Merge pull request #586 from oscarj007/add/blue-green-deploy-workflow

Add/blue green deploy workflow

Author: LaGodxy

.github/workflows/blue-green-deploy.yml

@@ -0,0 +1,63 @@
+name: Blue-Green Deploy to EKS
+
+on:
+  push:
+    branches: [ main ]
+  workflow_dispatch: {}
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    env:
+      IMAGE_NAME: ghcr.io/${{ github.repository }}/myapp
+      K8S_NAMESPACE: default
+      AWS_REGION: ${{ secrets.AWS_REGION }}
+      EKS_CLUSTER_NAME: ${{ secrets.EKS_CLUSTER_NAME }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure AWS credentials
+        if: env.AWS_REGION != ''
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push image
+        id: build
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          tags: |
+            "${{ env.IMAGE_NAME }}:latest"
+            "${{ env.IMAGE_NAME }}:${{ github.sha }}"
+      - name: Configure kubectl (EKS)
+        if: env.AWS_REGION != ''
+        run: |
+          aws eks update-kubeconfig --region ${{ secrets.AWS_REGION }} --name ${{ secrets.EKS_CLUSTER_NAME }}
+
+      - name: Deploy (Blue-Green)
+        env:
+          IMAGE: ${{ env.IMAGE_NAME }}:${{ github.sha }}
+          K8S_NAMESPACE: ${{ env.K8S_NAMESPACE }}
+        run: |
+          chmod +x ./scripts/blue-green-deploy.sh
+          ./scripts/blue-green-deploy.sh "$IMAGE" "$K8S_NAMESPACE"
+
+      - name: Notify on failure and rollback
+        if: failure()
+        run: |
+          chmod +x ./scripts/blue-green-rollback.sh
+          ./scripts/blue-green-rollback.sh "$K8S_NAMESPACE"

docs/SECRETS.md

@@ -0,0 +1,49 @@
+# Adding repository secrets for CI
+
+Use repository secrets to store AWS credentials and cluster name for GitHub Actions. Do NOT commit any keys or kubeconfig files.
+
+Recommended secrets to add (names used by the workflow):
+
+- `AWS_ACCESS_KEY_ID`
+- `AWS_SECRET_ACCESS_KEY`
+- `AWS_REGION`
+- `EKS_CLUSTER_NAME`
+
+Add via GitHub UI:
+
+1. Go to your repository on GitHub.
+2. Settings → Secrets and variables → Actions → New repository secret.
+3. Add each secret with the names above.
+
+Add via GitHub CLI (`gh`) if you have it authenticated:
+
+```bash
+gh secret set AWS_ACCESS_KEY_ID -b "<your-access-key-id>"
+gh secret set AWS_SECRET_ACCESS_KEY -b "<your-secret-access-key>"
+gh secret set AWS_REGION -b "us-east-1"
+gh secret set EKS_CLUSTER_NAME -b "strellerminds-staging"
+```
+
+Local testing (temporary environment variables):
+
+For Bash/WSL:
+```bash
+export AWS_ACCESS_KEY_ID="<your-access-key-id>"
+export AWS_SECRET_ACCESS_KEY="<your-secret-access-key>"
+export AWS_REGION="us-east-1"
+export EKS_CLUSTER_NAME="strellerminds-staging"
+```
+
+For PowerShell (temporary for session):
+```powershell
+$env:AWS_ACCESS_KEY_ID="<your-access-key-id>"
+$env:AWS_SECRET_ACCESS_KEY="<your-secret-access-key>"
+$env:AWS_REGION="us-east-1"
+$env:EKS_CLUSTER_NAME="strellerminds-staging"
+```
+
+After setting secrets or environment variables, the workflow can be triggered manually from Actions (select the `Blue-Green Deploy to EKS` workflow and click "Run workflow") or by pushing to `main`.
+
+PR link (branch pushed by me):
+
+https://github.com/oscarj007/StrellerMinds-SmartContracts/pull/new/add/blue-green-deploy-workflow