web-tag.yml

name: Push tagged Web app to GHCR and deploy to production

on:
  workflow_dispatch:
  push:
    paths:
      - app/**
      - k8s/prod/cc-prod-migrate.yml
      - k8s/prod/cc-prod-seed.yml
      - k8s/prod/cc-prod-sync-catalogue.yml
      - k8s/prod/cc-prod-create-admin.yml
      - k8s/cc-web.yml
      - k8s/cc-web-deploy.yml
      - .github/workflows/web-tag.yml
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+"

jobs:
  runTests:
    runs-on: ubuntu-latest
    if: ${{ !contains(github.ref, '-') }}
    env:
      NODE_ENV: test
      NEXTAUTH_SECRET: "diTMz/XLX4edSmmfzwJtmzKjCJGRt81Gf0PdjO3IPs8="
      NEXTAUTH_URL: "http://localhost:3000"
      CDP_API_KEY: ${{ secrets.CDP_API_KEY_TEST }}
      CDP_MODE: "test"
    defaults:
      run:
        working-directory: ./app
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: "npm"
          cache-dependency-path: app/package-lock.json

      - name: Install dependencies
        run: npm ci

      - name: Set up database
        run: |
          docker run --name github_action_postgresql -d -p 5432:5432 -e POSTGRES_HOST_AUTH_METHOD=trust -e POSTGRES_PASSWORD="" postgres
          sleep 10
          createuser -w -h localhost -p 5432 -U postgres citycatalyst
          createdb -w -h localhost -p 5432 -U postgres citycatalyst -O citycatalyst
          cp env.example .env
          npm run db:migrate
          npm run db:seed

      - name: Run NextJS build
        run: npm run build

      - name: Run API tests
        run: npm run api:test

      - name: Install Playwright Browsers
        run: npx playwright install --with-deps
      - name: Run Playwright tests
        run: npx playwright test
      - uses: actions/upload-artifact@v4
        if: always()
        with:
          name: playwright-report
          path: playwright-report/
          retention-days: 30

      - name: Shut down database
        run: docker stop github_action_postgresql

  pushToGHCR:
    needs: runTests
    if: ${{ !contains(github.ref, '-') }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Log in to the Container registry
        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Pushing citycatalyst to GHCR
        env:
          SHA: ${{ github.sha }}
          REF: ${{ github.ref }}
          IMAGE: ghcr.io/open-earth-foundation/citycatalyst

        run: |
          export VERSION=${REF#refs/tags/v}
          export MAJOR=${VERSION%.*.*}
          export MINOR=${VERSION%.*}
          echo Version: ${VERSION} Major: ${MAJOR} Minor: ${MINOR}
          docker build -t $IMAGE:$SHA app
          docker tag $IMAGE:$SHA $IMAGE:$VERSION
          docker tag $IMAGE:$SHA $IMAGE:$MAJOR
          docker tag $IMAGE:$SHA $IMAGE:$MINOR
          docker tag $IMAGE:$SHA $IMAGE:stable
          docker push $IMAGE:$SHA
          docker push $IMAGE:$VERSION
          docker push $IMAGE:$MAJOR
          docker push $IMAGE:$MINOR
          docker push $IMAGE:stable

  deployToEKS:
    needs: pushToGHCR
    if: ${{ !contains(github.ref, '-') }}
    runs-on: ubuntu-latest
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_EKS_PROD_USER }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_EKS_PROD_USER }}
      EKS_PROD_NAME: ${{ secrets.EKS_PROD_NAME }}
      SHA: ${{ github.sha }}
      REF: ${{ github.ref }}
    steps:
      - uses: actions/checkout@v4

      - name: Creating kubeconfig file
        run: aws eks update-kubeconfig --name ${{secrets.EKS_PROD_NAME}} --region us-east-1

      - name: Testing connection to EKS
        run: kubectl get pods -n default

      - name: Deploying service
        run: |
          export VERSION=${REF#refs/tags/v}
          kubectl create -f k8s/prod/cc-prod-migrate.yml -n default
          kubectl create -f k8s/prod/cc-prod-seed.yml -n default
          kubectl apply -f k8s/prod/cc-prod-sync-catalogue.yml -n default
          kubectl apply -f k8s/cc-web-deploy.yml -n default
          kubectl set image deployment/cc-web-deploy \
            cc-web=ghcr.io/open-earth-foundation/citycatalyst:$VERSION \
            -n default
          kubectl set env deployment/cc-web-deploy \
            SMTP_USER=${{secrets.SMTP_USER}} \
            SMTP_PASSWORD=${{secrets.SMTP_PASSWORD}} \
            NEXTAUTH_SECRET=${{secrets.NEXTAUTH_SECRET}} \
            RESET_TOKEN_SECRET=${{secrets.RESET_TOKEN_SECRET}} \
            VERIFICATION_TOKEN_SECRET=${{secrets.VERIFICATION_TOKEN_SECRET}} \
            OPENAI_API_KEY=${{secrets.OPENAI_API_KEY_PROD}} \
            "OPENAI_ASSISTANT_ID=asst_FCZ1wta3NElIFXCxDO1KME9I" \
            HUGGINGFACE_API_KEY=${{secrets.HUGGINGFACE_API_KEY}} \
            "ADMIN_EMAILS=${{secrets.ADMIN_EMAILS}}" \
            "ADMIN_NAMES=${{secrets.ADMIN_NAMES}}" \
            "DEFAULT_ADMIN_EMAIL=${{secrets.DEFAULT_ADMIN_EMAIL}}" \
            "DEFAULT_ADMIN_PASSWORD=${{secrets.DEFAULT_ADMIN_PASSWORD}}" \
            "HOST=https://citycatalyst.io" \
            "NEXTAUTH_URL=https://citycatalyst.io" \
            "NEXT_PUBLIC_API_URL=https://api.citycatalyst.io" \
            "GLOBAL_API_URL=https://api.citycatalyst.io" \
            "NEXT_PUBLIC_OPENCLIMATE_API_URL=https://app.openclimate.network" \
            "OPENCLIMATE_API_URL=https://app.openclimate.network" \
            CDP_API_KEY=${{secrets.CDP_API_KEY_TEST}}
          kubectl create -f k8s/prod/cc-prod-create-admin.yml -n default
          kubectl rollout restart deployment cc-web-deploy -n default