DevOps 101: Module 3

# ============================================
# Bio Vanta – CI/CD Pipeline
# Build → Push to ECR → Deploy to EKS
# ============================================

name: CI/CD Pipeline - Build & Deploy to EKS

on:
  push:
    branches: [main]
  workflow_dispatch:

env:
  AWS_REGION: ${{ secrets.AWS_REGION }}
  ECR_REPOSITORY: ${{ secrets.ECR_REPOSITORY }}
  EKS_CLUSTER_NAME: ${{ secrets.EKS_CLUSTER_NAME }}
  NAMESPACE: bio-vanta

jobs:
  # ===========================================
  # Job 1: Build and Push Docker Image to ECR
  # ===========================================
  build-and-push:
    name: 🏗️ Build & Push to ECR
    runs-on: ubuntu-latest
    outputs:
      image_tag: ${{ steps.meta.outputs.image_tag }}
      image_uri: ${{ steps.meta.outputs.image_uri }}

    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🔐 Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ env.AWS_REGION }}

      - name: 🔑 Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: 🏷️ Generate image metadata
        id: meta
        run: |
          IMAGE_TAG="${{ github.sha }}"
          ECR_REGISTRY="${{ steps.login-ecr.outputs.registry }}"
          IMAGE_URI="${ECR_REGISTRY}/${{ env.ECR_REPOSITORY }}:${IMAGE_TAG}"
          echo "image_tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
          echo "image_uri=${IMAGE_URI}" >> $GITHUB_OUTPUT
          echo "📦 Image URI: ${IMAGE_URI}"

      - name: 🐳 Build Docker image
        run: |
          docker build -t ${{ steps.meta.outputs.image_uri }} .
          docker tag ${{ steps.meta.outputs.image_uri }} ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}:latest

      - name: 📤 Push Docker image to ECR
        run: |
          docker push ${{ steps.meta.outputs.image_uri }}
          docker push ${{ steps.login-ecr.outputs.registry }}/${{ env.ECR_REPOSITORY }}:latest
          echo "✅ Image pushed successfully!"

  # ===========================================
  # Job 2: Deploy to EKS
  # ===========================================
  deploy:
    name: 🚀 Deploy to EKS
    runs-on: ubuntu-latest
    needs: build-and-push

    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🔐 Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ env.AWS_REGION }}

      - name:  Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: 🏷️ Generate image metadata
        id: meta
        run: |
          IMAGE_TAG="${{ github.sha }}"
          ECR_REGISTRY="${{ steps.login-ecr.outputs.registry }}"
          IMAGE_URI="${ECR_REGISTRY}/${{ env.ECR_REPOSITORY }}:${IMAGE_TAG}"
          echo "image_uri=${IMAGE_URI}" >> $GITHUB_OUTPUT
          echo "📦 Image URI: ${IMAGE_URI}"

      - name: 🔧 Configure kubectl
        run: |
          aws eks update-kubeconfig --region ${{ env.AWS_REGION }} --name ${{ env.EKS_CLUSTER_NAME }}

      - name: 📦 Apply Kubernetes manifests
        run: |
          echo "🔄 Applying K8s manifests..."
          echo "🐳 Injecting image: ${{ steps.meta.outputs.image_uri }}"
          sed -i "s|IMAGE_PLACEHOLDER|${{ steps.meta.outputs.image_uri }}|g" k8s/deployment.yaml
          kubectl apply -f k8s/namespace.yaml
          kubectl apply -f k8s/deployment.yaml
          kubectl apply -f k8s/service.yaml
          kubectl apply -f k8s/hpa.yaml

      - name: ⏳ Wait for rollout
        run: |
          echo "⏳ Waiting for deployment rollout..."
          kubectl rollout status deployment/bio-vanta-web -n ${{ env.NAMESPACE }} --timeout=300s
          echo "✅ Deployment rollout complete!"

      - name: 📊 Show deployment status
        run: |
          echo "========================================"
          echo "📊 Deployment Status"
          echo "========================================"
          kubectl get deployments -n ${{ env.NAMESPACE }}
          echo ""
          echo "📦 Pods:"
          kubectl get pods -n ${{ env.NAMESPACE }}
          echo ""
          echo "🌐 Services:"
          kubectl get svc -n ${{ env.NAMESPACE }}
          echo ""
          echo "📈 HPA:"
          kubectl get hpa -n ${{ env.NAMESPACE }}