deploy-managed-ema-image.yaml

name: Deploy Managed EMA
on:
  workflow_dispatch:
    inputs:
      releaseVersion:
        description: "The tag of the image to push. We'll pull the main image and re-tag it with this."
        required: true
        default: "A.B.C"
      deployEnvironment:
        description: "Environment to deploy to (development/staging/production)."
        required: true
        type: choice
        options:
          - development
          - staging
          - production
jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: prod

    steps:
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-access-key-id: ${{ secrets.EMA_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.EMA_AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.EMA_AWS_DEFAULT_REGION }}
      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1.6.0
      - name: ECR (Dev) - Pull Image
        run: |
          ECR_DEV_IMAGE="${{ steps.login-ecr.outputs.registry }}/${{ github.event.repository.name }}:main"
          docker pull $ECR_DEV_IMAGE
          echo "ECR_DEV_IMAGE=$ECR_DEV_IMAGE" >> $GITHUB_ENV
      - name: GCR (Dev) - Login
        if: ${{ github.event.inputs.deployEnvironment == 'development' }}
        uses: docker/login-action@v3
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.DEV_GCP_SERVICE_ACCOUNT }}
      - name: GCR (Dev) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'development' }}
        run: |
          GCR_IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          GCR_DEV_IMAGE_REPO="gcr.io/${{ secrets.DEV_GCP_PROJECT_ID }}/${{ github.event.repository.name }}"
          for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $GCR_DEV_IMAGE_REPO:$current_tag
            docker push $GCR_DEV_IMAGE_REPO:$current_tag
          done
      - name: GCR (Staging) - Login
        if: ${{ github.event.inputs.deployEnvironment == 'staging' }}
        uses: docker/login-action@v3
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.STAGING_GCP_SERVICE_ACCOUNT }}
      - name: GCR (Staging) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'staging' }}
        run: |
          GCR_IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          GCR_STAGING_IMAGE_REPO="gcr.io/${{ secrets.STAGING_GCP_PROJECT_ID }}/${{ github.event.repository.name }}"
          for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $GCR_STAGING_IMAGE_REPO:$current_tag
            docker push $GCR_STAGING_IMAGE_REPO:$current_tag
          done
      - name: GCR (Production) - Login
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        uses: docker/login-action@v3
        with:
          registry: gcr.io
          username: _json_key
          password: ${{ secrets.PROD_GCP_SERVICE_ACCOUNT }}
      - name: GCR (Prod) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        run: |
          GCR_IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          GCR_PROD_IMAGE_REPO="gcr.io/${{ secrets.PROD_GCP_PROJECT_ID }}/${{ github.event.repository.name }}"
          for current_tag in ${GCR_IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $GCR_PROD_IMAGE_REPO:$current_tag
            docker push $GCR_PROD_IMAGE_REPO:$current_tag
          done
      - name: Log in to Azure China prod docker registry
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        uses: docker/login-action@v3
        with:
          registry: ${{ secrets.AZURE_CHINA_PROD_HOSTNAME }}
          username: ${{ secrets.AZURE_CHINA_PROD_USERNAME }}
          password: ${{ secrets.AZURE_CHINA_PROD_PASSWORD }}
      - name: Azure China (Prod) - Tag and Push
        if: ${{ github.event.inputs.deployEnvironment == 'production' }}
        run: |
          IMAGE_TAGS_TO_PUSH=(
          "${{ github.event.inputs.releaseVersion }}"
          )
          PROD_IMAGE_REPO="${{ secrets.AZURE_CHINA_PROD_HOSTNAME }}/${{ github.event.repository.name }}"
          for current_tag in ${IMAGE_TAGS_TO_PUSH[@]}
          do
            docker tag $ECR_DEV_IMAGE $PROD_IMAGE_REPO:$current_tag
            docker push $PROD_IMAGE_REPO:$current_tag
          done