CI/CD Pipeline Setup (#215)

* new ci/cd setup; repo cleanup & refactor

* refactor

* license added

* merged main; changed depandabot check to weekly

* added ecs task config file

Author: priom

.github/dependabot.yml

@@ -7,9 +7,9 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
 
   - package-ecosystem: "gomod"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"

.github/workflows/build_prod.yml

@@ -0,0 +1,52 @@
+# Copyright 2020 ChainSafe Systems
+# SPDX-License-Identifier: LGPL-3.0-only
+
+name: Build & Push Docker Image to AWS ECR
+
+on:
+  push:
+    tags:
+      - v*
+
+env:
+  AWS_REGION: ${{ secrets.AWS_REGION }}
+  AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }
+  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+  ECR_REPO: ${{ secrets.AWS_ECR_REPO }}
+
+jobs:
+  build:
+    name: build_prod
+    runs-on: ubuntu-latest
+
+    steps:
+      # download the source code into the runner
+      - name: checkout
+        uses: actions/checkout@v2
+
+      - name: short sha
+        id: vars
+        run: echo "::set-output name=sha::$(git rev-parse --short HEAD)"
+
+      # gather metadata from git & github actions to reference in docker
+      - name: git & github metadata
+        id: metadata
+        uses: docker/metadata-action@v3
+        with:
+          images: ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/${{ env.AWS_ECR_REPO }}
+
+      # login in docker repository
+      - name: docker login
+        uses: aws-actions/amazon-ecr-login@v1
+
+      # build a docker image
+      - name: docker & push image
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: |
+            ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/${{ env.AWS_ECR_REPO }}:latest
+            ${{ env.AWS_ACCOUNT_ID }}.dkr.ecr.${{ env.AWS_REGION }}.amazonaws.com/${{ env.AWS_ECR_REPO }}:${{ steps.vars.outputs.sha }}

.github/workflows/deploy-stage.yml

@@ -0,0 +1,42 @@
+# Copyright 2020 ChainSafe Systems
+# SPDX-License-Identifier: LGPL-3.0-only
+
+name: Deploy ECS Prod
+
+on:
+  push:
+    tags:
+      - v*
+
+env:
+  AWS_REGION: ${{ secrets.AWS_REGION }}
+  AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }
+  ECR_REPO: ${{ secrets.AWS_ECR_REPO }}
+  ENVIRONMENT: PROD
+
+jobs:
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v2
+      - run: sleep 5
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: arn:aws:iam::${{ env.AWS_ACCOUNT_ID }}:role/github-actions-${{ env.ENVIRONMENT }}-nodewatch
+          aws-region: ${{ env.AWS_REGION }}
+          role-session-name: GithubActions
+
+      - name: Deploy to Amazon ECS
+        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+        with:
+          task-definition: ecs/task_definition_${{ env.ENVIRONMENT }}.json
+          service: nodewatch-${{ env.ENVIRONMENT }}-service
+          cluster: nodewatch-${{ env.ENVIRONMENT }}-cluster
+          wait-for-service-stability: true