test.yml

name: build and test

on:
  pull_request:
    branches:
      - "master"

env:
  AWS_REGION: ap-southeast-2
  TAG_PREFIX: test

permissions:
  id-token: write   # This is required for requesting the JWT
  contents: read    # This is required for actions/checkout

jobs:
  build_test_push:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Expose environment
        run: echo '${{ toJSON(github) }}'

      - name: set tag
        if: ${{ !env.ACT }}
        run: |
          BRANCH_NAME=${{ github.head_ref || github.ref_name }}
          echo TAG=${{ env.TAG_PREFIX}}-${BRANCH_NAME/\//_} >> $GITHUB_ENV

      - name: set tag when running locally in act
        if: ${{ env.ACT }}
        run: |
          echo TAG=latest >> $GITHUB_ENV

      - name: Set up docker structure test
        run: >
          curl -LO
          https://storage.googleapis.com/container-structure-test/latest/container-structure-test-linux-amd64
          && chmod +x container-structure-test-linux-amd64 && sudo mv container-structure-test-linux-amd64
          /usr/local/bin/container-structure-test

      - name: Configure AWS Credentials
        if: ${{ !env.ACT }}
        uses: aws-actions/configure-aws-credentials@v4
        with:
          audience: sts.amazonaws.com
          aws-region: ${{ env.AWS_REGION }}
          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}

      - name: Login to ECR
        if: ${{ !env.ACT }}
        uses: docker/login-action@v3
        with:
          registry: ${{ vars.ECR_REGISTRY }}

      - name: Build
        uses: docker/build-push-action@v5
        with:
          context: .
          load: true
          tags: ${{ env.TAG }}

      - name: Test
        run: |
          container-structure-test test --image ${{ env.TAG }} --config tests/config.yaml

      - name: Build and push
        if: ${{ !env.ACT }}
        uses: docker/build-push-action@v5
        with:
          context: .
#          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ vars.ECR_REGISTRY }}/${{ vars.ECR_REPOSITORY }}:${{ env.TAG }}

  staging_deploy_plan:
    runs-on: ubuntu-latest
    environment: staging
    needs: build_test_push
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Gruntwork Terragrunt
        uses: gruntwork-io/terragrunt-action@v2.0.0
        with:
          tf_version: '1.5.7'
          tg_version: '0.51.0'
          tg_dir: './deploy/tg'
          tg_command: 'run-all plan'