CI Pipeline #42
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI Pipeline | |
| on: | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| jobs: | |
| build: | |
| name: Build frontend | |
| runs-on: ubuntu-latest | |
| outputs: | |
| version: ${{ steps.set_version.outputs.version }} | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v4 | |
| - name: set version | |
| id: set_version | |
| run: | | |
| echo "version=$(date +'%Y%m%d.%H%M%S')" >> "$GITHUB_OUTPUT" | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20.x' | |
| - name: Build | |
| run: | | |
| printf '{"version": "%s" }' ${{steps.set_version.outputs.version}} > public/version.json | |
| npm ci && npm run build | |
| - name: Run tests | |
| run: | | |
| npx playwright install --with-deps chromium | |
| npm run test:coverage | |
| - name: Update coverage | |
| run: | | |
| coverage_pct=$(grep -o '"pct":[0-9.]*' coverage/coverage-summary.json | head -n 1 | cut -d ':' -f 2) | |
| color=$(echo "$coverage_pct < 80" | bc -l | awk '{if ($1) print "yellow"; else print "green"}') | |
| curl https://img.shields.io/badge/Coverage-$coverage_pct%25-$color -o coverageBadge.svg | |
| git config user.name github-actions | |
| git config user.email github-actions@github.com | |
| git add . | |
| git commit -m "generated" | |
| git push | |
| - name: Update pages artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: package | |
| path: dist/ | |
| deploy: | |
| needs: build | |
| permissions: | |
| id-token: write | |
| runs-on: ubuntu-latest | |
| env: | |
| version: ${{needs.build.outputs.version}} | |
| environment: | |
| name: staging | |
| url: https://stage-pizza.trakkup.com | |
| steps: | |
| - name: Create OIDC token to AWS | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| audience: sts.amazonaws.com | |
| aws-region: us-east-1 | |
| role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT }}:role/${{ secrets.CI_IAM_ROLE }} | |
| - name: Download pages artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: package | |
| path: dist/ | |
| - name: Push to AWS S3 | |
| run: | | |
| aws s3 cp dist s3://${{ secrets.APP_BUCKET }}/$version --recursive | |
| - name: Update the cloudfront distribution | |
| run: | | |
| # Get the current distribution and update it to use the new version | |
| aws cloudfront get-distribution-config --id ${{ secrets.DISTRIBUTION_ID }} > original.json | |
| etag=$(jq -r '.ETag' original.json) | |
| jq '.DistributionConfig' original.json > request.json | |
| jq --arg version "/$version" '.Origins.Items[0].OriginPath = $version' request.json > finalRequest.json | |
| aws cloudfront update-distribution --id ${{ secrets.DISTRIBUTION_ID }} --if-match $etag --distribution-config file://finalRequest.json | |
| # Wait for the distribution to deploy and then invalidate the cache | |
| while [ "$(aws cloudfront get-distribution --id ${{ secrets.DISTRIBUTION_ID }} --query 'Distribution.Status' --output text)" != "Deployed" ]; do echo "Distribution is still updating..."; sleep 5; done | |
| aws cloudfront create-invalidation --distribution-id ${{ secrets.DISTRIBUTION_ID }} --paths "/*" | |
| release: | |
| needs: | |
| - build | |
| - deploy | |
| runs-on: ubuntu-latest | |
| env: | |
| version: ${{needs.build.outputs.version}} | |
| steps: | |
| - name: Create staging release | |
| uses: ncipollo/release-action@v1 | |
| with: | |
| tag: stage-version-${{ env.version }} | |
| name: Staging ${{ env.version }} | |
| generateReleaseNotes: true | |
| body: | | |
| ## Description | |
| ${{ github.event.head_commit.message }} | |
| **commit**: ${{ github.sha }} |