prod-build-deploy-on-release.yaml

name: Prod - Build and Deploy on release

on:
  release:
    types: [published]
  workflow_dispatch:

defaults:
  run:
    shell: bash


jobs:
  build:
    runs-on: mdb-dev
    env:
      AWS_REGION: us-east-2
    steps:
      - name: Generate token
        # Use the Github App private key to request an installation
        # token with read-only access to the organization's private
        # repositories. This token is then used in the checkout step
        # (but not in subsequent steps that create releases and upload
        # assets, those still use the default token that has write
        # access to the current repository).
        id: generate_token
        uses: tibdex/github-app-token@v1
        with:
          app_id: ${{ secrets.ACTION_APP_ID }}
          private_key: ${{ secrets.ACTION_APP_KEY }}
      - name: Checkout tag
        uses: actions/checkout@v4
        with:
          token: ${{ steps.generate_token.outputs.token }}
      - name: Pull MindsDB Github Actions
        uses: actions/checkout@v4
        with:
          repository: mindsdb/github-actions
          path: github-actions
          ssh-key: ${{ secrets.GH_ACTIONS_PULL_SSH }}
      - uses: ./github-actions/setup-env
      - uses: ./github-actions/build-push-ecr
        with:
          module-name: ${{ env.CI_REPOSITORY_SLUG }}
          build-for-environment: production
          image-ref: ${{ env.CI_REF_SLUG }}

  deploy-prod:
    runs-on: mdb-prod
    needs: [build]
    environment:
      name: prod
      url: https://mindsdb.com/blog
    steps:
      - uses: actions/checkout@v4
      - name: Pull MindsDB Github Actions
        uses: actions/checkout@v4
        with:
          repository: mindsdb/github-actions
          path: github-actions
          ssh-key: ${{ secrets.GH_ACTIONS_PULL_SSH }}
      - uses: ./github-actions/setup-env
      - uses: DevOps-Nirvana/aws-helm-multi-deploy-nodocker@v2
        with:
          environment-slug: prod
          k8s-namespace: prod
          image-tag: production-${{ env.CI_REF_SLUG }}
          timeout: 600s