cdk_release_code.yml

name: cdk release code

on:
  workflow_call:
    inputs:
      BRANCH_NAME:
        required: true
        type: string
      STACK_NAME:
        required: true
        type: string
      AWS_ENVIRONMENT:
        required: true
        type: string
      VERSION_NUMBER:
        required: true
        type: string
      COMMIT_ID:
        required: true
        type: string
      STACK_MODE:
        required: false
        type: string
        default: "stateless"
      APP_NAME:
        required: false
        type: string
        default: "PsuApiApp"
      TRUST_STORE_VERSION:
        type: string
        required: false
        default: "none"
      ENABLE_MUTUAL_TLS:
        type: boolean
        required: false
        default: false
      ENABLE_SPLUNK:
        type: boolean
        required: false
        default: false
      LOG_RETENTION_IN_DAYS:
        required: true
        type: string
      LOG_LEVEL:
        type: string
        required: false
        default: "DEBUG"
      IS_PULL_REQUEST:
        type: boolean
        required: true
      TRUSTSTORE_FILE:
        type: string
        required: false
        default: ""
      FORWARD_CSOC_LOGS:
        type: boolean
        required: false
        default: false
      DEPLOY_CHECK_PRESCRIPTION_STATUS_UPDATE:
        type: boolean
        required: false
        default: false
      EXPOSE_GET_STATUS_UPDATES:
        type: boolean
        required: false
        default: false
      SAM_STACK_NAME:
        type: string
        required: false
        default: ""
      ENABLE_POST_DATED_NOTIFICATIONS:
        type: boolean
        required: false
        default: false
      REQUIRE_APPLICATION_NAME:
        type: boolean
        required: false
        default: false
      ENABLE_BACKUP:
        type: boolean
        required: true
      ENABLE_DYNAMODB_AUTO_SCALING:
        type: boolean
        required: false
        default: false
      ENABLED_SITE_ODS_CODES:
        type: string
        required: false
        default: " "
      ENABLED_SYSTEMS:
        type: string
        required: false
        default: " "
      ENABLED_SUPPLIER_APPLICATION_IDS:
        type: string
        required: false
        default: " "
      BLOCKED_SITE_ODS_CODES:
        type: string
        required: false
        default: " "
      NOTIFY_ROUTING_PLAN_ID:
        type: string
        required: false
        default: " "
      NOTIFY_API_BASE_URL:
        type: string
        required: false
        default: " "
      ENABLE_NOTIFICATIONS_EXTERNAL:
        type: boolean
        required: false
        default: false
      ENABLE_NOTIFICATIONS_INTERNAL:
        type: boolean
        required: false
        default: false
      TEST_PRESCRIPTIONS_1:
        type: string
        required: false
        default: "PLACEHOLDER"
      TEST_PRESCRIPTIONS_2:
        type: string
        required: false
        default: "PLACEHOLDER"
      TEST_PRESCRIPTIONS_3:
        type: string
        required: false
        default: "PLACEHOLDER"
      TEST_PRESCRIPTIONS_4:
        type: string
        required: false
        default: "PLACEHOLDER"
      RUN_DIFF:
        type: boolean
        required: false
        default: false
      pinned_image:
        required: true
        type: string
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE:
        required: true
permissions: {}

