# This is a basic workflow to help you get started with Actions

name: AWS ECS Deploy

on:
  workflow_dispatch:
    # Inputs the workflow accepts.
    inputs:
      git_tag:
        description: 'Git tag to deploy'
        required: true
      adracare_env:
        description: 'Adracare environment (dev/test/prod)'
        default: test
        required: true
      aws_region:
        description: 'AWS region'
        default: ca-central-1
        required: true

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # This workflow contains a single job called "build"
  build:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    outputs:
      ecr_repo: ${{ steps.vars.outputs.ecr_repo }}
      ecs_cluster: ${{ steps.vars.outputs.ecs_cluster }}

    environment:
      name: test
      url: https://dev.adracare.co/

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v2
        with:
          ref: ${{ github.event.inputs.git_tag }}

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ca-central-1

      - name: Setup vars
        id: vars
        run: |
          ssm_prefix="/${{ github.event.inputs.adracare_env }}/${{ github.event.inputs.aws_region }}/adracare"
          echo ::set-output name=ref::${GITHUB_REF#refs/*/}
          echo ::set-output name=ecr_repo::$(aws ssm get-parameter --name ${ssm_prefix}/repository/id | jq -cr .Parameter.Value)
          echo ::set-output name=ecs_cluster::$(aws ssm get-parameter --name ${ssm_prefix}/cluster/id | jq -cr .Parameter.Value)

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1

      - name: Build, tag, and push the image to Amazon ECR
        id: build
        env:
          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
          ECR_REPOSITORY: ${{ steps.vars.outputs.ecr_repo }} # github-actions-test # ${ECR_REGISTRY}/adracare-ecr-test #${{ secrets.REPO_NAME }}
          IMAGE_TAG: ${{ github.event.inputs.git_tag }}
        run: |
          # Build a docker container and push it to ECR
          set -x
          docker pull ${ECR_REGISTRY}/${ECR_REPOSITORY}:latest || true
          docker tag ${ECR_REGISTRY}/${ECR_REPOSITORY}:latest ${ECR_REGISTRY}/${ECR_REPOSITORY}:${IMAGE_TAG}
          echo "Building image..."
          docker build -t ${ECR_REGISTRY}/${ECR_REPOSITORY}:${IMAGE_TAG} .
          # docker tag ${ECR_REGISTRY}/${ECR_REPOSITORY}:${IMAGE_TAG} ${ECR_REGISTRY}/${ECR_REPOSITORY}:latest
          echo "Pushing image to ECR..."
          docker push ${ECR_REGISTRY}/${ECR_REPOSITORY}:${IMAGE_TAG}
          echo ${ECR_REGISTRY}/${ECR_REPOSITORY}:${IMAGE_TAG} > docker_image.txt

      # Github thinks that docker_image is a secret value and do not stores to output, so lets use artficats
      - name: Upload artifact docker_image name
        uses: actions/upload-artifact@v2
        with:
          name: docker_image
          path: docker_image.txt



  deploy:
    needs: build
    # The type of runner that the job will run on
    runs-on: ubuntu-latest
    #environment:
    #  name: production
    #  url: https://github.com

    environment:
      name: test
      url: https://dev.adracare.co/


    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v2
        with:
          ref: ${{ github.event.inputs.git_tag }}

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ github.event.inputs.aws_region }}

      - name: Download artifacts
        uses: actions/download-artifact@v2
        with:
          name: docker_image

      - name: Setup vars
        id: vars
        run: |
          echo "::set-output name=image::$(cat docker_image.txt)"
          echo "::set-output name=ecr_repo::$(aws ssm get-parameter --name ${ssm_prefix}/repository/id | jq -cr .Parameter.Value)"
          echo "::set-output name=ecs_cluster::$(aws ssm get-parameter --name ${ssm_prefix}/cluster/id | jq -cr .Parameter.Value)"

