Terraform Deployment Workflow #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Terraform Deployment Workflow | |
| on: | |
| push: | |
| branches: ["dev"] | |
| pull_request: | |
| branches: ["main"] | |
| workflow_dispatch: | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| environment: ${{ (github.ref == 'refs/heads/main' && 'dev') }} | |
| defaults: | |
| run: | |
| working-directory: ./roots/main-eks-root/ | |
| shell: bash | |
| steps: | |
| - name: Login to AWS | |
| uses: aws-actions/configure-aws-credentials@v3 | |
| with: | |
| role-to-assume: ${{ vars.IAM_ROLE }} | |
| role-session-name: githubactionssession | |
| aws-region: "us-east-2" | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| # # Run Terraform commands | |
| - name: Initialize | |
| run: terraform init | |
| - name: Terraform Validate | |
| run: terraform validate | |
| - name: Plan Infrastructure | |
| run: terraform plan -input=false -var-file=project-x.tfvars | |
| - name: Deploy Infrastructure | |
| run: terraform apply -input=false -auto-approve -var-file=project-x.tfvars | |
| # # Login to ECR | |
| - name: Login to ECR | |
| if: github.ref != 'refs/heads/main' | |
| id: login-to-ecr | |
| uses: aws-actions/amazon-ecr-login@v2 | |
| # # Backend image to ECR | |
| - name: Build, tag, and push Backend docker image to Amazon ECR | |
| if: github.ref != 'refs/heads/main' | |
| env: | |
| REGISTRY: ${{ steps.login-to-ecr.outputs.registry }} | |
| REPOSITORY: proshop-app-backend | |
| IMAGE_TAG: ${{ github.sha }} | |
| working-directory: . | |
| run: | | |
| docker build -t $REGISTRY/$REPOSITORY:$IMAGE_TAG . | |
| docker push $REGISTRY/$REPOSITORY:$IMAGE_TAG | |
| # # Frontend image to ECR | |
| - name: Build, tag, and push Frontend docker image to Amazon ECR | |
| if: github.ref != 'refs/heads/main' | |
| env: | |
| REGISTRY: ${{ steps.login-to-ecr.outputs.registry }} | |
| REPOSITORY: comet-shop-app-frontend | |
| IMAGE_TAG: ${{ github.sha }} | |
| working-directory: ./frontend/ | |
| run: | | |
| docker build -t $REGISTRY/$REPOSITORY:$IMAGE_TAG . | |
| docker push $REGISTRY/$REPOSITORY:$IMAGE_TAG | |
| # # Login to EKS | |
| - name: Login to EKS | |
| run: aws eks update-kubeconfig --region us-east-2 --name project-x-dev | |
| # # Install Helm on the CI/CD Runner | |
| - name: Install Helm | |
| run: | | |
| curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash | |
| # # Install NGINX Ingress Controller using Helm | |
| - name: Install NGINX Ingress Controller | |
| run: | | |
| helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx | |
| helm repo update | |
| helm install nginx-ingress ingress-nginx/ingress-nginx \ | |
| --namespace kube-system --create-namespace | |
| # # Install the Secrets Store CSI Driver** | |
| - name: Install Secrets Store CSI Driver | |
| run: | | |
| helm repo add csi-secrets-store https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts | |
| helm repo update | |
| helm install csi-secrets-store csi-secrets-store/secrets-store-csi-driver --namespace kube-system | |
| # # Apply Kubernetes file | |
| - name: Apply Kubernetes YAML File | |
| working-directory: ./kubernetes-resources/ | |
| run: | | |
| kubectl apply -f proshop-app-tls-secret.yaml | |
| # # Deploy Backend to Kubernetes | |
| - name: Deploy Backend to Kubernetes | |
| env: | |
| IMAGE_TAG: ${{ github.sha }} | |
| working-directory: ./backend/ | |
| run: | | |
| helm upgrade --install proshop-app-backend backend-deploy \ | |
| --values ./backend-deploy/dev-values.yaml \ | |
| --set image.tag="$IMAGE_TAG" \ | |
| --namespace shop-app --create-namespace | |
| # # Deploy Frontend to Kubernetes | |
| - name: Deploy Frontend to Kubernetes | |
| env: | |
| IMAGE_TAG: ${{ github.sha }} | |
| working-directory: ./frontend/ | |
| run: | | |
| helm upgrade --install proshop-app-frontend frontend-deploy \ | |
| --values ./frontend-deploy/dev-values.yaml \ | |
| --set image.tag="$IMAGE_TAG" \ | |
| --namespace shop-app --create-namespace | |
| # # Apply permissions in aws-auth for K8s RBAC | |
| - name: Apply permissions in aws-auth for K8s RBAC | |
| working-directory: ./eks-module | |
| run: | | |
| aws eks update-kubeconfig --name project-x-dev --region us-east-2 | |
| kubectl config current-context | |
| kubectl apply -f aws-auth.yaml | |
| # Destroy Infrastructure | |
| # - name: Destroy Infrastructure | |
| # run: terraform destroy -input=false -auto-approve -var-file=project-x.tfvars |