fix(ci): Run db migrations in CI task container with SSL #4354

.gitignore

@@ -50,3 +50,4 @@ blob-report/
 playwright/.cache/
 playwright/.auth/*
 !playwright/.auth/.gitkeep 
+database.json

ci/partials/run-database-migrations.yml

@@ -0,0 +1,10 @@
+platform: linux
+inputs: [name: src]
+outputs: [name: src]
+run:
+  dir: src
+  path: bash
+  args:
+    - -c
+    - node --env-file=.env ./ci/tasks/configure-database-migrations.js
+    - node node_modules/.bin/db-migrate up --config database.json -e production

ci/pipeline-dev.yml

@@ -47,7 +47,6 @@ jobs:
           params: {save: true}
         - get: postgres
         - get: node
-          params: {save: true}
       - task: install-deps-api
         file: src/ci/partials/install-deps-api.yml
         image: node
@@ -88,9 +87,17 @@ jobs:
                   <<: *env-cf
                   CF_APP_NAME: pages-((deploy-env))
 
-          - task: run-database-migrations
-            file: src/ci/partials/run-task.yml
+          - task: get-app-env
+            file: src/ci/partials/get-app-env.yml
             image: cf-image
+            params:
+              <<: *env-cf
+              APP_ENV: ((deploy-env))
+              CF_APP_NAME: pages-((deploy-env))       
+
+          - task: run-database-migrations
+            file: src/ci/partials/run-database-migrations.yml
+            image: node
             params:
               <<: *env-cf
               APP_ENV: ((deploy-env))
@@ -481,7 +488,7 @@ resources:
       tag: 15-alpine
 
   - name: node
-    type: docker-image
+    type: registry-image
     source:
       repository: node
       tag: 20.9-bullseye

ci/tasks/configure-database-migrations.js

@@ -0,0 +1,46 @@
+const fs = require('node:fs');
+const cfenv = require('cfenv');
+
+const { APP_ENV } = process.env;
+const fileName = 'database.json';
+
+const baseConfig = {
+  driver: 'pg',
+  port: '5432',
+  ssl: {
+    rejectUnauthorized: false,
+  },
+  schema: 'public',
+};
+
+function main() {
+  try {
+    const appEnv = cfenv.getAppEnv();
+    const creds = appEnv.getServiceCreds(`federalist-${APP_ENV}-rds`);
+
+    const config = {
+      production: {
+        ...baseConfig,
+        user: creds.username,
+        password: creds.password,
+        host: creds.host,
+        database: creds.name,
+        port: creds.port,
+      },
+    };
+
+    const data = JSON.stringify(config);
+
+    fs.writeFileSync(fileName, data);
+
+    console.log('\n\nCreated database configuration.\n\n');
+
+    process.exit(0);
+  } catch (error) {
+    console.error('\n\n!!! ERROR CONFIGURING DATABASE MIGRATIONS !!!\n\n');
+    console.error(error);
+    process.exit(1);
+  }
+}
+
+main();