metrics-deploy.yml

name: Aztec Metrics Stack Deployment

on:
  workflow_call:
    inputs:
      namespace:
        description: The namespace to deploy to, e.g. metrics
        required: true
        type: string
        default: metrics
      values_file:
        description: The values file to use, e.g. prod.yaml
        required: true
        type: string
        default: "prod.yaml"
      respect_tf_lock:
        description: Whether to respect the Terraform lock
        required: false
        type: string
        default: "true"
      run_terraform_destroy:
        description: Whether to run terraform destroy before deploying
        required: false
        type: string
        default: "false"
      ref:
        description: The branch name to deploy from
        required: false
        type: string
        default: "master"
    secrets:
      GCP_SA_KEY:
        required: true
  workflow_dispatch:
    inputs:
      namespace:
        description: The namespace to deploy to, e.g. metrics
        required: true
        default: metrics
      values_file:
        description: The values file to use, e.g. prod.yaml
        required: true
        default: "prod.yaml"
      respect_tf_lock:
        description: Whether to respect the Terraform lock
        required: false
        default: "true"
      run_terraform_destroy:
        description: Whether to run terraform destroy before deploying
        required: false
        default: "false"
      ref:
        description: The branch name to deploy from
        required: false
        default: "master"

jobs:
  metrics_deployment:
    # This job will run on Ubuntu
    runs-on: ubuntu-latest
    concurrency:
      group: deploy-${{ github.ref }} # Only one job per branch
      cancel-in-progress: false # Allow previous deployment to complete to avoid corruption

    # Set up a variable based on the branch name
    env:
      NAMESPACE: ${{ inputs.namespace }}
      VALUES_FILE: ${{ inputs.values_file }}
      CHART_PATH: ./spartan/metrics
      CLUSTER_NAME: aztec-gke
      REGION: us-west1-a
      TF_STATE_BUCKET: aztec-terraform
      GKE_CLUSTER_CONTEXT: gke_testnet-440309_us-west1-a_aztec-gke

    steps:
      - name: Checkout code
        uses: actions/checkout@v3
        with:
          ref: ${{ inputs.ref }}

      - name: Authenticate to Google Cloud
        uses: google-github-actions/auth@v2
        with:
          credentials_json: ${{ secrets.GCP_SA_KEY }}

      - name: Set up Cloud SDK
        uses: google-github-actions/setup-gcloud@v2

      - name: Install GKE Auth Plugin
        run: |
          gcloud components install gke-gcloud-auth-plugin --quiet

      - name: Configure kubectl with GKE cluster
        run: |
          gcloud container clusters get-credentials ${{ env.CLUSTER_NAME }} --region ${{ env.REGION }}

      - name: Ensure Terraform state bucket exists
        run: |
          if ! gsutil ls gs://${{ env.TF_STATE_BUCKET }} >/dev/null 2>&1; then
            echo "Creating GCS bucket for Terraform state..."
            gsutil mb -l us-east4 gs://${{ env.TF_STATE_BUCKET }}
            gsutil versioning set on gs://${{ env.TF_STATE_BUCKET }}
          else
            echo "Terraform state bucket already exists"
          fi

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v2
        with:
          terraform_version: "1.5.0" # Specify your desired version

      - name: Terraform Init
        working-directory: ./spartan/terraform/deploy-metrics
        run: |
          terraform init \
            -backend-config="bucket=${{ env.TF_STATE_BUCKET }}" \
            -backend-config="prefix=metrics-deploy/${{ env.REGION }}/${{ env.CLUSTER_NAME }}/${{ env.NAMESPACE }}/terraform.tfstate"

      - name: Terraform Destroy
        working-directory: ./spartan/terraform/deploy-metrics
        if: ${{ inputs.run_terraform_destroy == 'true' }}
        # Destroy fails if the resources are already destroyed, so we continue on error
        continue-on-error: true
        run: |
          terraform destroy -auto-approve \
            -var="RELEASE_NAME=${{ env.NAMESPACE }}" \
            -var="VALUES_FILE=${{ env.VALUES_FILE }}" \
            -var="GKE_CLUSTER_CONTEXT=${{ env.GKE_CLUSTER_CONTEXT }}" \
            -lock=${{ inputs.respect_tf_lock }}

      - name: Terraform Plan
        working-directory: ./spartan/terraform/deploy-metrics
        run: |
          terraform plan \
            -var="RELEASE_NAME=${{ env.NAMESPACE }}" \
            -var="VALUES_FILE=${{ env.VALUES_FILE }}" \
            -var="GKE_CLUSTER_CONTEXT=${{ env.GKE_CLUSTER_CONTEXT }}" \
            -out=tfplan \
            -lock=${{ inputs.respect_tf_lock }}

      - name: Terraform Apply
        working-directory: ./spartan/terraform/deploy-metrics
        run: terraform apply -lock=${{ inputs.respect_tf_lock }} -auto-approve tfplan