staging.yml

name: Staging deployment

on:
    workflow_dispatch:
    push:
        branches:
            - main

concurrency:
    group: ${{ github.workflow }}
    cancel-in-progress: false

env:
    ENVIRONMENT: staging
    PROJECT: cloud
    APPLICATION: cloud
    DECLARATIVE_OWNER: appwrite-labs
    DECLARATIVE_REPOSITORY: application-configuration
    DECLARATIVE_ALIAS: cloud-console
    IMAGE_NAME: appwrite/console-cloud-stage
    TAG: ${{ github.sha }}

jobs:
    build:
        environment: staging
        runs-on: ubuntu-latest
        steps:
            - name: Checkout the repo
              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
            - name: Set up QEMU
              uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
            - name: Log in to Docker Hub
              uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
              with:
                  username: ${{ vars.DOCKERHUB_USERNAME }}
                  password: ${{ secrets.DOCKERHUB_TOKEN }}
            - name: Build and push Docker image
              uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
              with:
                  context: .
                  push: true
                  platforms: linux/amd64,linux/arm64
                  tags: ${{ env.IMAGE_NAME }}:${{ env.TAG }}
                  build-args: |
                      "PUBLIC_CONSOLE_MODE=cloud"
                      "PUBLIC_CONSOLE_FEATURE_FLAGS="
                      "PUBLIC_APPWRITE_MULTI_REGION=true"
                      "PUBLIC_CONSOLE_MOCK_AI_SUGGESTIONS=false"
                      "PUBLIC_GROWTH_ENDPOINT=${{ vars.VITE_APPWRITE_GROWTH_ENDPOINT }}"
                      "PUBLIC_STRIPE_KEY=${{ secrets.PUBLIC_STRIPE_KEY_STAGE }}"
                      "PUBLIC_CONSOLE_FINGERPRINT_KEY=${{ secrets.PUBLIC_CONSOLE_FINGERPRINT_KEY_STAGE }}"

    deploy:
        needs: build
        runs-on: ubuntu-latest
        # Shared across the staging and production workflows so their deploy
        # jobs never push to application-configuration at the same time.
        concurrency:
            group: declarative-deploy
            cancel-in-progress: false
        steps:
            - name: Get token for ${{ env.DECLARATIVE_REPOSITORY }}
              id: app-token
              uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
              with:
                  app-id: ${{ vars.DECLARATIVE_DEPLOYMENT_GITHUB_APP_ID }}
                  private-key: ${{ secrets.DECLARATIVE_DEPLOYMENT_GITHUB_APP_PRIVATE_KEY }}
                  owner: ${{ env.DECLARATIVE_OWNER }}
                  repositories: ${{ env.DECLARATIVE_REPOSITORY }}

            - name: Checkout ${{ env.DECLARATIVE_REPOSITORY }}
              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
              with:
                  repository: ${{ env.DECLARATIVE_OWNER }}/${{ env.DECLARATIVE_REPOSITORY }}
                  token: ${{ steps.app-token.outputs.token }}
                  # Don't leave the write-capable token in .git/config for later steps.
                  persist-credentials: false

            - name: Update image tag
              run: yq -i '.[strenv(DECLARATIVE_ALIAS)].image.tag = strenv(TAG)' ${{ env.PROJECT }}/${{ env.ENVIRONMENT }}/${{ env.APPLICATION }}/default.yaml

            - name: Commit and push
              env:
                  GH_TOKEN: ${{ steps.app-token.outputs.token }}
              run: |
                  git config user.name "github-actions[bot]"
                  git config user.email "github-actions[bot]@users.noreply.github.com"
                  git add ${{ env.PROJECT }}/${{ env.ENVIRONMENT }}/${{ env.APPLICATION }}/default.yaml
                  if git diff --cached --quiet; then
                    echo "No changes to commit"
                  else
                    git commit -m "chore(${{ env.ENVIRONMENT }}): console image tag to ${{ env.TAG }}"
                    git push "https://x-access-token:${GH_TOKEN}@github.com/${{ env.DECLARATIVE_OWNER }}/${{ env.DECLARATIVE_REPOSITORY }}.git" HEAD:main
                  fi