posthog/.github/workflows/build-and-deploy-prod.yml

name: Build & Deploy Production Containers

on:
    push:
        branches:
            - master
            - main

concurrency: 'prod_deploy' # Ensure only one of this runs at a time

jobs:
    build:
        name: Build & Deploy Production Docker image
        if: github.repository == 'PostHog/posthog'
        runs-on: ubuntu-20.04
        steps:
            - name: Configure AWS credentials
              uses: aws-actions/configure-aws-credentials@v1
              with:
                  aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
                  aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
                  aws-region: us-east-1

            - name: Login to Amazon ECR
              id: login-ecr
              uses: aws-actions/amazon-ecr-login@v1

            - name: Fetch posthog-cloud
              run: |
                  curl -L https://github.com/posthog/posthog-cloud/tarball/master | tar --strip-components=1 -xz --
                  mkdir deploy/

            - name: Checkout master
              uses: actions/checkout@v2
              with:
                  # ref defaults to whatever branch the action is operating on. Leaving it blank on master or main will make it
                  # easier to switch if we decide to. Also makes branch deploys easier.
                  # ref: 'master'
                  path: 'deploy/'

            - name: Build, tag, and push image to Amazon ECR
              id: build-image
              env:
                  ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
                  ECR_REPOSITORY: posthog-production
                  IMAGE_TAG: ${{ github.sha }}
              run: |
                  docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG -f prod.web.Dockerfile .
                  docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
                  echo "::set-output name=image::$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG"

            - name: Extract and push the static assets to AWS S3
              run: |
                  TMP_FOLDER="$(mktemp -d)"
                  trap 'rm -rf -- "$TMP_FOLDER"' EXIT

                  CONTAINER_NAME="posthog"
                  IMAGE_NAME="${{ steps.build-image.outputs.image }}"
                  S3_BUCKET="posthog-app-static"

                  echo "## Extracting static assets from the container..."
                  docker rm -f $CONTAINER_NAME
                  docker create --name $CONTAINER_NAME $IMAGE_NAME
                  docker cp "${CONTAINER_NAME}:/code/frontend/dist/" "${TMP_FOLDER}"
                  docker rm -f $CONTAINER_NAME
                  echo "Done!"

                  echo "## Uploading the extracted static assets to the AWS S3 bucket..."
                  aws s3 cp "${TMP_FOLDER}/dist/" "s3://${S3_BUCKET}/static" --recursive
                  echo "Done!"

            - name: Fill in the new image ID in the Amazon ECS task definition
              id: task-def-web
              uses: aws-actions/amazon-ecs-render-task-definition@v1
              with:
                  task-definition: deploy/task-definition.web.json
                  container-name: posthog-production
                  image: ${{ steps.build-image.outputs.image }}

            - name: Fill in the new worker image ID in the Amazon ECS task definition
              id: task-def-worker
              uses: aws-actions/amazon-ecs-render-task-definition@v1
              with:
                  task-definition: deploy/task-definition.worker.json
                  container-name: posthog-production-worker
                  image: ${{ steps.build-image.outputs.image }}

            - name: Fill in the new plugins image ID in the Amazon ECS task definition
              id: task-def-plugins
              uses: aws-actions/amazon-ecs-render-task-definition@v1
              with:
                  task-definition: deploy/task-definition.plugins.json
                  container-name: posthog-production-plugins
                  image: ${{ steps.build-image.outputs.image }}

            - name: Fill in the new migration image ID in the Amazon ECS task definition
              id: task-def-migrate
              uses: aws-actions/amazon-ecs-render-task-definition@v1
              with:
                  task-definition: deploy/task-definition.migration.json
                  container-name: posthog-production-migration
                  image: ${{ steps.build-image.outputs.image }}

            - name: Perform migrations
              run: |
                  aws ecs register-task-definition --cli-input-json file://$TASK_DEFINITION
                  aws ecs run-task --cluster posthog-production-cluster --count 1 --launch-type FARGATE --task-definition posthog-production-migration --network-configuration '{
                    "awsvpcConfiguration": {
                      "subnets": ["subnet-8738fde1"],
                      "securityGroups": ["sg-05a5f7e510b15473c"],
                      "assignPublicIp": "ENABLED"
                    }}'
              env:
                  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
                  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
                  AWS_DEFAULT_REGION: 'us-east-1'
                  TASK_DEFINITION: ${{ steps.task-def-migrate.outputs.task-definition }}

            - name: Deploy Amazon ECS web task definition
              uses: aws-actions/amazon-ecs-deploy-task-definition@v1
              with:
                  task-definition: ${{ steps.task-def-web.outputs.task-definition }}
                  service: posthog-production
                  cluster: posthog-production-cluster

            - name: Deploy Amazon ECS events task definition
              uses: aws-actions/amazon-ecs-deploy-task-definition@v1
              with:
                  task-definition: ${{ steps.task-def-web.outputs.task-definition }}
                  service: posthog-production-event
                  cluster: posthog-production-cluster

            - name: Deploy Amazon ECS worker task definition
              uses: aws-actions/amazon-ecs-deploy-task-definition@v1
              with:
                  task-definition: ${{ steps.task-def-worker.outputs.task-definition }}
                  service: posthog-production-worker
                  cluster: posthog-production-cluster

            - name: Deploy Amazon ECS plugins task definition
              uses: aws-actions/amazon-ecs-deploy-task-definition@v1
              with:
                  task-definition: ${{ steps.task-def-plugins.outputs.task-definition }}
                  service: posthog-production-plugins
                  cluster: posthog-production-cluster

            - name: Notify Platform team on slack
              uses: rtCamp/action-slack-notify@v2
              env:
                  SLACK_CHANNEL: platform-bots
                  SLACK_COLOR: ${{ job.status }} # or a specific color like 'good' or '#ff00ff'
                  SLACK_ICON: https://github.com/posthog.png?size=48
                  SLACK_MESSAGE: 'Production Cloud Deploy Github Action Complete :rocket: - ${{ github.event.head_commit.message }}'
                  SLACK_TITLE: Message
                  SLACK_USERNAME: Max Hedgehog
                  SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}

            - name: Notify Grafana of deploy for annotations
              uses: frankie567/grafana-annotation-action@v1.0.2
              with:
                  apiHost: https://metrics.posthog.net
                  apiToken: ${{ secrets.GRAFANA_API_KEY }}
                  text: Prod deployment of ${{ github.sha }} - ${{ github.event.head_commit.message }}
                  tags: deployment,github

    slack:
        name: Notify Slack of start of deploy
        runs-on: ubuntu-20.04
        if: github.repository == 'posthog/posthog'
        steps:
            - name: Notify Platform team on slack
              uses: rtCamp/action-slack-notify@v2
              env:
                  SLACK_CHANNEL: platform-bots
                  SLACK_COLOR: ${{ job.status }} # or a specific color like 'good' or '#ff00ff'
                  SLACK_ICON: https://github.com/posthog.png?size=48
                  SLACK_MESSAGE: 'Production Cloud Deploy Beginning :rocket: - ${{ github.event.head_commit.message }}'
                  SLACK_TITLE: Message
                  SLACK_USERNAME: Max Hedgehog
                  SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}

    sentry:
        name: Notify Sentry of a production release
        runs-on: ubuntu-20.04
        if: github.repository == 'PostHog/posthog'
        steps:
            - name: Checkout master
              uses: actions/checkout@v2
            - name: Notify Sentry
              uses: getsentry/action-release@v1
              env:
                  SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
                  SENTRY_ORG: posthog2
                  SENTRY_PROJECT: posthog
              with:
                  environment: production