deploy.devnet.yml

---
name: DevNet Workflow

on:  # yamllint disable-line rule:truthy
  workflow_dispatch:
  push:
    branches:
      - develop

permissions:
  id-token: write
  contents: read
  security-events: write

jobs:
  snyk:
    name: Snyk and Publish
    uses: ./.github/workflows/security.yml
    secrets:
      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
      SNYK_ORG: ${{ secrets.SNYK_ORG }}

  build:
    name: Build
    uses: ./.github/workflows/build.yml

  test:
    name: Test
    uses: ./.github/workflows/test.yml
    needs: build

  container_image_build:
    name: Build/Push Container Image
    runs-on: ubuntu-latest
    environment: devnet
    needs: build
    steps:
      - name: Checkout repo
        uses: actions/checkout@v3

      - name: Download Polygon Edge Artifact
        uses: actions/download-artifact@v3
        with:
          name: exzocoin
      - run: tar -xvzf exzocoin.tar.gz

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v2

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v1

      - name: Build, tag, and push docker image to Amazon ECR
        env:
          REGISTRY: ${{ steps.login-ecr.outputs.registry }}
          REPOSITORY: library/exzocoin
          IMAGE_TAG: ${{ github.sha }}
        run: |
          docker build -t $REGISTRY/$REPOSITORY:devnet -t $REGISTRY/$REPOSITORY:$IMAGE_TAG -f Dockerfile.release .
          docker push $REGISTRY/$REPOSITORY:$IMAGE_TAG
          docker push $REGISTRY/$REPOSITORY:devnet

  deploy_devnet:
    name: Deploy DevNet
    needs: build
    concurrency: deploy_devnet
    environment:
      name: devnet
      url: https://rpc.us-east-1.testing.psdk.io/
    runs-on: ubuntu-latest
    steps:
      - name: Download Polygon Edge Artifact
        uses: actions/download-artifact@v3
        with:
          name: exzocoin

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Notify Slack
        uses: slackapi/slack-github-action@v1.22.0
        if: false
        continue-on-error: true
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_DEPLOYMENT_WEBHOOK_URL }}
          SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
        with:
          payload: |
            {
              "blocks": [
                {
                  "type": "header",
                  "text": {
                    "type": "plain_text",
                    "text": "Devnet Deployment - Started"
                  }
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "Devnet Deployment Status: ${{ job.status }}\n<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|Job Status>"
                  }
                }
              ]
            }

      - name: Publish Binary package to S3
        run: |
          aws s3 cp ./exzocoin.tar.gz s3://${{ secrets.POLYGON_EDGE_ARTIFACT_BUCKET }} --metadata "{\"commit_sha\":\"${GITHUB_SHA}\"}"

      - name: Deploy DevNet
        continue-on-error: true
        env:
          VALIDATOR_ASGS: ${{ secrets.VALIDATOR_ASGS }}
        run: |
          # Parallel deploy all nodes, relying on ALB Health Checks
          echo "Deploying new Devnet"
          echo "--------------------"

          # Should finish relatively fast. Can add a check to guard against pre-mature cycle
          echo "Cleaning up the data directories and stopping exzocoin Devnet service..."
          aws ssm send-command --document-name exzocoin-validators-maintenance-clean-data --targets Key=tag:aws:autoscaling:groupName,Values=$VALIDATOR_ASGS >> /dev/null

          for vasg in ${VALIDATOR_ASGS//,/ }
          do
              instance_id=$(aws autoscaling describe-auto-scaling-groups --auto-scaling-group-names  $vasg --query 'AutoScalingGroups[0].Instances[0].InstanceId' --output text)
              echo "Draining $instance_id in $vasg"
              irid=$(aws autoscaling start-instance-refresh --auto-scaling-group-name $vasg --query InstanceRefreshId --output text)
          done

          echo "Waiting for instance to clear health check..."
          pending=true

          until [ $pending != true ]
          do
              pending=false
              sleep 10
              for vasg in ${VALIDATOR_ASGS//,/ }
              do
                  refresh_status=$(aws autoscaling describe-instance-refreshes --auto-scaling-group-name $vasg --query 'InstanceRefreshes[0].Status' --output text)
                  echo "ASG: $vasg"
                  echo "Status: $refresh_status"

                  if [ "$refresh_status" == "Successful" ]
                  then
                      VALIDATOR_ASGS=${VALIDATOR_ASGS//$vasg/}
                      instance_id=$(aws autoscaling describe-auto-scaling-groups --auto-scaling-group-names $vasg --query 'AutoScalingGroups[0].Instances[0].InstanceId' --output text)

                      echo "-------------------------------------------------"
                      echo "New validator: $instance_id successfully deployed"
                      echo "-------------------------------------------------"
                  fi
                  pending=true
              done
              echo ""
          done
          echo "Devnet Deployment Complete"

      - name: Notify Slack - Failures
        uses: slackapi/slack-github-action@v1.22.0
        if: ${{ job.status != 'success' }}
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_DEPLOYMENT_WEBHOOK_URL }}
          SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK
        with:
          payload: |
            {
              "blocks": [
                {
                  "type": "header",
                  "text": {
                    "type": "plain_text",
                    "text": "Devnet Deployment - Failed"
                  }
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|Job Status>"
                  }
                },
                {
                  "type": "divider"
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "Commit SHA: <${{ github.server_url }}/${{ github.repository }}/tree/${{ github.sha }}|${{ github.sha }}>\nBranch: <${{ github.server_url }}/${{ github.repository }}/tree/${{ github.ref_name }}|${{ github.ref_name}}>"
                  }
                }
              ]
            }

  pandoras_box_eoa:
    uses: ./.github/workflows/pandoras_box.yml
    name: Pandora's Box EOA
    needs: deploy_devnet
    secrets:
      SLACK_PERFORMANCE_WEBHOOK_URL: ${{ secrets.SLACK_PERFORMANCE_WEBHOOK_URL }}
      PANDORAS_TARGET: ${{ secrets.PANDORAS_TARGET }}
      PANDORAS_MNEMONIC: ${{ secrets.PANDORAS_MNEMONIC }}
    with:
      runner: devnet
      environment: devnet
      transaction_batch: '200'
      transaction_count: '10000'
      mode: EOA
  pandoras_box_erc20:
    uses: ./.github/workflows/pandoras_box.yml
    name: Pandora's Box ERC20
    needs: deploy_devnet
    secrets:
      SLACK_PERFORMANCE_WEBHOOK_URL: ${{ secrets.SLACK_PERFORMANCE_WEBHOOK_URL }}
      PANDORAS_TARGET: ${{ secrets.PANDORAS_TARGET }}
      PANDORAS_MNEMONIC: ${{ secrets.PANDORAS_MNEMONIC }}
    with:
      runner: devnet
      environment: devnet
      transaction_batch: '200'
      transaction_count: '10000'
      mode: ERC20
  pandoras_box_erc721:
    uses: ./.github/workflows/pandoras_box.yml
    name: Pandora's Box ERC721
    needs: deploy_devnet
    secrets:
      SLACK_PERFORMANCE_WEBHOOK_URL: ${{ secrets.SLACK_PERFORMANCE_WEBHOOK_URL }}
      PANDORAS_TARGET: ${{ secrets.PANDORAS_TARGET }}
      PANDORAS_MNEMONIC: ${{ secrets.PANDORAS_MNEMONIC }}
    with:
      runner: devnet
      environment: devnet
      transaction_batch: '200'
      transaction_count: '10000'
      mode: ERC721