update-cmms.yml

# Copyright 2023 The Cross-Media Measurement Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

name: Update CMMS

on:
  workflow_call:
    inputs:
      environment:
        type: string
        required: true
      run-tests:
        description: "Run tests"
        type: boolean
        default: true
      apply:
        description: "Apply the new configuration"
        type: boolean
        required: true
  workflow_dispatch:
    inputs:
      environment:
        description: "GitHub-managed environment"
        required: true
        type: choice
        options:
        - dev
        - qa
        - head
      run-tests:
        description: "Run tests"
        type: boolean
        default: true
      apply:
        description: "Apply the new configuration"
        type: boolean
        default: false
      existing-image-tag:
        description: "Tag of existing published images (skips push)"
        type: string

jobs:
  publish-images:
    uses: ./.github/workflows/maybe-push-images.yml
    secrets: inherit
    with:
      existing-image-tag: ${{ inputs.existing-image-tag }}

  scan-images:
    uses: ./.github/workflows/scan-images.yml
    needs: [publish-images]
    if: inputs.existing-image-tag == ''
    with:
      container-registry: ghcr.io
      image-repo-prefix: ${{ github.repository_owner }}
      image-tag: ${{ needs.publish-images.outputs.image-tag }}

  terraform:
    uses: ./.github/workflows/terraform-cmms.yml
    secrets: inherit
    with:
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  update-kingdom:
    uses: ./.github/workflows/configure-kingdom.yml
    needs: [publish-images, terraform]
    secrets: inherit
    with:
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  update-aggregator-duchy:
    uses: ./.github/workflows/configure-duchy.yml
    needs: [publish-images, terraform]
    secrets: inherit
    with:
      duchy-name: aggregator
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  update-worker1-duchy:
    uses: ./.github/workflows/configure-duchy.yml
    needs: [publish-images, terraform]
    secrets: inherit
    with:
      duchy-name: worker1
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  update-worker2-duchy:
    uses: ./.github/workflows/configure-aws-duchy.yml
    needs: [publish-images, terraform]
    secrets: inherit
    with:
      duchy-name: worker2
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  update-simulators:
    uses: ./.github/workflows/configure-simulators.yml
    needs: [publish-images, terraform]
    secrets: inherit
    with:
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  # Update the Reporting system.
  #
  # This isn't technically part of the CMMS, but we do it here for simplicity.
  update-reporting:
    uses: ./.github/workflows/configure-reporting.yml
    secrets: inherit
    needs: [publish-images, terraform]
    with:
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  update-reporting-v2:
    uses: ./.github/workflows/configure-reporting-v2.yml
    secrets: inherit
    needs: [ publish-images, terraform ]
    with:
      image-tag: ${{ needs.publish-images.outputs.image-tag }}
      environment: ${{ inputs.environment }}
      apply: ${{ inputs.apply }}

  run-tests:
    if: inputs.run-tests
    needs: [
      update-kingdom,
      update-aggregator-duchy,
      update-worker1-duchy,
      update-worker2-duchy,
      update-simulators,
    ]
    uses: ./.github/workflows/run-k8s-tests.yml
    secrets: inherit
    with:
      environment: ${{ inputs.environment }}