production.yml

# Deploy to Production

name: production

on:
  workflow_dispatch:
    inputs:
      git-ref:
        description: 'Git Ref to Deploy (hash: 40 hex digits)'
        required: true
      option:
        description: use --override to allow any ref
        required: false
        default: ''
jobs:
  build:
    name: Build for Production
    runs-on: ubuntu-latest
    steps:
      - name: Clone Repository (Custom Ref)
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.inputs.git-ref }}
          lfs: false
      - name: Calculate Tag Name
        id: tagname
        run: >
          echo "::set-output name=tag::$(env TZ=UTC date +'production/%Y-%m-%d-%H%Mz')"
      - name: Set up JDK
        uses: actions/setup-java@v4
        with:
          java-version: 11
          distribution: 'temurin'
      - name: Cache local Maven repository
        uses: actions/cache@v4
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-maven-${{ hashFiles('tools/**/pom.xml') }}
          restore-keys: |
            ${{ runner.os }}-maven-
      - name: Cache local npm repository
        uses: actions/cache@v4
        with:
          path: ~/.npm
          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node-
            node-
      - name: Build with Maven
        run: >
          mvn -s .github/workflows/mvn-settings.xml -B compile install package --file tools/pom.xml
          -DskipTests=true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Build liberty server
        run: >
          mvn -s .github/workflows/mvn-settings.xml -B  -pl cldr-apps liberty:create liberty:deploy liberty:package -Dinclude=usr --file tools/pom.xml
          -DskipTests=true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Cleanup liberty server
        run: >
          zip tools/cldr-apps/target/cldr-apps.zip  -d  wlp/usr/servers/cldr/apps/expanded/\*
      - name: Upload cldr-apps.zip
        uses: actions/upload-artifact@v4
        with:
          name: cldr-apps-server
          path: tools/cldr-apps/target/cldr-apps.zip
      - name: Create Release for Production
        uses: ncipollo/release-action@v1.13.0
        with:
          commit: ${{ github.event.inputs.git-ref }}
          prerelease: true
          tag: "${{ steps.tagname.outputs.tag }}"
          body: "Automated release from ’production’ Action"
  deploy:
    name: Deploy to Production
    needs:
      - build
    runs-on: ubuntu-latest
    steps:
    - name: Download cldr-apps.zip
      uses: actions/download-artifact@v4
      with:
        name: cldr-apps-server
    - name: Deploy to st
      # Deploys only on push to main.
      # Does not deploy for PRs.
      shell: bash
      env:
        # the RSA key for connecting
        RSA_KEY_SURVEYTOOL: ${{ secrets.RSA_KEY_SURVEYTOOL }}
        # the SSH port
        SURVEYTOOL_PORT: ${{ secrets.SURVEYTOOL_PORT }}
        # the SSH host
        SURVEYTOOL_HOST: ${{ secrets.SURVEYTOOL_HOST }}
        # the ~/.ssh/known_hosts line mentioning SMOKETEST_HOST
        SURVEYTOOL_KNOWNHOSTS: ${{ secrets.SURVEYTOOL_KNOWNHOSTS }}
        DEPLOY_SHA: ${{ github.event.inputs.git-ref }}
        OVERRIDE: ${{ github.event.inputs.override }}
      run: |
        echo "${RSA_KEY_SURVEYTOOL}" > .key && chmod go= .key
        echo "${SURVEYTOOL_KNOWNHOSTS}" > .knownhosts && chmod go= .knownhosts
        ssh -C -o UserKnownHostsFile=.knownhosts -i .key -p ${SURVEYTOOL_PORT} surveytool@${SURVEYTOOL_HOST} bash /usr/local/bin/deploy-to-openliberty.sh < cldr-apps.zip ${DEPLOY_SHA} ${OVERRIDE}