api-deploy-staging-ecs.yml

name: API Deploy to Staging ECS

on:
  push:
    branches:
      - main
    paths:
      - api/**
      - .github/**
      - infrastructure/aws/staging/**
  workflow_dispatch:

jobs:
  deploy-staging-ecs:
    runs-on: ubuntu-latest
    name: API Deploy to Staging ECS
    environment: staging

    steps:
      - name: Cloning repo
        uses: actions/checkout@v4

      - name: Deploy API to Staging
        id: deploy-api
        uses: ./.github/actions/api-deploy-ecs
        with:
          github_access_token: ${{ secrets.GH_PRIVATE_ACCESS_TOKEN }}
          aws_access_key_id: AKIAUM26IRCPASKFW2X5
          aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws_ecs_cluster_name: flagsmith-api-cluster-eu-west-2-f241261
          aws_ecs_cluster_arn: arn:aws:ecs:eu-west-2:302456015006:cluster/flagsmith-api-cluster-eu-west-2-f241261
          aws_ecs_service_name: flagsmith-svc-eu-west-2-8bb18de
          aws_vpc_subnet_id: subnet-1b0b8861
          aws_ecs_security_group_id: sg-08632d6fb4cb0fdf3
          aws_ecr_repository_arn: 302456015006.dkr.ecr.eu-west-2.amazonaws.com/flagsmith-ecr-d247ba2
          aws_identity_migration_event_bus_name: identity_migration-fb41b5d
          aws_identity_migration_event_bus_rule_id: identity_migration-08330ed
          aws_identity_migration_task_role_arn: arn:aws:iam::302456015006:role/task-exec-role-6fb76f6
          aws_task_definitions_directory_path: infrastructure/aws/staging
          flagsmith_saml_revision: v1.6.0
          flagsmith_auth_controller_revision: v0.0.1
          flagsmith_rbac_revision: v0.7.0
          sse_pgp_private_key: ${{ secrets.SSE_PGP_PRIVATE_KEY }}

      - name: Deploy task processor to Staging
        uses: ./.github/actions/task-processor-deploy-ecs
        with:
          aws_access_key_id: AKIAUM26IRCPASKFW2X5
          aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws_ecs_cluster_name: flagsmith-api-cluster-eu-west-2-f241261
          aws_ecs_service_name: flagsmith-task-processor-svc-eu-west-2-792c644
          aws_task_definitions_directory_path: infrastructure/aws/staging
          api_ecr_image_url: ${{ steps.deploy-api.outputs.api_ecr_image_url }}

  run-tests:
    runs-on: ubuntu-latest
    name: Run E2E Tests
    environment: staging
    needs: deploy-staging-ecs
    concurrency:
      group: e2e-tests-staging
      cancel-in-progress: true

    steps:
      - name: Cloning repo
        uses: actions/checkout@v4

      - name: Run E2E tests against staging
        uses: ./.github/actions/e2e-tests
        with:
          e2e_test_token: ${{ secrets.E2E_TEST_TOKEN }}
          slack_token: ${{ secrets.SLACK_TOKEN }}
          environment: staging