Merge branch 'release-71' into ea/deployment-testing-off-71 #1272
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| branches: | |
| - '*' | |
| - '**/*' | |
| name: Precompile any assets that have changed and push them to S3 | |
| concurrency: | |
| group: ${{ github.ref }}-asset-compilation | |
| cancel-in-progress: true | |
| jobs: | |
| compile: | |
| name: Compile | |
| strategy: | |
| matrix: | |
| client_group: | |
| - gha_staging_load_1 | |
| - gha_staging_load_2 | |
| - gha_staging_load_3 | |
| - gha_staging_load_4 | |
| - gha_staging_load_5 | |
| - gha_staging_load_6 | |
| - gha_staging_load_7 | |
| - gha_staging_load_8 | |
| - gha_production_load_1 | |
| - gha_production_load_2 | |
| - gha_production_load_3 | |
| - gha_production_load_4 | |
| # - gha_production_load_5 | |
| - gha_production_load_6 | |
| runs-on: ubuntu-22.04 | |
| container: ruby:3.1.6-alpine3.20 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Install GNU tar (required by cache step and checksumming) | |
| run: | | |
| apk add --no-cache tar | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v1-node16 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: us-east-1 | |
| - name: Set up dependencies | |
| env: | |
| DATABASE_APP_DB_TEST: boston_hmis_test | |
| WAREHOUSE_DATABASE_DB_TEST: warehouse_test | |
| HEALTH_DATABASE_DB_TEST: health_test | |
| DATABASE_DB_TEST: cas_test | |
| REPORTING_DATABASE_DB_TEST: reporting_test | |
| run: | | |
| apk add --no-cache $(cat .github/dependencies.txt) | |
| echo "postgres:5432:*:postgres:postgres" > ~/.pgpass | |
| chmod 600 ~/.pgpass | |
| # According to https://www.jessesquires.com/blog/2021/08/23/caching-bundler-on-github-actions/ | |
| # this is fragile and failure prone, but the step they recommend using instead (ruby/ruby-setup) | |
| # isn't supported on Alpine. | |
| - name: cache gems | |
| uses: actions/cache@v4 | |
| id: gemcache | |
| with: | |
| path: | | |
| vendor/bundle | |
| /usr/local/bundle/ | |
| key: ${{ runner.os }}-gemcache-${{ hashFiles('**/Gemfile.lock') }}-${{ hashFiles('**/.ruby-version') }} | |
| # restore-keys: | | |
| # ${{ runner.os }}-gem-bundler- | |
| # - name: Ruby | |
| # uses: ruby/setup-ruby@v1 | |
| # with: | |
| # bundler-cache: true | |
| - name: Install gems | |
| if: always() | |
| run: | | |
| gem install bundler --version=2.5.17 | |
| bundle config set --local without 'production staging development' | |
| bundle install --jobs 10 --retry 3 | |
| - name: Cache Node.js modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: node_modules | |
| key: ${{ runner.os }}-node_modules-${{ hashFiles('**/yarn.lock') }} | |
| - name: Install Node.js modules | |
| run: yarn install --frozen-lockfile | |
| - name: Generate checksum and compile | |
| env: | |
| SECRETS_YML_SECRET_ARN: ${{ secrets.SECRETS_YML_SECRET_ARN }} | |
| DATABASE_ADAPTER: postgresql | |
| DATABASE_HOST: postgres | |
| DATABASE_PASS: postgres | |
| DATABASE_USER: postgres | |
| DEFAULT_FROM: [email protected] | |
| ENCRYPTION_KEY: strongEncryptionstrongEncryptionstrongEncryption | |
| DATABASE_DB_TEST: boston_cas_test | |
| HOSTNAME: openpath.host | |
| PORT: 80 | |
| run: | | |
| DEPLOY_PROTECT_SECRETS=true EXCEPTION_WEBHOOK_CHANNEL_OVERRIDE=gr-op-gha-except bundle exec bin/compile_assets.rb ${{ matrix.client_group }} |