jobs:
  release_code:
    runs-on: ubuntu-22.04
    environment: ${{ inputs.AWS_ENVIRONMENT }}
    container:
      image: ${{ inputs.pinned_image }}
      options: --user 1001:1001 --group-add 128
    defaults:
      run:
        shell: bash
    name: deploy cdk app ${{ inputs.APP_NAME }} ${{ inputs.STACK_MODE }}
    env:
      CDK_APP_NAME: "${{ inputs.APP_NAME }}"
      CDK_CONFIG_stackMode: "${{ inputs.STACK_MODE }}"
      CDK_CONFIG_stackName: "${{ inputs.STACK_NAME }}"
      CDK_CONFIG_versionNumber: "${{ inputs.VERSION_NUMBER }}"
      CDK_CONFIG_commitId: "${{ inputs.COMMIT_ID }}"
      CDK_CONFIG_isPullRequest: "${{ inputs.IS_PULL_REQUEST }}"
      CDK_CONFIG_environment: "${{ inputs.AWS_ENVIRONMENT }}"
      CDK_CONFIG_logRetentionInDays: "${{ inputs.LOG_RETENTION_IN_DAYS }}"
      CDK_CONFIG_logLevel: "${{ inputs.LOG_LEVEL }}"
      CDK_CONFIG_trustStoreFile: "${{ inputs.TRUSTSTORE_FILE }}"
      CDK_CONFIG_trustStoreVersion: "${{ inputs.TRUST_STORE_VERSION }}"
      CDK_CONFIG_enableMutualTls: "${{ inputs.ENABLE_MUTUAL_TLS }}"
      CDK_CONFIG_enableSplunk: "${{ inputs.ENABLE_SPLUNK }}"
      CDK_CONFIG_forwardCsocLogs: "${{ inputs.FORWARD_CSOC_LOGS }}"
      CDK_CONFIG_deployCheckPrescriptionStatusUpdate: "${{ inputs.DEPLOY_CHECK_PRESCRIPTION_STATUS_UPDATE }}"
      CDK_CONFIG_exposeGetStatusUpdates: "${{ inputs.EXPOSE_GET_STATUS_UPDATES }}"
      CDK_CONFIG_samStackName: "${{ inputs.SAM_STACK_NAME }}"
      CDK_CONFIG_enablePostDatedNotifications: "${{ inputs.ENABLE_POST_DATED_NOTIFICATIONS }}"
      CDK_CONFIG_requireApplicationName: "${{ inputs.REQUIRE_APPLICATION_NAME }}"
      CDK_CONFIG_enableBackup: "${{ inputs.ENABLE_BACKUP }}"
      CDK_CONFIG_enableDynamoDBAutoScaling: "${{ inputs.ENABLE_DYNAMODB_AUTO_SCALING }}"
      CDK_CONFIG_enabledSiteOdsCodes: "${{ inputs.ENABLED_SITE_ODS_CODES }}"
      CDK_CONFIG_enabledSystems: "${{ inputs.ENABLED_SYSTEMS }}"
      CDK_CONFIG_enabledSupplierApplicationIds: "${{ inputs.ENABLED_SUPPLIER_APPLICATION_IDS }}"
      CDK_CONFIG_blockedSiteOdsCodes: "${{ inputs.BLOCKED_SITE_ODS_CODES }}"
      CDK_CONFIG_notifyRoutingPlanId: "${{ inputs.NOTIFY_ROUTING_PLAN_ID }}"
      CDK_CONFIG_notifyApiBaseUrl: "${{ inputs.NOTIFY_API_BASE_URL }}"
      CDK_CONFIG_enableNotificationsExternal: "${{ inputs.ENABLE_NOTIFICATIONS_EXTERNAL }}"
      CDK_CONFIG_enableNotificationsInternal: "${{ inputs.ENABLE_NOTIFICATIONS_INTERNAL }}"
      CDK_CONFIG_testPrescriptions1: "${{ inputs.TEST_PRESCRIPTIONS_1 }}"
      CDK_CONFIG_testPrescriptions2: "${{ inputs.TEST_PRESCRIPTIONS_2 }}"
      CDK_CONFIG_testPrescriptions3: "${{ inputs.TEST_PRESCRIPTIONS_3 }}"
      CDK_CONFIG_testPrescriptions4: "${{ inputs.TEST_PRESCRIPTIONS_4 }}"
      REQUIRE_APPROVAL: "never"
    permissions:
      id-token: write
      contents: read

    steps:
      - name: copy .tool-versions
        run: |
          cp /home/vscode/.tool-versions "$HOME/.tool-versions"

      - name: build_artifact download
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          name: build_artifact

      - name: extract build_artifact
        run: tar -xf artifact.tar

      - name: install dependencies
        uses: ./.github/actions/install_dependencies
        with:
          npm-required: false
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Configure AWS Credentials
        id: connect-aws-deploy
        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7
        with:
          aws-region: eu-west-2
          role-to-assume: ${{ secrets.CLOUD_FORMATION_DEPLOY_ROLE }}
          role-session-name: psu-deployment

      - name: Show diff
        if: ${{ inputs.RUN_DIFF }}
        run: npm run cdk-diff --workspace packages/cdk

      - name: Deploy AWS infrastructure and code
        run: npm run cdk-deploy --workspace packages/cdk
        shell: bash

# later, there will be API deployment steps c.f. https://github.com/NHSDigital/electronic-prescription-service-clinical-prescription-tracker/blob/main/.github/workflows/cdk_release_code.yml