Openshift4 Migration and CICD setup.

Author: pwei1018

.github/workflows/auto-analyze-cd.yml

@@ -15,7 +15,16 @@ on:
 
 jobs:
   auto-analyze-cd:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
+
+    defaults:
+      run:
+        shell: bash
+        working-directory: ./services/auto-analyze
+
+    env:
+      APP_NAME: "auto-analyze"
+
     if: github.repository == 'bcgov/namex'
     steps:
       - uses: actions/checkout@v2
@@ -28,19 +37,28 @@ jobs:
         run: |
           echo "TAG_NAME=dev" >> $GITHUB_ENV
 
-      - uses: pwei1018/bcrs-cd-action@latest
-        with:
-          WORKING_DIRECTORY: "./services/auto-analyze"
-          APP_NAME: "auto-analyze"
-          VAULTS: '[{\"vault\": \"namex\",\"application\": [\"auto-analyze\", \"postgres-namex\"]}]'
-          SKIP_OP: "false"
+      - name: Login Openshift
+        shell: bash
+        run: |
+          oc login --server=${{secrets.OPENSHIFT4_LOGIN_REGISTRY}} --token=${{secrets.OPENSHIFT4_SA_TOKEN}}
+
+      - name: CD Flow (build/update env/push/tag)
+        shell: bash
+        env:
           OP_PARAMETERS: ${{ secrets.OP_PARAMETERS }}
-          OPENSHIFT_LOGIN_REGISTRY: ${{ secrets.OPENSHIFT_LOGIN_REGISTRY }}
-          OPENSHIFT_DOCKER_REGISTRY: ${{ secrets.OPENSHIFT_DOCKER_REGISTRY }}
-          OPENSHIFT_SA_NAME: ${{ secrets.OPENSHIFT_SA_NAME }}
-          OPENSHIFT_SA_TOKEN: ${{ secrets.OPENSHIFT_SA_TOKEN }}
-          OPENSHIFT_REPOSITORY: ${{ secrets.OPENSHIFT_REPOSITORY }}
-          OPENSHIFT_REPOSITORY_DEPLOYMENT: ${{ secrets.OPENSHIFT_REPOSITORY }}
+          OPS_REPOSITORY: ${{ secrets.OPS_REPOSITORY }}
+          OPENSHIFT_DOCKER_REGISTRY: ${{ secrets.OPENSHIFT4_DOCKER_REGISTRY }}
+          OPENSHIFT_SA_NAME: ${{ secrets.OPENSHIFT4_SA_NAME }}
+          OPENSHIFT_SA_TOKEN: ${{ secrets.OPENSHIFT4_SA_TOKEN }}
+          OPENSHIFT_REPOSITORY: ${{ secrets.OPENSHIFT4_REPOSITORY }}
+          TAG_NAME: ${{ env.TAG_NAME }}
+        run: |
+          make cd
+
+      - name: Watch new rollout (trigger by image change in Openshift)
+        shell: bash
+        run: |
+          oc rollout status dc/${{ env.APP_NAME }}-${{ env.TAG_NAME }} -n ${{ secrets.OPENSHIFT4_REPOSITORY_DEPLOYMENT }}-${{ env.TAG_NAME }} -w
 
       - name: Rocket.Chat Notification
         uses: RocketChat/Rocket.Chat.GitHub.Action.Notification@master

.github/workflows/auto-analyze-ci.yml

@@ -16,14 +16,21 @@ jobs:
       DATABASE_HOST: localhost
       DATABASE_PASSWORD: postgres
 
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
+    defaults:
+      run:
+        shell: bash
+        working-directory: ./services/auto-analyze
+
+    if: github.repository == 'bcgov/namex'
+
     strategy:
       matrix:
         python-version: [3.8]
 
     services:
       postgres:
-        image: postgres:11
+        image: postgres:12
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
@@ -40,21 +47,24 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies
-        working-directory: ./services/auto-analyze
         run: |
-          python -m pip install --upgrade pip
-          pip install -r requirements.txt
-          pip install -r requirements/dev.txt
+          make setup
       - name: Lint with pylint
-        working-directory: ./services/auto-analyze
         run: |
-          pylint --rcfile=setup.cfg src
+          make pylint
       - name: Lint with flake8
-        working-directory: ./services/auto-analyze
         run: |
-          flake8 src tests
+          make flake8
       - name: Test with pytest
-        working-directory: ./services/auto-analyze
         run: |
-          pip install .
-          pytest
+          make test
+      #- name: Upload coverage to Codecov
+      #  uses: codecov/codecov-action@v1
+      #  with:
+      #    file: ./services/auto-analyze/coverage.xml
+      #    flags: autoanalyze
+      #    name: codecov-auto-analyze
+      #    fail_ci_if_error: true
+      - name: build to check strictness
+        run: |
+          make build-nc