reusable-deploy.yml

name: deploy

on:
  workflow_dispatch:
    inputs:
      env:
        description: "Target environment for deployment"
        required: true
        type: string
      version:
        description: "Version to be assigned to the built image"
        required: true
        type: string
      cluster_name:
        description: "Name of the cluster on which to perform deployment"
        default: mangata-dev
        required: false
        type: string
  workflow_call:
    inputs:
      env:
        description: "Target environment for deployment"
        required: true
        type: string
      version:
        description: "Version to be assigned to the built image"
        required: true
        type: string
      cluster_name:
        description: "Name of the cluster on which to perform deployment"
        default: mangata-dev
        required: false
        type: string

permissions:
  contents: read
  id-token: write
  deployments: write

jobs:
  deploy:
    runs-on: ubuntu-latest
    env:
      ENV_REF: ${{ inputs.env == 'fungible' && format('pr-{0}', github.event.number) || inputs.env }}
    steps:
      - uses: actions/checkout@v3
      - uses: jkroepke/setup-vals@v1.0.4
      - name: Setup helmfile
        uses: mamezou-tech/setup-helmfile@v1.2.0
        with:
          install-kubectl: no
          install-helm: no
          additional-helm-plugins: https://github.com/jkroepke/helm-secrets --version v4.1.1,https://github.com/aslafy-z/helm-git --version 0.14.0
      - uses: google-github-actions/auth@v1
        with:
          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
      - name: Set up GKE credentials
        uses: google-github-actions/get-gke-credentials@v0.8.2
        with:
          cluster_name: ${{ inputs.cluster_name }}
          location: europe-west1
      
      - name: Create a GitHub Deployment
        uses: bobheadxi/deployments@v1.3.0
        id: deployment
        with:
          step: start
          token: ${{ secrets.GITHUB_TOKEN }}
          env: ${{ env.ENV_REF }}
          ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}

      - run: |
          export ENVIRONMENT=${{ env.ENV_REF }}
          export IMAGE_TAG=${{ inputs.version }}
          
          # https://dev.to/derlin/helmfile-difference-between-sync-and-apply-helm-3-28o1
          export HELM_DIFF_THREE_WAY_MERGE=true
          helmfile apply -e ${{ inputs.env }}
        working-directory: devops/helmfiles
      
      - name: Update the GitHub Deployment status
        uses: bobheadxi/deployments@v1.3.0
        if: always()
        with:
          step: finish
          token: ${{ secrets.GITHUB_TOKEN }}
          status: ${{ job.status }}
          env: ${{ steps.deployment.outputs.env }}
          deployment_id: ${{ steps.deployment.outputs.deployment_id }}
          env_url: "https://polkadot.js.org/apps/?rpc=wss%3A%2F%2Fnode-01-ws-${{ env.ENV_REF }}.mangata.online#/explorer"