posthog/.github/workflows/pr-preview-deploy.yml at master · BuildPulseLLC/posthog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
# This workflow handles deploying a branch to the pull request cluster, for
# testing purposes. It is locked down so that it can only be used by people who
# are a member of the PostHog Github org

name: PR - Preview Deploy

on:
    workflow_call:

jobs:
    deploy_preview:
        name: Deploy preview environment
        runs-on: ubuntu-24.04

        permissions:
            id-token: write
            contents: read
            deployments: write

        steps:
            - name: Checkout
              uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2

            - name: Set up QEMU
              uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3

            - name: Set up Depot CLI
              uses: depot/setup-action@b0b1ea4f69e92ebf5dea3f8713a1b0c37b2126a5 # v1

            - name: Login to DockerHub
              uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
              with:
                  username: ${{ secrets.DOCKERHUB_USER }}
                  password: ${{ secrets.DOCKERHUB_TOKEN }}

            - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4
              with:
                  aws-region: us-east-1
                  role-to-assume: arn:aws:iam::169684386827:role/github-terraform-infra-role
                  role-duration-seconds: 3600

            - name: connect to tailscale
              uses: tailscale/github-action@8b804aa882ac3429b804a2a22f9803a2101a0db9 # 8b804aa882ac3429b804a2a22f9803a2101a0db9
              env:
                  TS_EXPERIMENT_OAUTH_AUTHKEY: true
              with:
                  version: 1.42.0
                  authkey: ${{ secrets.TAILSCALE_OAUTH_SECRET }}
                  args: --advertise-tags tag:github-runner

            - name: Login to Amazon ECR
              id: aws-ecr
              uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2

            - name: Build and push PR test image
              id: build
              uses: depot/build-push-action@636daae76684e38c301daa0c5eca1c095b24e780 # v1
              with:
                  context: .
                  buildx-fallback: false # the fallback is so slow it's better to just fail
                  push: true
                  tags: ${{ steps.aws-ecr.outputs.registry }}/pr-test:${{ github.event.pull_request.head.sha }}
                  platforms: linux/arm64,linux/amd64
                  build-args: COMMIT_HASH=${{ github.event.pull_request.head.sha }}

            - name: start deployment
              uses: bobheadxi/deployments@88ce5600046c82542f8246ac287d0a53c461bca3 # v1.4.0
              id: deployment
              with:
                  step: start
                  env: pr-${{ github.head_ref }}
                  ref: ${{ github.head_ref }}

            - name: Deploy hobby
              id: deploy_hobby
              run: |
                  aws eks update-kubeconfig --name "posthog-dev"
                  kubectl config set-cluster arn:aws:eks:us-east-1:169684386827:cluster/posthog-dev --server=https://eks-posthog-dev --tls-server-name 8BD6E1D2FEBDE47C8177E29CAC9E6C61.gr7.us-east-1.eks.amazonaws.com

                  export PR_NUM=${{ github.event.number }}
                  export BRANCH_NAME=${{ github.head_ref }}
                  export BRANCH_NAME_HASH=$(echo -n ${{ github.head_ref }} | md5sum | cut -c 1-8)
                  export HOSTNAME=pr-$PR_NUM-${BRANCH_NAME_HASH}
                  export HOSTNAME=${HOSTNAME:0:38}
                  export HOSTNAME=${HOSTNAME%%-}
                  export NAMESPACE="hobby"
                  export REGISTRY_URL=${{ steps.aws-ecr.outputs.registry }}/pr-test
                  export DOCKER_TAG=${{ github.event.pull_request.head.sha }}

                  envsubst < .github/pr-deploy/hobby.yaml.tmpl > .github/pr-deploy/hobby.yaml

                  #Clean and deploy
                  kubectl -n $NAMESPACE delete -f .github/pr-deploy/hobby.yaml || true
                  kubectl -n $NAMESPACE apply -f .github/pr-deploy/hobby.yaml

                  echo "url=$HOSTNAME.dev.posthog.dev" >> $GITHUB_OUTPUT

            - name: update deployment status
              uses: bobheadxi/deployments@648679e8e4915b27893bd7dbc35cb504dc915bc8 # v1
              with:
                  step: finish
                  status: ${{ job.status }}
                  env: ${{ steps.deployment.outputs.env }}
                  ref: ${{ github.head_ref }}
                  env_url: https://${{ steps.deploy_hobby.outputs.url }}
                  deployment_id: ${{ steps.deployment.outputs.deployment_id }}