ci test

Author: marcoacierno

.github/workflows/deploy.yml

@@ -247,11 +247,104 @@ jobs:
           done
         shell: bash
 
-  deploy-fe:
-    runs-on: ubuntu-latest
+  build-fe:
     needs: [wait-aws-update]
+    runs-on: [self-hosted]
+    permissions:
+      packages: write
+      contents: read
+
     steps:
-      - name: Trigger hook
-        if: github.ref == 'refs/heads/main'
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+          fetch-depth: 0
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.aws_access_key_id }}
+          aws-secret-access-key: ${{ secrets.aws_secret_access_key }}
+          aws-region: eu-central-1
+      - name: Get service githash
+        id: git
+        run: |
+          hash=$(git rev-list -1 HEAD -- frontend)
+          echo "githash=$hash" >> $GITHUB_OUTPUT
+      - name: Check if commit is already on ECR
+        id: image
         run: |
-          curl -X POST ${{ secrets.VERCEL_DEPLOY_HOOK }}
+          set +e
+          aws ecr describe-images --repository-name=pythonit/frontend --image-ids=imageTag=${{ steps.git.outputs.githash }}
+          if [[ $? == 0 ]]; then
+            echo "image_exists=1" >> $GITHUB_OUTPUT
+          else
+            echo "image_exists=0" >> $GITHUB_OUTPUT
+          fi
+      - name: Set up QEMU dependency
+        if: ${{ steps.image.outputs.image_exists == 0 }}
+        uses: docker/setup-qemu-action@v3
+      - name: Login to GitHub Packages
+        if: ${{ steps.image.outputs.image_exists == 0 }}
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Login to Amazon ECR
+        if: ${{ steps.image.outputs.image_exists == 0 }}
+        uses: aws-actions/amazon-ecr-login@v2
+      - name: Set up Docker Buildx
+        id: buildx
+        if: ${{ steps.image.outputs.image_exists == 0 }}
+        uses: docker/setup-buildx-action@v3
+      - name: Build and push
+        if: ${{ steps.image.outputs.image_exists == 0 }}
+        uses: docker/build-push-action@v6
+        with:
+          context: ./frontend
+          file: ./frontend/Dockerfile
+          builder: ${{ steps.buildx.outputs.name }}
+          provenance: false
+          push: true
+          tags: ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.eu-central-1.amazonaws.com/pythonit/frontend:${{ steps.git.outputs.githash }}
+          cache-from: type=local,src=/tmp/.buildx-cache
+          cache-to: type=local,dest=/tmp/.buildx-cache
+          platforms: linux/arm64
+          build-args:
+            API_URL_SERVER=https://${{ fromJSON('["pastaporto-", ""]')[github.ref == 'refs/heads/main'] }}admin.pycon.it
+            CMS_HOSTNAME=${{ vars.CMS_HOSTNAME }}
+            CONFERENCE_CODE=${{ vars.CONFERENCE_CODE }}
+
+  deploy-fe:
+    runs-on: ubuntu-latest
+    needs: [build-fe]
+    environment:
+      name: ${{ fromJSON('["pastaporto", "production"]')[github.ref == 'refs/heads/main'] }}
+    defaults:
+      run:
+        working-directory: ./infrastructure/applications
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+          fetch-depth: 0
+      - uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: 1.2.4
+      - name: Terraform Init
+        run: terraform init
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      - name: Terraform Validate
+        id: validate
+        run: terraform validate -no-color
+
+      - name: Terraform apply
+        run: terraform apply -no-color -auto-approve &> /dev/null
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          AWS_DEFAULT_REGION: eu-central-1

infrastructure/applications/pycon_frontend/repo.tf

@@ -0,0 +1,15 @@
+resource "aws_ecr_repository" "repo" {
+  name = "pythonit/pycon-frontend"
+}
+
+data "aws_ecr_image" "image" {
+  repository_name = data.aws_ecr_repository.be_repo.name
+  image_tag       = data.external.githash.result.githash
+}
+
+data "aws_caller_identity" "current" {}
+
+data "external" "githash" {
+  program     = ["python", abspath("${path.module}/../pretix/githash.py")]
+  working_dir = abspath("${path.root}/../../frontend")
+}

infrastructure/applications/pycon_frontend/task.tf

@@ -0,0 +1,2 @@
+variable "cluster_id" {}
+variable "logs_group_name" {}

infrastructure/applications/pycon_frontend/variables.tf

@@ -1,6 +1,7 @@
 locals {
   services = [
     "pycon-backend",
+    "pycon-frontend",
     "pretix"
   ]
 }