pr-open.yml

name: PR

on:
  pull_request:
    branches: [main]
  workflow_dispatch:

concurrency:
  # PR open and close use the same group, allowing only one at a time
  group: pr-${{ github.workflow }}-${{ github.event.number }}
  cancel-in-progress: true


jobs:
  init:
    name: Initialize
    if: "!github.event.pull_request.head.repo.fork"
    outputs:
      route: ${{ github.event.number }}
    runs-on: ubuntu-24.04
    permissions:
      pull-requests: write
    steps:
      - name: Get FAM Route
        id: route
        run: |
          echo "route=$(( ${{ github.event.number }} % 50 ))" >> $GITHUB_OUTPUT

      - name: PR Greeting
        env:
          DOMAIN: apps.silver.devops.gov.bc.ca
          PREFIX: ${{ github.event.repository.name }}
        uses: bcgov-nr/action-pr-description-add@v1.1.2
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          add_markdown: |
            ---

            Thanks for the PR!

            Any successful deployments (not always required) will be available below.
            
            Backend: https://${{ env.PREFIX }}-${{ github.event.number }}-backend.${{ env.DOMAIN }}/actuator/health
            Frontend: https://${{ env.PREFIX }}-${{ steps.route.outputs.route }}-frontend.${{ env.DOMAIN }}

            Once merged, code will be promoted and handed off to following workflow run.
            [Main Merge Workflow](https://github.com/${{ github.repository }}/actions/workflows/merge-main.yml)

      - name: OpenShift Init
        uses: bcgov-nr/action-deployer-openshift@v3.0.1
        with:
          oc_namespace: ${{ vars.OC_NAMESPACE }}
          oc_server: ${{ vars.OC_SERVER }}
          oc_token: ${{ secrets.OC_TOKEN }}
          file: common/openshift.init.yml
          overwrite: true
          parameters:
            -p ZONE=${{ github.event.number }}
            -p AWS_KINESIS_STREAM='${{ secrets.AWS_KINESIS_STREAM }}'
            -p AWS_KINESIS_ROLE_ARN='${{ secrets.AWS_KINESIS_ROLE_ARN }}'
            -p AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}
            -p AWS_ACCESS_KEY_SECRET='${{ secrets.AWS_ACCESS_KEY_SECRET }}'
            -p ORACLE_DB_USER=${{ secrets.DB_USER }}
            -p ORACLE_DB_PASSWORD='${{ secrets.ORACLE_DB_PASSWORD }}'
            -p POSTGRES_DB_PASSWORD='${{ secrets.POSTGRES_DB_PASSWORD }}'
            -p FORESTCLIENTAPI_KEY='${{ secrets.FORESTCLIENTAPI_KEY }}'
          triggers: ('common/' 'backend/' 'frontend/')

  builds:
    name: Builds
    needs: [init]
    if: "!github.event.pull_request.head.repo.fork"
    runs-on: ubuntu-24.04
    permissions:
      packages: write
    strategy:
      matrix:
        name: [database, backend, frontend]
        include:
          - package: database
            triggers: ('database/')
          - name: backend
            triggers: ('backend/')
          - name: frontend
            triggers: ('frontend/')
    steps:
      - uses: actions/checkout@v4
      - uses: bcgov-nr/action-builder-ghcr@v2.2.0
        with:
          package: ${{ matrix.name }}
          tag: ${{ github.event.number }}
          tag_fallback: test
          token: ${{ secrets.GITHUB_TOKEN }}
          triggers: ${{ matrix.triggers }}

  deploys:
    name: Deploys
    if: "!github.event.pull_request.head.repo.fork"
    needs: [builds]
    runs-on: ubuntu-24.04
    strategy:
      matrix:
        name: [database, backend, frontend, fluentbit]
        include:
          - name: database
            file: database/openshift.deploy.yml
            parameters:
              -p DB_PVC_SIZE=128Mi
          - name: backend
            file: backend/openshift.deploy.yml
            timeout: 15m
            verification_path: /actuator/health
            parameters:
              -p MAX_REPLICAS=1
              -p MIN_REPLICAS=1
              -p DB_POOL_MAX_SIZE=1
              -p AWS_COGNITO_ISSUER_URI=https://cognito-idp.${{ vars.AWS_REGION }}.amazonaws.com/${{ vars.VITE_USER_POOLS_ID }}
              -p DASHBOARD_JOB_IDIR_USERS=${{ vars.DASHBOARD_JOB_IDIR_USERS }}
              -p WMS_LAYERS_WHITELIST_USERS=${{ vars.WMS_LAYERS_WHITELIST_USERS }}
          - name: frontend
            file: frontend/openshift.deploy.yml
            parameters:
              -p VITE_USER_POOLS_WEB_CLIENT_ID=${{ vars.VITE_USER_POOLS_WEB_CLIENT_ID }}
              -p MIN_REPLICAS=1
              -p MAX_REPLICAS=1
              -p FAM_ROUTE="$(( ${{ github.event.number }} % 50 ))"
          - name: fluentbit
            file: common/openshift.fluentbit.yml
    steps:
      - uses: bcgov-nr/action-deployer-openshift@v3.0.1
        with:
          file: ${{ matrix.file }}
          oc_namespace: ${{ vars.OC_NAMESPACE }}
          oc_server: ${{ vars.OC_SERVER }}
          oc_token: ${{ secrets.OC_TOKEN }}
          overwrite: true
          parameters:
            -p ZONE=${{ github.event.number }} -p TAG=${{ github.event.number }}
            ${{ matrix.parameters }}
          timeout: ${{ matrix.timeout }}
          triggers: ('common/' 'backend/' 'frontend/')
          verification_path: ${{ matrix.verification_path }}
          verification_retry_attempts: 5
          verification_retry_seconds: 15