deploy-stack.yml

name: Deploy Services

run-name: Deploy to ${{ inputs.environment }} by @${{ github.actor }}

on:
  workflow_call:
    inputs:
      environment:
        type: string
        default: "tools"
      version:
        type: string
        default: "stable"

  workflow_dispatch:
    inputs:
      environment:
        type: choice
        required: true
        description: "Where to deploy"
        default: "tools"
        options:
          - tools
          - production
      version:
        type: string
        required: true
        description: "version to deploy"
        default: "stable"

jobs:

  invoke-and-check-cdn:
    uses: ./.github/workflows/invoke-and-check-invalidations.yml
    with:
      environment: shared
    secrets: inherit

  set-service-versions:
    uses: ./.github/workflows/set-service-version.yml
    strategy:
     fail-fast: false
     matrix:
      service: [ "pinga", "rebaser", "sdf", "veritech" ]
    with:
      environment: ${{ inputs.environment }}
      service: ${{ matrix.service }}
      version: ${{ inputs.version }}
    needs:
      - invoke-and-check-cdn
    secrets: inherit

  set-maintenance-mode:
    uses: ./.github/workflows/set-maintenance-mode.yml
    with:
      environment: ${{ inputs.environment }}
    needs:
      - invoke-and-check-cdn
    secrets: inherit

  upgrade-web:
    needs:
      - set-maintenance-mode
    uses: ./.github/workflows/upgrade-web.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit

  upgrade: # the backend services
    needs:
      - set-service-versions
      - set-maintenance-mode
    strategy:
     fail-fast: false
     matrix:
       service: [ "pinga", "rebaser", "veritech" ]
    uses: ./.github/workflows/upgrade-service.yml
    with:
      environment: ${{ inputs.environment }}
      service: ${{ matrix.service }}
    secrets: inherit

  upgrade-and-migrate-sdf:
    needs:
      - upgrade
    uses: ./.github/workflows/migrate-sdf.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit

  e2e-validation:
    # We want to ensure that in-progress cron runs against tools-prod
    # are canceled when we do a deploy so they don't fail erroneously
    concurrency:
      group: e2e-${{ inputs.environment }}
      cancel-in-progress: true
    needs:
      - upgrade-web
      - upgrade-and-migrate-sdf
    if: always()
    uses: ./.github/workflows/e2e-validation.yml
    with:
      environment: ${{ inputs.environment }}
    secrets: inherit