ci-cd.yml

# Copyright Paion Data
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
---
name: Astraios CI/CD

"on":
  pull_request:
  push:
    branches:
      - master

env:
  JDK_VERSION: 17
  JDK_DISTRIBUTION: 'adopt'
  USER: QubitPi
  EMAIL: jack20220723@gmail.com
  ASTRAIOS_MODEL_PACKAGE_JAR_GROUP_ID: ${{ secrets.ASTRAIOS_MODEL_PACKAGE_JAR_GROUP_ID }}
  ASTRAIOS_MODEL_PACKAGE_JAR_ARTIFACT_ID: ${{ secrets.ASTRAIOS_MODEL_PACKAGE_JAR_ARTIFACT_ID }}
  ASTRAIOS_MODEL_PACKAGE_JAR_VERSION: ${{ secrets.ASTRAIOS_MODEL_PACKAGE_JAR_VERSION }}
  ASTRAIOS_MODEL_PACKAGE_REPO_ID: ${{ secrets.ASTRAIOS_MODEL_PACKAGE_REPO_ID }}
  ASTRAIOS_MODEL_PACKAGE_REPO_URL: ${{ secrets.ASTRAIOS_MODEL_PACKAGE_REPO_URL }}

jobs:
  yaml-lint:
    name: YAML Style Check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actionshub/yamllint@main
  markdown-lint:
    name: Markdown Style Check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actionshub/markdownlint@main
  markdown-link-check:
    name: Markdown Link Check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: gaurav-nelson/github-action-markdown-link-check@v1
        with:
          use-verbose-mode: "yes"

  tests:
    name: Unit & Integration Tests
    needs: [yaml-lint, markdown-lint, markdown-link-check]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Set up JDK ${{ env.JDK_VERSION }}
        uses: actions/setup-java@v3
        with:
          java-version: ${{ env.JDK_VERSION }}
          distribution: ${{ env.JDK_DISTRIBUTION }}
      - name: Set up Docker for Integration Tests
        uses: docker-practice/actions-setup-docker@master
      - uses: ./.github/actions/create-mvn-settings
        with:
          nexus-server-id: ${{ secrets.NEXUS_SERVER_ID }}
          nexus-user: ${{ secrets.NEXUS_USER }}
          nexus-token: ${{ secrets.NEXUS_TOKEN }}
      - name: Run unit & integration tests
        run: mvn -B clean verify
      - name: Sonar Scan
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        run: mvn -B -Pcoverage sonar:sonar org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.java.binaries=target/classes -Dsonar.projectKey=paion-data_astraios

  documentation:
    name: Test & Release Documentation (including Javadoc)
    needs: tests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Set up JDK ${{ env.JDK_VERSION }}
        uses: actions/setup-java@v3
        with:
          java-version: ${{ env.JDK_VERSION }}
          distribution: ${{ env.JDK_DISTRIBUTION }}
      - name: Install dependencies
        working-directory: docs
        run: yarn
      - name: Build documentations
        working-directory: docs
        run: yarn build
      - uses: ./.github/actions/create-mvn-settings
        with:
          nexus-server-id: ${{ secrets.NEXUS_SERVER_ID }}
          nexus-user: ${{ secrets.NEXUS_USER }}
          nexus-token: ${{ secrets.NEXUS_TOKEN }}
      - name: Generate Javadoc
        run: mvn -B clean javadoc:javadoc
      - name: Move Javadoc into documentation directory
        if: github.ref == 'refs/heads/master'
        run: mv target/site/apidocs/ docs/build/apidocs/
      - name: Deploy documentation (including Javadoc) to GitHub Pages
        if: github.ref == 'refs/heads/master'
        uses: peaceiris/actions-gh-pages@v3
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          publish_dir: docs/build
          enable_jekyll: false
          user_name: ${{ env.USER }}
          user_email: ${{ env.EMAIL }}

  hashicorp:
    name: Publish Astraios AMI Image and Deploy it to EC2 through HashiCorp
    # needs: tests
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: hashicorp
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Load WS classpath properties files and compile-time settings into Packer variable file
        run: |
          touch images/application.properties
          touch images/jpadatastore.properties
          echo "${{ secrets.APPLICATION_PROPERTIES }}" > images/application.properties
          echo "${{ secrets.JPADATASTORE_PROPERTIES }}" > images/jpadatastore.properties

          touch images/settings.xml
          echo '${{ secrets.MAVEN_SETTINGS_FILE }}' > images/settings.xml

          touch images/aws-ami.auto.pkrvars.hcl
          echo 'ASTRAIOS_MODEL_PACKAGE_JAR_GROUP_ID = "${{ secrets.ASTRAIOS_MODEL_PACKAGE_JAR_GROUP_ID }}"' > images/aws-ami.auto.pkrvars.hcl
          echo 'ASTRAIOS_MODEL_PACKAGE_JAR_ARTIFACT_ID = "${{ secrets.ASTRAIOS_MODEL_PACKAGE_JAR_ARTIFACT_ID }}"' >> images/aws-ami.auto.pkrvars.hcl
          echo 'ASTRAIOS_MODEL_PACKAGE_JAR_VERSION = "${{ secrets.ASTRAIOS_MODEL_PACKAGE_JAR_VERSION }}"' >> images/aws-ami.auto.pkrvars.hcl
          echo 'ASTRAIOS_MODEL_PACKAGE_REPO_ID = "${{ secrets.ASTRAIOS_MODEL_PACKAGE_REPO_ID }}"' >> images/aws-ami.auto.pkrvars.hcl
          echo 'ASTRAIOS_MODEL_PACKAGE_REPO_URL = "${{ secrets.ASTRAIOS_MODEL_PACKAGE_REPO_URL }}"' >> images/aws-ami.auto.pkrvars.hcl
      - name: Load runtime settings into Terraform variable file
        run: |
          touch instances/variables.auto.tfvars
          echo 'zone_id = "${{ secrets.ZONE_ID }}"' > instances/variables.auto.tfvars
          echo 'sentry_dsn = "${{ secrets.SENTRY_DSN }}"' >> instances/variables.auto.tfvars
      - name: Load SSL Certificates
        working-directory: hashicorp/images
        run: |
          echo '${{ secrets.SSL_CERTIFICATE }}' > server.crt
          echo '${{ secrets.SSL_CERTIFICATE_KEY }}' > server.key
      - name: Push AMI and Deploy EC2
        uses: QubitPi/aergia@master
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}