deploy.yaml

---
# This workflow will run unit tests and deploy the application to a
# target environment

name: Deploy

on:
  push:
    branches:
      - main
    tags:
      - '*'
    paths-ignore:
      - '**.md'  # All markdown files in the repository

jobs:
  unit-test:
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres
        env:
          POSTGRES_PASSWORD: postgres
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432
    steps:
      - uses: actions/checkout@v2
      - uses: actions/cache@v2
        with:
          path: ~/.cache/pip
          key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}
          restore-keys: |
            ${{ runner.os }}-pip-
      - name: Set up Python 3.9
        uses: actions/setup-python@v2
        with:
          python-version: 3.9
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements.txt
      - name: Test with Django unit tests
        env:
          # For unit tests, secret_key just needs to be populated.
          # It will only ever access a temporary Django test database.
          SECRET_KEY: unit-test-fake-secret-key-#5TY90
        run: python manage.py test --debug-mode

  deploy:
    if: github.repository_owner == '18F'
    needs: unit-test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2

      - name: Install CloudFoundry CLI
        run: |
          curl -L "https://packages.cloudfoundry.org/stable?release=linux64-binary&version=v7&source=github" | sudo tar -zx --directory=/usr/local/bin
          cf --version

      - name: Setup CF CLI auth
        run: |
          cf api https://api.fr.cloud.gov
          cf auth ${{ secrets.CF_USERNAME }} ${{ secrets.CF_PASSWORD }}

      - name: Determine deployment target
        id: deployment-target
        env:
          GITHUB_REF: ${{ github.ref }}
        run: |
          # Use the Github reference to determine environment values
          if [[ $GITHUB_REF == "refs/heads/main" ]]; then
              # Pushes to main are deployed to dev
              target_environment=give-dev
              service_route=identity-give-idemia-dev.apps.internal
              transaction_route=identity-give-transaction-log-dev.apps.internal
          elif [[ $GITHUB_REF =~ refs/tags/* ]]; then
              # Tags on main are deployed to test
              target_environment=give-test
              service_route=identity-give-idemia-test.apps.internal
              transaction_route=identity-give-transaction-log-test.apps.internal
          else
              echo 'Unknown deployment target'
              exit 1
          fi

          # Set the outputs for this step
          echo "::set-output name=SPACE::$target_environment"
          echo "::set-output name=ROUTE::$service_route"
          echo "::set-output name=TRANSACTION_ROUTE::$transaction_route"
          echo "Deploying to $target_environment"

      - name: Set CF CLI Target
        run: cf target -o ${{ secrets.CF_ORG }} -s ${{ steps.deployment-target.outputs.SPACE }}

      - name: Ensure DB Available
        run: .cloud-gov/ensure_db_available.sh idemia-db

      - name: Deploy application
        run: cf push --vars-file vars.yaml
          --var SECRET_KEY=${{ secrets.SECRET_KEY }}
          --var ROUTE=${{ steps.deployment-target.outputs.ROUTE }}
          --var TRANSACTION_ROUTE=${{ steps.deployment-target.outputs.TRANSACTION_ROUTE }}
          --strategy rolling