ci-cd-yt01.yml

# Deploys the created release to yt01
name: CI/CD YT01
run-name: CI/CD YT01 ${{ github.event.client_payload.version && format('({0})', github.event.client_payload.version) || '' }}

on:
  repository_dispatch:
    types: [release_created]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref_name }}

jobs:
  get-versions-from-github:
    name: Get Latest Deployed Version Info from GitHub
    uses: ./.github/workflows/workflow-get-latest-deployed-version-info-from-github.yml
    with:
      environment: yt01
    secrets:
      GH_TOKEN: ${{ secrets.RELEASE_VERSION_STORAGE_PAT }}

  check-for-changes:
    name: Check for changes
    needs: [get-versions-from-github]
    uses: ./.github/workflows/workflow-check-for-changes.yml
    with:
      infra_base_sha: ${{ needs.get-versions-from-github.outputs.infra_version_sha }}
      apps_base_sha: ${{ needs.get-versions-from-github.outputs.apps_version_sha }}

  deploy-infra:
    name: Deploy infra to yt01
    if: ${{ needs.check-for-changes.outputs.hasInfraChanges == 'true' }}
    needs: [check-for-changes]
    uses: ./.github/workflows/workflow-deploy-infra.yml
    secrets:
      AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
      AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
      AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      AZURE_SOURCE_KEY_VAULT_NAME: ${{ secrets.AZURE_SOURCE_KEY_VAULT_NAME }}
      AZURE_SOURCE_KEY_VAULT_SUBSCRIPTION_ID: ${{ secrets.AZURE_SOURCE_KEY_VAULT_SUBSCRIPTION_ID }}
      AZURE_SOURCE_KEY_VAULT_RESOURCE_GROUP: ${{ secrets.AZURE_SOURCE_KEY_VAULT_RESOURCE_GROUP }}
      AZURE_SOURCE_KEY_VAULT_SSH_JUMPER_SSH_PUBLIC_KEY: ${{ secrets.AZURE_SOURCE_KEY_VAULT_SSH_JUMPER_SSH_PUBLIC_KEY }}
    with:
      environment: yt01
      region: norwayeast
      version: ${{ github.event.client_payload.version }}
      ref: "refs/tags/v${{ github.event.client_payload.version }}"

  store-infra-version:
    name: Store Latest Deployed Infra Version as GitHub Variable
    needs: [deploy-infra]
    if: ${{ needs.deploy-infra.result == 'success' }}
    uses: ./.github/workflows/workflow-store-github-env-variable.yml
    with:
      variable_name: LATEST_DEPLOYED_INFRA_VERSION
      variable_value: ${{ github.event.client_payload.version }}
      environment: yt01
    secrets:
      GH_TOKEN: ${{ secrets.RELEASE_VERSION_STORAGE_PAT }}

  deploy-apps:
    name: Deploy apps to yt01
    needs: [check-for-changes, deploy-infra]
    if: ${{ always() && !failure() && !cancelled() && needs.check-for-changes.outputs.hasBackendChanges == 'true' }}
    uses: ./.github/workflows/workflow-deploy-apps.yml
    secrets:
      AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
      AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
      AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      # todo: consider resolving these in another way since they are created in the infra-step
      AZURE_RESOURCE_GROUP_NAME: ${{ secrets.AZURE_RESOURCE_GROUP_NAME }}
      AZURE_ENVIRONMENT_KEY_VAULT_NAME: ${{ secrets.AZURE_ENVIRONMENT_KEY_VAULT_NAME }}
      AZURE_CONTAINER_APP_ENVIRONMENT_NAME: ${{ secrets.AZURE_CONTAINER_APP_ENVIRONMENT_NAME }}
      AZURE_APP_INSIGHTS_CONNECTION_STRING: ${{ secrets.AZURE_APP_INSIGHTS_CONNECTION_STRING }}
      AZURE_APP_CONFIGURATION_NAME: ${{ secrets.AZURE_APP_CONFIGURATION_NAME }}
      AZURE_SERVICE_BUS_NAMESPACE_NAME: ${{ secrets.AZURE_SERVICE_BUS_NAMESPACE_NAME }}
    with:
      environment: yt01
      region: norwayeast
      version: ${{ github.event.client_payload.version }}
      runMigration: ${{ needs.check-for-changes.outputs.hasMigrationChanges == 'true' }}
      ref: "refs/tags/v${{ github.event.client_payload.version }}"
  store-apps-version:
    name: Store Latest Deployed Apps Version as GitHub Variable
    needs: [deploy-apps]
    if: ${{ always() && !failure() && needs.deploy-apps.outputs.deployment_executed == 'true' }}
    uses: ./.github/workflows/workflow-store-github-env-variable.yml
    with:
      variable_name: LATEST_DEPLOYED_APPS_VERSION
      variable_value: ${{ github.event.client_payload.version }}
      environment: yt01
    secrets:
      GH_TOKEN: ${{ secrets.RELEASE_VERSION_STORAGE_PAT }}

