rollout.yml

name: Rollout to the instances
run-name: Rollout of ${{ inputs.config_tag_name }} to ${{ inputs.instance_group }}

on:
  workflow_dispatch:
    inputs:
      config_tag_name:
        description: 'Tag from the dof_app_deploy'
        required: true
      instance_group:
        description: "All Instances, Instance group or Host"
        required: true
        default: all

jobs:
  approve_ref:
    environment: approve_ref
    runs-on: ubuntu-latest
    steps:
      - run: echo "Version ${{ github.event.inputs.config_tag_name }}"
      - run: echo "Target(s) ${{ github.event.inputs.instance_group }}"
      - run: echo "Workflow is triggered by ${{ github.ref_type }} ${{ github.ref_name }}"
      
  ref-audit:
    if: ${{ !failure() }}
    needs:
      - approve_prod_stage_2
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: ref-audit
      host_group: dbc
      host_stage: reference
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}
      
  ref-brb:
    needs:
      - approve_ref
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: ref-brb
      host_group: brb
      host_stage: reference
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}
      
  ref-dbc:
    needs:
      - approve_ref
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: ref-dbc
      host_group: dbc
      host_stage: reference
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}
      
  ref-nbc:
    needs:
      - approve_ref
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: ref-nbc
      host_group: nbc
      host_stage: reference
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}

  ref-thr:
    needs:
     - approve_ref
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: ref-thr
      host_group: thr
      host_stage: reference
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}

  approve_prod_stage_1:
    if: ${{ !failure() }}
    needs:
      - ref-brb
      - ref-dbc
      - ref-nbc
      - ref-thr
    environment: approve_prod_stage_1
    runs-on: ubuntu-latest
    steps:
      - run: echo "Version ${{ github.event.inputs.config_tag_name }}"
      - run: echo "Target(s) ${{ github.event.inputs.instance_group }}"
      - run: echo "Workflow is triggerd by ${{ github.ref_type }} ${{ github.ref_name }}"
      
  prod-dbc:
    if: ${{ !failure() }}
    needs:
      - approve_prod_stage_1
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: prod-dbc
      host_group: dbc
      host_stage: production
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}
      
  approve_prod_stage_2:
    if: ${{ !failure() }}
    needs:
      - prod-dbc
    environment: approve_prod_stage_2
    runs-on: ubuntu-latest
    steps:
      - run: echo "Version ${{ github.event.inputs.config_tag_name }}"
      - run: echo "Target(s) ${{ github.event.inputs.instance_group }}"
      - run: echo "Workflow is triggerd by ${{ github.ref_type }} ${{ github.ref_name }}"
      
  prod-brb:
    if: ${{ !failure() }}
    needs:
      - approve_prod_stage_2
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: prod-brb
      host_group: brb
      host_stage: production
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}
  
  prod-nbc:
    if: ${{ !failure() }}
    needs:
      - approve_prod_stage_2
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: prod-nbc
      host_group: nbc
      host_stage: production
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}
      
  prod-thr:
    if: ${{ !failure() }}
    needs:
      - approve_prod_stage_2
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: prod-thr
      host_group: thr
      host_stage: production
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}


  # disable rollout to loadtest instance until it is restructered and fixed in OPS-5141
  # dev-loadtest-01:
  #   uses: ./.github/workflows/host.yml
  #   with:
  #     cfg_version: ${{ github.event.inputs.config_tag_name }}
  #     host_name: dev-loadtest-01
  #     host_group: dbc
  #     host_stage: loadtest
  #     execute_group: ${{ github.event.inputs.instance_group }}
  #   secrets:
  #     token: ${{ secrets.GITHUB_TOKEN }}
  #     ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
  #     KUBECONFIG: ${{ secrets.KUBECONFIG }}
  #     RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}

  infra-dbildungscloud-01:
    needs:
      - approve_ref  
    uses: ./.github/workflows/host.yml
    with:
      cfg_version: ${{ github.event.inputs.config_tag_name }}
      host_name: infra.dbildungscloud-01
      host_group: dbc
      host_stage: infra
      execute_group: ${{ github.event.inputs.instance_group }}
    secrets:
      token: ${{ secrets.GITHUB_TOKEN }}
      ONEPASSWORD_VAULT: ${{ secrets.ONEPASSWORD_VAULT }}
      KUBECONFIG: ${{ secrets.KUBECONFIG }}
      RC_WEBHOOK:  ${{ secrets.RC_WEBHOOK }}