      - name: Get Web task definition
        id: get-web-task-def
        run: |
          aws ecs describe-task-definition --task-definition Web --query taskDefinition |
              jq 'del(.compatibilities, .taskDefinitionArn, .requiresAttributes, .revision, .status, .registeredAt, .registeredBy)' > web-task-definition.json
          aws ecs describe-services --cluster ${{ needs.build.outputs.ecs_cluster }} --service Web > web-service.json
          vpc_subnets=$(cat web-service.json | jq -cr .services[0].deployments[0].networkConfiguration.awsvpcConfiguration.subnets)
          vpc_sgs=$(cat web-service.json | jq -cr .services[0].deployments[0].networkConfiguration.awsvpcConfiguration.securityGroups)
          echo "::set-output name=vpc_subnets::${vpc_subnets}"
          echo "::set-output name=vpc_sgs::${vpc_sgs}"

      - name: Get Sidekiq task definition
        id: get-sidekiq-task-def
        run: |
          aws ecs describe-task-definition --task-definition Sidekiq --query taskDefinition |
              jq 'del(.compatibilities, .taskDefinitionArn, .requiresAttributes, .revision, .status, .registeredAt, .registeredBy)' > sidekiq-task-definition.json

      - name: Get db-migrate task definition
        run: |
          # set -x
          aws ecs describe-task-definition --task-definition DBMigrate --query taskDefinition |
              jq 'del(.compatibilities, .taskDefinitionArn, .requiresAttributes, .revision, .status, .registeredAt, .registeredBy)' > db-migrate-task-definition.json

      - name: Fill in the new image ID in the Amazon ECS task definition for db-migrate
        id: db-migrate-task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: db-migrate-task-definition.json
          container-name: db-migrate
          image: ${{ steps.vars.outputs.image }}

      - name: Setup db-migrate task definition
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        with:
          task-definition: ${{ steps.db-migrate-task-def.outputs.task-definition }}

      - name: Run db-migrate
        run: |
          # set -x
          aws ecs run-task --launch-type FARGATE --cluster ${{ needs.build.outputs.ecs_cluster }} \
            --task-definition DBMigrate --network-configuration "awsvpcConfiguration={subnets=${{steps.get-web-task-def.outputs.vpc_subnets}},securityGroups=${{steps.get-web-task-def.outputs.vpc_sgs}}}" > /tmp/task.json
            taskArn=$(cat /tmp/task.json | jq -r .tasks[0].taskArn )
            aws ecs wait tasks-stopped --cluster ${{ needs.build.outputs.ecs_cluster }} --tasks ${taskArn}
            aws ecs describe-tasks --cluster ${{ needs.build.outputs.ecs_cluster }} --tasks ${taskArn} >/tmp/task.json
            # cat /tmp/task.json
            exitCode=$(cat /tmp/task.json | jq -r .tasks[0].containers[0].exitCode)
            if [ "$exitCode" != 0 ]; then
                echo "DB Migration fails, check logs";
                exit 1;
            fi

      - name: Fill in the new image ID in the Amazon ECS task definition for Web
        id: web-task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: web-task-definition.json
          container-name: web
          image: ${{ steps.vars.outputs.image }}

      - name: Fill in the new image ID in the Amazon ECS task definition for Sidekiq
        id: sidekiq-task-def
        uses: aws-actions/amazon-ecs-render-task-definition@v1
        with:
          task-definition: sidekiq-task-definition.json
          container-name: sidekiq
          image: ${{ steps.vars.outputs.image }}


      - name: Setup Web task definition
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        with:
          task-definition: ${{ steps.web-task-def.outputs.task-definition }}
          service: Web
          cluster: ${{ needs.build.outputs.ecs_cluster }}
          wait-for-service-stability: true

      - name: Setup Sidekiq task definition
        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
        with:
          task-definition: ${{ steps.sidekiq-task-def.outputs.task-definition }}
          service: Sidekiq
          cluster: ${{ needs.build.outputs.ecs_cluster }}
          wait-for-service-stability: true