  run-e2e-tests:
    name: "Run K6 functional end-to-end tests"
    # we want the end-to-end tests to be dependent on deployment of infrastructure and apps, but if infrastructure is skipped, we still want to run the tests
    if: ${{ always() && !failure() && !cancelled() && needs.check-for-changes.outputs.hasBackendChanges == 'true' }}
    needs: [deploy-apps, check-for-changes]
    uses: ./.github/workflows/workflow-run-k6-tests.yml
    secrets:
      TOKEN_GENERATOR_USERNAME: ${{ secrets.TOKEN_GENERATOR_USERNAME }}
      TOKEN_GENERATOR_PASSWORD: ${{ secrets.TOKEN_GENERATOR_PASSWORD }}
    with:
      environment: yt01
      apiVersion: v1
      testSuitePath: tests/k6/suites/all-single-pass.js
      ref: "refs/tags/v${{ github.event.client_payload.version }}"
    permissions:
      checks: write
      pull-requests: write

  run-performance-tests:
    name: "Run K6 performance tests"
    needs: [run-e2e-tests]
    uses: ./.github/workflows/workflow-run-k6-performance.yml
    secrets:
      AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
      AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
    strategy:
      max-parallel: 4
      matrix:
        files:
          - tests/k6/tests/serviceowner/performance/serviceOwnerSearchWithThresholds.js
          - tests/k6/tests/serviceowner/performance/createDialogWithThresholds.js
          - tests/k6/tests/serviceowner/performance/createTransmissionsWithThresholds.js
          - tests/k6/tests/enduser/performance/enduserSearchWithThresholds.js
      fail-fast: false
    with:
      environment: yt01
      apiVersion: v1
      vus: 1
      duration: 60s
      testSuitePath: ${{ matrix.files }}
      parallelism: 1
      breakpoint: false
      abortOnFail: false
      numberOfEndUsers: 200
      ref: "refs/tags/v${{ github.event.client_payload.version }}"
    permissions:
      checks: write
      pull-requests: write
      id-token: write
      contents: read

  send-slack-message-on-failure:
    name: Send Slack message on failure
    needs: [deploy-infra, deploy-apps, run-e2e-tests, run-performance-tests]
    if: ${{ always() && failure() && !cancelled() }}
    uses: ./.github/workflows/workflow-send-ci-cd-status-slack-message.yml
    with:
      environment: yt01
      infra_status: ${{ needs.deploy-infra.result }}
      apps_status: ${{ needs.deploy-apps.result }}
      e2e_tests_status: ${{ needs.run-e2e-tests.result }}
      performance_tests_status: ${{ needs.run-performance-tests.result }}
    secrets:
      SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
      SLACK_CHANNEL_ID: ${{ secrets.SLACK_CHANNEL_ID_FOR_CI_CD_STATUS }}