ci_cd.yml

name: CI/CD

on:
  push:
    branch: ['main']
  pull_request:

jobs:

  check:
    name: continuous integration checks
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v3
        with:
          node-version: 18
      - name: cargo cache
        uses: actions/cache@v3
        with:
          path: target
          key: ${{ hashFiles('Cargo.lock') }}-dev

      - name: npm cache
        uses: actions/cache@v3
        with:
          path: node_modules
          key: ${{ hashFiles('pnpm-lock.yaml') }}
      - name: make check
        run: make check

  push_container:
    name: build and push Docker container
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    environment: Kubernetes
    steps:
      - uses: actions/checkout@v4
      - name: cargo cache
        uses: actions/cache@v3
        with:
          path: target
          key: ${{ hashFiles('Cargo.lock') }}-prod

      - name: npm cache
        uses: actions/cache@v3
        with:
          path: node_modules
          key: ${{ hashFiles('pnpm-lock.yaml') }}
      - name: login to docker hub
        uses: docker/login-action@v3
        with:
          username: jdevries3133
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: setup-musl
        run: sudo apt-get install -y musl-tools

      - name: push the container to Docker Hub
        run: make push-container

  deploy:
    name: deploy to Kubernetes with Terraform
    if: ${{ github.ref == 'refs/heads/main' }}
    runs-on: ubuntu-latest
    needs: [check, push_container]
    environment: Kubernetes
    steps:
      - uses: actions/checkout@v4

      - name: setup kubectl
        run: |
          mkdir ~/.kube
          echo "${{ secrets.KUBE_CONFIG }}" > ~/.kube/config

      - name: perform deployment
        env:
          # credentials are used for terraform state bucket
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          TF_VAR_openai_api_key: ${{ secrets.OPENAI_API_KEY }}
        run: make deploy