
file: docker/node-outside-docker.Dockerfile
|
|
load: true
|
|
build-args: |
|
|
APP=${{ matrix.app }}
|
|
ENV_NAME=${{ env.ENV_NAME }}
|
|
tags: |
|
|
ghcr.io/vegaprotocol/frontend/${{ matrix.app }}:local
|
|
|
|
- name: Image digest
|
|
if: ${{ github.event_name == 'pull_request' }}
|
|
run: echo ${{ steps.docker_build.outputs.digest }}
|
|
|
|
- name: Sanity check docker image
|
|
run: |
|
|
echo "Check ipfs-hash"
|
|
docker run --rm ghcr.io/vegaprotocol/frontend/${{ matrix.app }}:local cat /ipfs-hash
|
|
docker run --rm ghcr.io/vegaprotocol/frontend/${{ matrix.app }}:local cat /ipfs-hash > ${{ matrix.app }}-ipfs-hash
|
|
echo "List html directory"
|
|
docker run --rm ghcr.io/vegaprotocol/frontend/${{ matrix.app }}:local sh -c 'apk add --update tree; tree /usr/share/nginx/html'
|
|
|
|
- name: Publish dist as docker image (ghcr)
|
|
uses: docker/build-push-action@v3
|
|
if: ${{ github.event_name == 'pull_request' || (matrix.app == 'trading' && github.event_name == 'push' && !startsWith(github.ref, 'refs/tags/v') ) }}
|
|
with:
|
|
context: .
|
|
file: docker/node-outside-docker.Dockerfile
|
|
push: true
|
|
build-args: |
|
|
APP=${{ matrix.app }}
|
|
ENV_NAME=${{ env.ENV_NAME }}
|
|
tags: |
|
|
ghcr.io/vegaprotocol/frontend/${{ matrix.app }}:${{ github.event.pull_request.head.sha || github.sha }}
|
|
|
|
- name: Publish dist as docker image (docker hub)
|
|
uses: docker/build-push-action@v3
|
|
if: ${{ matrix.app == 'trading' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
|
|
with:
|
|
context: .
|
|
file: docker/node-outside-docker.Dockerfile
|
|
push: true
|
|
build-args: |
|
|
APP=${{ matrix.app }}
|
|
ENV_NAME=${{ env.ENV_NAME }}
|
|
tags: |
|
|
vegaprotocol/${{ matrix.app }}:${{ github.ref_name }}
|
|
vegaprotocol/${{ matrix.app }}:mainnet
|
|
|
|
# bucket creation in github.com/vegaprotocol/terraform//frontend
|
|
- name: Publish dist to s3
|
|
uses: jakejarvis/s3-sync-action@master
|
|
if: ${{ github.event_name == 'push' && !startsWith(github.ref, 'refs/tags/v') }}
|
|
with:
|
|
args: --acl private --follow-symlinks --delete
|
|
env:
|
|
AWS_S3_BUCKET: ${{ env.BUCKET_NAME }}
|
|
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
AWS_REGION: 'eu-west-1'
|
|
SOURCE_DIR: 'dist-result'
|
|
|
|
- name: Add preview label
|
|
uses: actions-ecosystem/action-add-labels@v1
|
|
if: ${{ github.event_name == 'pull_request' }}
|
|
with:
|
|
labels: ${{ matrix.app }}-preview
|
|
number: ${{ github.event.number }}
|
|
|
|
- name: Add ipfs hash to release
|
|
uses: softprops/action-gh-release@v1
|
|
if: ${{ matrix.app == 'trading' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
|
|
with:
|
|
files: ${{ matrix.app }}-ipfs-hash
|
|
|
|
- name: Trigger fleek deployment
|
|
if: ${{ matrix.app == 'trading' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
|
|
run: |
|
|
# display info about app
|
|
curl -H "Authorization: ${{ secrets.FLEEK_API_KEY }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d '{"query": "query{getSiteById(siteId:\"f8f2e051-f18e-49e6-b876-0a39369dc0d8\"){id latestDeploy{id status}}}"}' \
|
|
https://api.fleek.co/graphql
|
|
|
|
# trigger new deployment as base image is always set to vegaprotocol/trading:mainnet
|
|
curl -H "Authorization: ${{ secrets.FLEEK_API_KEY }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d '{"query": "mutation{triggerDeploy(siteId:\"f8f2e051-f18e-49e6-b876-0a39369dc0d8\"){id status}}"}' \
|
|
https://api.fleek.co/graphql
|
|
|
|
- name: Checkout vega.xyz
|
|
if: ${{ matrix.app == 'trading' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
|
|
uses: actions/checkout@v3
|
|
with:
|
|
repository: vegaprotocol/vega.xyz
|
|
path: './vega-xyz'
|
|
token: ${{ secrets.VEGA_CI_BOT_GITHUB_TOKEN }}
|
|
|
|
- name: Update hash on interstitial page
|
|
if: ${{ matrix.app == 'trading' && github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') }}
|
|
env:
|
|
GH_TOKEN: ${{ secrets.VEGA_CI_BOT_GITHUB_TOKEN }}
|
|
run: |
|
|
curl -L https://dist.ipfs.tech/kubo/v0.20.0/kubo_v0.20.0_linux-amd64.tar.gz -o kubo.tgz
|
|
tar -xzf kubo.tgz
|
|
export PATH="$PATH:$PWD/kubo"
|
|
which ipfs
|
|
new_hash=$(cat ${{ matrix.app }}-ipfs-hash)
|
|
cd vega-xyz
|
|
./interstital-allow-update.sh ${new_hash}
|
|
git config --global user.email "vega-ci-bot@vega.xyz"
|
|
git config --global user.name "vega-ci-bot"
|
|
git add interstitial-allow.json netlify.toml
|
|
commit_msg="feat(ci): Update CID for console release @ ${{ github.ref }}"
|
|
git commit -m "${commit_msg}"
|
|
git push origin main
|
|
|
|
# branch_name=${{ github.ref_name }}-hash-update
|
|
# git checkout -b "${branch_name}"
|
|
# git add interstitial-allow.json netlify.toml
|
|
# git push -u origin "${branch_name}"
|
|
# pr_url="$(gh pr create --title "${commit_msg}" --body 'update ipfs hash for console @ ${{ github.ref }}')"
|
|
# echo $pr_url
|
|
# gh pr merge --admin --auto $pr_url
|