chore: CICD Pipelines (#20)

.github/workflows/deploy_testnet.yml

@@ -0,0 +1,97 @@
+# The Licensed Work is (c) 2022 Sygma
+# SPDX-License-Identifier: LGPL-3.0-only
+
+name: spectre_testnet
+
+on:
+  push:
+    branches:
+      - main
+
+env:
+  ENVIRONMENT: 'TESTNET'
+  REGISTRY: 'ghcr.io'
+  TAG: 'latest'
+  AWS_TESTNET: '${{ secrets.AWS_ARN }}'
+
+jobs:
+  push:
+    name: push
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: checkout the source code
+        uses: actions/checkout@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: login to ghcr
+        id: ghcr
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GHCR_TOKEN }}
+
+      - name: build / tag / push docker image into ghcr
+        id: build-and-push-tag
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          push: true
+          tags: ${{ env.REGISTRY }}/${{ github.repository }}:${{ env.TAG }}
+
+          ######################## region 1 ########################
+  deploy:
+    needs: push
+    name: deploy
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        spectre_id: [0]
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: checkout the source code
+        uses: actions/checkout@v3
+
+      - name: checkout ecs repo
+        uses: actions/checkout@v3
+        with:
+          repository: sygmaprotocol/devops
+          token: ${{ secrets.GHCR_TOKEN }}
+
+      - name: render jinja2 templates to task definition json files
+        uses: cuchi/jinja2-action@v1.2.0
+        with:
+          template: 'spectre/spectre-node/ecs/task_definition-${{ env.ENVIRONMENT }}.j2'
+          output_file: 'spectre/spectre-node/ecs/task_definition-${{ matrix.spectre_id }}_${{ env.ENVIRONMENT }}.json'
+          data_format: json
+          variables: |
+            spectreId=${{ matrix.spectre_id }}
+            awsAccountId=${{ env.AWS_TESTNET }}
+            awsRegion=${{ secrets.AWS_REGION }}
+            awsEfs=${{ secrets.SPECTRE_EFS_TESTNET }}
+
+      - name: configure aws credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: arn:aws:iam::${{ env.AWS_TESTNET }}:role/github-actions-${{ env.ENVIRONMENT }}-chainbridge
+          aws-region: ${{ secrets.AWS_REGION }}
+          role-session-name: GithubActions
+
+      - name: deploy task definition
+        uses: aws-actions/amazon-ecs-deploy-task-definition@v1
+        with:
+          task-definition: 'spectre/spectre-node/ecs/task_definition-${{ matrix.spectre_id }}_${{ env.ENVIRONMENT }}.json'
+          service: 'spectre-${{ matrix.spectre_id }}-service-${{ env.ENVIRONMENT }}'
+          cluster: 'relayer-${{ env.ENVIRONMENT }}'
+          wait-for-service-stability: true