Reg flow

.env

@@ -0,0 +1 @@
+test

.github/workflows/aws.yml

@@ -0,0 +1,139 @@
+# This workflow will build and push a new container image to Amazon ECR,
+# and then will deploy a new task definition to Amazon ECS, when there is a push to the "main" branch.
+#
+# To use this workflow, you will need to complete the following set-up steps:
+#
+# 1. Create an ECR repository to store your images.
+#    For example: `aws ecr create-repository --repository-name my-ecr-repo --region us-east-2`.
+#    Replace the value of the `ECR_REPOSITORY` environment variable in the workflow below with your repository's name.
+#    Replace the value of the `AWS_REGION` environment variable in the workflow below with your repository's region.
+#
+# 2. Create an ECS task definition, an ECS cluster, and an ECS service.
+#    For example, follow the Getting Started guide on the ECS console:
+#      https://us-east-2.console.aws.amazon.com/ecs/home?region=us-east-2#/firstRun
+#    Replace the value of the `ECS_SERVICE` environment variable in the workflow below with the name you set for the Amazon ECS service.
+#    Replace the value of the `ECS_CLUSTER` environment variable in the workflow below with the name you set for the cluster.
+#
+# 3. Store your ECS task definition as a JSON file in your repository.
+#    The format should follow the output of `aws ecs register-task-definition --generate-cli-skeleton`.
+#    Replace the value of the `ECS_TASK_DEFINITION` environment variable in the workflow below with the path to the JSON file.
+#    Replace the value of the `CONTAINER_NAME` environment variable in the workflow below with the name of the container
+#    in the `containerDefinitions` section of the task definition.
+#
+# 4. Store an IAM user access key in GitHub Actions secrets named `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`.
+#    See the documentation for each action used below for the recommended IAM policies for this IAM user,
+#    and best practices on handling the access key credentials.
+
+name: Deploy to Amazon ECS
+
+on:
+  push:
+    branches: [ "release-ui-*" ]
+  #pull_request:
+    # The branches below must be a subset of the branches above
+    #branches: [ "main" ]
+
+
+env:
+  AWS_REGION: ap-south-1                   # set this to your preferred AWS region, e.g. us-west-1
+  ECR_REPOSITORY: sunbird-serve-ui           # set this to your Amazon ECR repository name
+  ECS_SERVICE: sunbird-serve-ui                 # set this to your Amazon ECS service name
+  ECS_CLUSTER:  ecs-integrated                 # set this to your Amazon ECS cluster name
+  ECS_TASK_DEFINITION: .github/workflows/task-definition.json # set this to the path to your Amazon ECS task definition
+                                               # file, e.g. .aws/task-definition.json
+  CONTAINER_NAME: sunbird-serve-ui           # set this to the name of the container in the
+                                               # containerDefinitions section of your task definition
+  SHELL_SCRIPT_NAME: .github/workflows/create-json.sh
+  PYTHON_FILE_NAME: .github/workflows/replace-secrets.py
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+    environment: production
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Shell script to create JSON 
+      run: ${{ env.SHELL_SCRIPT_NAME }}
+      shell: bash
+
+    - name: Dump older task definition
+      env:
+        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}   
+      run: |
+        aws ecs describe-task-definition --region ap-south-1 --task-definition sunbird-serve-ui --query taskDefinition > .github/workflows/task-definition.json
+        cat .github/workflows/task-definition.json
+        ls -ltr
+        pwd 
+        tree
+        cd .github/workflows
+        ls -ltr
+        pwd
+        tree
+
+    - name: Python to update TD
+      run: python ${{ env.PYTHON_FILE_NAME }}
+
+
+    - name: Print new task definition  
+      run: |
+        cat .github/workflows/task-definition.json
+
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        aws-region: ${{ env.AWS_REGION }}
+
+    #- name: register_ecs_td.sh
+      #run: |
+        #bash register_ecs_td.sh ${{ steps.build-image.outputs.image }}
+        #cat .github/workflows/task-definition.json
+
+    - name: Login to Amazon ECR
+      id: login-ecr
+      uses: aws-actions/amazon-ecr-login@v1
+
+    - name: Build, tag, and push image to Amazon ECR
+      id: build-image
+      env:
+        ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+        IMAGE_TAG: ${{ github.sha }}
+      run: |
+        # Build a docker container and
+        # push it to ECR so that it can
+        # be deployed to ECS.
+        cd src/main/frontend
+        docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
+        docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+        echo "image=$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG" >> $GITHUB_OUTPUT
+    - name: Fill in the new image ID in the Amazon ECS task definition
+      id: task-def
+      uses: aws-actions/amazon-ecs-render-task-definition@v1
+      with:
+        task-definition: ${{ env.ECS_TASK_DEFINITION }}
+        container-name: ${{ env.CONTAINER_NAME }}
+        image: ${{ steps.build-image.outputs.image }}
+
+    - name: Deploy Amazon ECS task definition
+      uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+      with:
+        task-definition: ${{ steps.task-def.outputs.task-definition }}
+        service: ${{ env.ECS_SERVICE }}
+        cluster: ${{ env.ECS_CLUSTER }}
+        wait-for-service-stability: false
+
+
+    #- name: redeploy with newly created service after bash script
+      #run: |
+        # redeploying 
+        #ls

