si/.github/workflows/deploy-stack.yml at main · systeminit/si · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
name: Deploy Services

run-name: Deploy to ${{ inputs.environment }} by @${{ github.actor }}

on:
  workflow_call:
    inputs:
      environment:
        type: string
        default: "tools"
      version:
        type: string
        default: "stable"
      wait_duration:
        type: number
        default: 0

  workflow_dispatch:
    inputs:
      environment:
        type: choice
        required: true
        description: "Where to deploy"
        default: "tools"
        options:
          - tools
          - production
          - perf
      version:
        type: string
        required: true
        description: "version to deploy"
        default: "stable"
      wait_duration:
        type: number
        required: false
        description: "How long to wait before deploying"
        default: 0

# We only one one deploy happening at a time per environment, so if one is
# in progress, we'll wait for it to finish before starting the
# next one.
# Note that this will also wait for E2E tests to finish, as per the crons workflows
concurrency:
  group: deploy-${{ inputs.environment }}
  cancel-in-progress: false

jobs:
  wait:
    name: wait
    runs-on: ubuntu-latest
    steps:
      - name: wait
        run: |
          echo "Sleeping for ${{ inputs.wait_duration }}"
          sleep ${{ inputs.wait_duration }}

  invoke-and-check-cdn:
    uses: ./.github/workflows/invoke-and-check-invalidations.yml
    with:
      environment: shared
    secrets: inherit

  set-service-versions:
    uses: ./.github/workflows/set-service-version.yml
    needs:
      - invoke-and-check-cdn
    strategy:
      fail-fast: false
      matrix:
        service: ["pinga", "rebaser", "sdf", "forklift", "veritech", "edda", "luminork"]
    with:
      environment: ${{ inputs.environment }}
      service: ${{ matrix.service }}
      version: ${{ inputs.version }}
    secrets: inherit

  set-maintenance-mode:
    needs:
      - set-service-versions
      - wait
    uses: ./.github/workflows/set-maintenance-mode.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit

  upgrade-web:
    needs:
      - set-maintenance-mode
    uses: ./.github/workflows/upgrade-web.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit

  upgrade: # the backend services
    needs:
      - set-service-versions
      - set-maintenance-mode
    strategy:
      fail-fast: false
      matrix:
        service: ["pinga", "rebaser", "forklift", "veritech", "edda", "luminork"]
    uses: ./.github/workflows/upgrade-service.yml
    with:
      environment: ${{ inputs.environment }}
      service: ${{ matrix.service }}
    secrets: inherit

  upgrade-and-migrate-sdf:
    needs:
      - upgrade
    uses: ./.github/workflows/migrate-sdf.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit

  sleep-between:
    if: ${{ inputs.environment != 'tools' }}
    name: Wait for 10 minutes
    needs: upgrade-and-migrate-sdf
    runs-on: ubuntu-latest
    steps:
      - name: Sleep for 10 minutes
        run: sleep 600

  e2e-validation:
    if: ${{ inputs.environment != 'tools' }}
    needs:
      - upgrade-web
      - sleep-between
    uses: ./.github/workflows/e2e-validation.yml
    with:
      environment: ${{ inputs.environment }}
      test_dir: cypress/e2e
    secrets: inherit

  api-test:
    if: ${{ inputs.environment != 'tools' }}
    needs:
      - upgrade-web
      - sleep-between
    uses: ./.github/workflows/run-api-test.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit