Merge pull request passportxyz#476 from gitcoinco/gh-action-ceramic

feat(infra): gh action for deploying ceramic to production
gvoiceid · Aug 25, 2022 · 1a3cd82 · 1a3cd82
2 parents 7cd5ac3 + a4352b1
commit 1a3cd82
Show file tree

Hide file tree

Showing 2 changed files with 46 additions and 4 deletions.
diff --git a/.github/workflows/ceramic-promote-production.yml b/.github/workflows/ceramic-promote-production.yml
@@ -0,0 +1,40 @@
+name: Deploy Ceramic Mainnet Node
+
+on:
+  workflow_dispatch:
+    inputs:
+      commit:
+        description: "Commit ref"
+        required: true
+        type: string
+
+jobs:
+  deploy-production:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Use Node.js
+        uses: actions/setup-node@v2
+        with:
+          cache: "yarn"
+          cache-dependency-path: infra/ceramic-mainnet/package-lock.json
+      # Update the pulumi stack with new image
+      - run: |
+          npm install
+          pulumi stack select -c gitcoin/ceramic/mainnet-node
+          pulumi config -s gitcoin/ceramic/mainnet-node set aws:region us-east-1 --non-interactive
+        working-directory: infra/ceramic-mainnet
+        env:
+          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
+      - uses: pulumi/actions@v3
+        id: pulumi
+        with:
+          command: up
+          stack-name: gitcoin/ceramic/mainnet-node
+
+          upsert: false
+          work-dir: infra/ceramic-mainnet
+        env:
+          ROUTE_53_ZONE: ${{ secrets.ROUTE53_ZONE_ID_PRODUCTION }}
+          DOMAIN: ${{ secrets.DOMAIN }}
+          RPC_URL: ${{ MAINNET_RPC_URL }}
diff --git a/...workflows/deploy-ceramic-testnet-node.yml → ...hub/workflows/ceramic-promote-staging.yml b/...workflows/deploy-ceramic-testnet-node.yml → ...hub/workflows/ceramic-promote-staging.yml
@@ -2,6 +2,11 @@ name: Deploy Ceramic Testnet Node
 
 on:
   workflow_dispatch:
+    inputs:
+      commit:
+        description: "Commit ref"
+        required: true
+        type: string
 
 jobs:
   deploy-ceramic-testnet:
@@ -29,8 +34,5 @@ jobs:
           upsert: false
           work-dir: infra/ceramic-testnet
         env:
-          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
-          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_STAGING }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_STAGING }}
-          ROUTE_53_ZONE: ${{ secrets.ROUTE53_ZONE_ID_STAGING }}
+          ROUTE_53_ZONE: ${{ secrets.ROUTE53_ZONE_ID_PRODUCTION }}
           DOMAIN: ${{ secrets.DOMAIN }}