pr-open.yml

name: PR

on:
  pull_request:
    branches: [main]

concurrency:
  # PR open and close use the same group, allowing only one at a time
  group: pr-${{ github.workflow }}-${{ github.event.number }}
  cancel-in-progress: true


jobs:
  init:
    name: Initialize
    if: "!github.event.pull_request.head.repo.fork"
    outputs:
      route: ${{ github.event.number }}
    runs-on: ubuntu-22.04
    permissions:
      pull-requests: write
    steps:
      - name: PR Greeting
        env:
          FAM_ROUTE: "$(( ${{ github.event.number }} % 50 ))"
          DOMAIN: apps.silver.devops.gov.bc.ca
          PREFIX: ${{ github.event.repository.name }}
        uses: bcgov-nr/action-pr-description-add@v1.1.0
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          add_markdown: |
            ---

            Thanks for the PR!

            Any successful deployments (not always required) will be available below.
            
            Backend: [https://${{ env.PREFIX }}${{ env.FAM_ROUTE }}-backend.${{ env.DOMAIN }}/actuator/health]()
            Frontend: [https://${{ env.PREFIX }}-${{ env.FAM_ROUTE }}-frontend.${{ env.DOMAIN }}]()

            Once merged, code will be promoted and handed off to following workflow run.
            [Main Merge Workflow](https://github.com/${{ github.repository }}/actions/workflows/merge-main.yml)

      - name: OpenShift Init
        uses: bcgov-nr/action-deployer-openshift@v2.0.0
        with:
          oc_namespace: ${{ vars.OC_NAMESPACE }}
          oc_server: ${{ vars.OC_SERVER }}
          oc_token: ${{ secrets.OC_TOKEN }}
          file: common/openshift.init.yml
          overwrite: false
          parameters:
            -p ZONE=${{ github.event.number }}
            -p NAME=${{ github.event.repository.name }}
            -p AWS_KINESIS_STREAM='${{ secrets.AWS_KINESIS_STREAM }}'
            -p AWS_KINESIS_ROLE_ARN='${{ secrets.AWS_KINESIS_ROLE_ARN }}'
            -p AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}
            -p AWS_ACCESS_KEY_SECRET='${{ secrets.AWS_ACCESS_KEY_SECRET }}'
            -p ORACLE_DB_USER=${{ secrets.DB_USER }}
            -p ORACLE_DB_PASSWORD='${{ secrets.DB_PASSWORD }}'
          triggers: ('common/' 'backend/' 'frontend/')

  builds:
    name: Builds
    needs: [init]
    if: "!github.event.pull_request.head.repo.fork"
    runs-on: ubuntu-22.04
    permissions:
      packages: write
    strategy:
      matrix:
        name: [backend, frontend]
        include:
          - name: backend
            triggers: ('backend/')
          - name: frontend
            triggers: ('frontend/')
    steps:
      - uses: actions/checkout@v4
      - uses: bcgov-nr/action-builder-ghcr@v2.0.1
        with:
          package: ${{ matrix.name }}
          tag: ${{ github.event.number }}
          tag_fallback: test
          token: ${{ secrets.GITHUB_TOKEN }}
          triggers: ${{ matrix.triggers }}

  deploys:
    name: Deploys
    if: "!github.event.pull_request.head.repo.fork"
    needs: [builds]
    runs-on: ubuntu-22.04
    strategy:
      matrix:
        name: [backend, frontend, fluentbit]
        include:
          - name: backend
            file: backend/openshift.deploy.yml
            triggers: ('common/' 'backend/' 'frontend/')
            verification_path: /actuator/health
            parameters:
              -p MIN_REPLICAS=1
              -p MAX_REPLICAS=2
          - name: frontend
            file: frontend/openshift.deploy.yml
            triggers: ('common/' 'backend/' 'frontend/')
            parameters:
              -p VITE_USER_POOLS_WEB_CLIENT_ID=${{ vars.VITE_USER_POOLS_WEB_CLIENT_ID }}
              -p MIN_REPLICAS=1
              -p MAX_REPLICAS=2
              -p FAM_ROUTE="$(( ${{ github.event.number }} % 50 ))"
          - name: fluentbit
            file: common/openshift.fluentbit.yml
            overwrite: true
            triggers: ('common/' 'backend/' 'frontend/')
    steps:
      - uses: bcgov-nr/action-deployer-openshift@v2.0.0
        with:
          file: ${{ matrix.file }}
          oc_namespace: ${{ vars.OC_NAMESPACE }}
          oc_server: ${{ vars.OC_SERVER }}
          oc_token: ${{ secrets.OC_TOKEN }}
          overwrite: true
          parameters:
            -p ZONE=${{ github.event.number }}
            -p NAME=${{ github.event.repository.name }}
            ${{ matrix.parameters }}
          triggers: ${{ matrix.triggers }}
          verification_path: ${{ matrix.verification_path }}