.github/workflows/create-json.sh

@@ -0,0 +1,25 @@
+#/bin/bash
+account_id=049302583731
+if [ -f /tmp/__secrets.json ] ; then
+rm -f /tmp/__secrets.json 
+fi
+
+printf '{
+	 "secrets": [' > /tmp/__secrets.json
+
+for line in `cat .env`
+do
+  key=$line
+  if [[ -z "$line" || "$line" =~ ^[[:space:]]*# ]]; then
+    continue
+  fi
+          echo "{
+                 "'"name"'": "'"'$key'"'",
+                 "'"valueFrom"'": "'"'"arn:aws:ssm:ap-south-1:$account_id:parameter/$key"'"'"
+                }," >> /tmp/__secrets.json
+done
+sed '$ s/,$//'  /tmp/__secrets.json > .github/workflows/secrets.json
+
+echo ']}' >> .github/workflows/secrets.json 
+
+cat .github/workflows/secrets.json

.github/workflows/replace-secrets.py

@@ -0,0 +1,45 @@
+import json
+
+original_taskdef = ".github/workflows/task-definition.json"
+secrets_array = ".github/workflows/secrets.json"
+
+
+with open(original_taskdef, 'r') as file:
+	task_definition = json.load(file)
+
+	for item in task_definition:
+		if "containerDefinitions" in item:
+			containerDefinitions = task_definition['containerDefinitions']
+			for item in containerDefinitions:
+				if "secrets" in item:
+					print("secret block exists")
+					#print(json.dumps(containerDefinitions[0]['secrets'], indent=4)) # if want to print
+
+
+
+with open(secrets_array, 'r') as new_file:
+	new_data = json.load(new_file)
+	new_secrets	= new_data['secrets']
+	#print(json.dumps(new_secrets, indent=4))
+
+#__task_definition = task_definition["taskDefinition"]
+#__secrets_to_replace = __task_definition["containerDefinitions"] 
+#secrets_to_replace = __secrets_to_replace[0]["secrets"]
+#__secrets_to_replace[0]["secrets"] = new_secrets
+
+
+__secrets_to_replace = task_definition['containerDefinitions'] 
+secrets_to_replace = __secrets_to_replace[0]['secrets']
+__secrets_to_replace[0]['secrets'] = new_secrets
+
+#task_definition['secrets'] = new_secrets		#replace old secrets block with new_secrets
+
+
+print(json.dumps(task_definition, indent = 4))
+
+
+# writing to new file
+with open(".github/workflows/task-definition.json", 'w') as outfile:
+    json.dump(task_definition, outfile, indent=4)
+
+print("Updated JSON has been written to new_task_definition.json file.")

.gitignore

@@ -0,0 +1 @@
+src/main/frontend/node_modules

src/main/frontend/.env

@@ -0,0 +1 @@
+test

src/main/frontend/Dockerfile

@@ -6,4 +6,4 @@ COPY package-lock.json .
 RUN npm install ci --only=production
 COPY . .
 EXPOSE 3000
-CMD ["npm","start"]
+CMD ["npm","start"]