ci.yml

name: Dashboard Workflow

on:
  push:
    branches:
      - develop
      - release

jobs:
  build_test:
    name: 🚴 Build + Lint + Test 🚴  # Match the name below (8398a7/action-slack).
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - name: 🐳 Prepare Docker
        id: prep
        run: |
          TAG=$(echo $GITHUB_SHA | head -c7)
          IMAGE="ghcr.io/${GITHUB_REPOSITORY}"
          echo "tagged_image=${IMAGE}:${TAG}" >> $GITHUB_OUTPUT
          echo "name=tag::${TAG}" >> $GITHUB_OUTPUT
      - name: 🐳 Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@master

      - name: 🐳 Cache Docker layers
        uses: actions/cache@v2
        with:
          path: /tmp/.buildx-cache
          key: ${{ runner.os }}-single-buildx-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-single-buildx

      - name: 🐳 Build image
        uses: docker/build-push-action@v2
        with:
          context: .
          builder: ${{ steps.buildx.outputs.name }}
          file: Dockerfile
          push: false # This would be set to true in a real world deployment scenario.
          load: true
          tags: ${{ steps.prep.outputs.tagged_image }}
          cache-from: type=local,src=/tmp/.buildx-cache
          cache-to: type=local,dest=/tmp/.buildx-cache-new

      - name: 🤞 Run Lint 🧪
        env:
            DOCKER_IMAGE: ${{ steps.prep.outputs.tagged_image }}
        run: |
          docker run --rm --workdir="/code/" $DOCKER_IMAGE sh -c 'yarn lint'

      # - name: 🤞 Run Test 🧪
      #   env:
      #       DOCKER_IMAGE: ${{ steps.prep.outputs.tagged_image }}
      #   run: |
      #     docker run --rm --workdir="/code/" $DOCKER_IMAGE sh -c 'yarn test'

      - name: 🤞 Run Build 🧪
        env:
            DOCKER_IMAGE: ${{ steps.prep.outputs.tagged_image }}
            REACT_APP_GRAPHQL_ENDPOINT: ${{ secrets.REACT_APP_GRAPHQL_ENDPOINT }}
            REACT_APP_ENVIRONMENT: prod
            REACT_APP_SENTRY_DSN:  ${{ secrets.REACT_APP_SENTRY_DSN }}
            REACT_APP_MAPBOX_STYLE: mapbox://styles/togglecorp/cl50rwy0a002d14mo6w9zprio
            REACT_APP_MAPBOX_ACCESS_TOKEN: ${{ secrets.REACT_APP_MAPBOX_ACCESS_TOKEN }}
            REACT_APP_API_END: ${{ secrets.REACT_APP_API_END }}
            REACT_APP_ADMIN_END: ${{ secrets.REACT_APP_ADMIN_END }}
            # Not required for now.
            GRAPHQL_CODEGEN_ENDPOINT: ${{ secrets.GRAPHQL_CODEGEN_ENDPOINT }}
            REACT_APP_GA_TRACKING_ID:
        run: |
          env > .env
          docker run --rm --workdir="/code/" -v `pwd`/.env:/code/.env -v `pwd`/build/:/code/build/ $DOCKER_IMAGE sh -c 'yarn build'

      - name: Save build files as artifact
        uses: actions/upload-artifact@v1
        with:
          name: ifrc-gates-dashboard
          path: build

        # Temp fix
        # https://github.com/docker/build-push-action/blob/master/docs/advanced/cache.md#github-cache
        # https://github.com/docker/build-push-action/issues/252
        # https://github.com/moby/buildkit/issues/1896
      - name: 🐳 Move docker cache (🧙 Hack fix)
        run: |
          rm -rf /tmp/.buildx-cache
          mv /tmp/.buildx-cache-new /tmp/.buildx-cache

  build_terraform:
    name: Terraform actions
    runs-on: ubuntu-latest
    environment:
      name: production
      url: https://dashboard.collective-service.net/
    needs: build_test
    defaults:
      run:
        working-directory: "./terraform"
    if: github.ref == 'refs/heads/release'
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v1
        with:
          terraform_version: 1.1.2
          terraform_wrapper: false

      - name: Terraform init
        id: init
        run: terraform init -upgrade

      - name: Terraform validate
        id: validate
        run: terraform validate

      - name: Terraform plan
        id: plan
        run: terraform plan -var-file=prod.tfvars -no-color

      - name: Terraform apply
        id: apply
        run: terraform apply -var-file=prod.tfvars -auto-approve -no-color

      - name: Get Terraform outputs
        id: op-bucket-name
        run: echo "bucket_name=$(terraform output s3_bucket_name)" >> $GITHUB_OUTPUT

      - name: Get Terraform outputs
        id: op-distid
        run: echo "distid=$(terraform output -raw website_cdn_id)" >> $GITHUB_OUTPUT
    outputs:
      s3-bucket-name: ${{ steps.op-bucket-name.outputs.bucket_name }}
      dist-id: ${{ steps.op-distid.outputs.distid }}

  deploy:
    name: Deploy to AWS (S3 + Cloudfront)
    needs: build_terraform
    runs-on: ubuntu-latest

    if: github.ref == 'refs/heads/release' && github.event_name == 'push'

    steps:
      - uses: actions/download-artifact@v1
        with:
          name: ifrc-gates-dashboard
          path: build

      # Copy build to S3
      - name: S3 Sync
        uses: jakejarvis/s3-sync-action@master
        with:
          args: --acl public-read --follow-symlinks --delete
        env:
          AWS_S3_BUCKET: ${{ needs.build_terraform.outputs.s3-bucket-name }}
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_REGION:  ${{ secrets.AWS_REGION }}
          SOURCE_DIR: './build'

      # Invalidate Cloudfront (this action)
      - name: Cloudfront Invalidate
        uses: chetan/invalidate-cloudfront-action@master
        env:
          DISTRIBUTION: ${{ needs.build_terraform.outputs.dist-id }}
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_REGION:  ${{ secrets.AWS_REGION }}
          PATHS: '/*'