Merge pull request #2486 from ASFHyP3/fix-negative-processing-times #1272
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Deploy DAAC Stacks to AWS | |
on: | |
push: | |
branches: | |
- main | |
- develop | |
concurrency: ${{ github.workflow }}-${{ github.ref }} | |
jobs: | |
deploy: | |
runs-on: ubuntu-latest | |
strategy: | |
fail-fast: false | |
matrix: | |
include: | |
- environment: hyp3-edc-prod | |
domain: '' | |
api_name: hyp3 | |
template_bucket: cf-templates-118mtzosmrltk-us-west-2 | |
image_tag: latest | |
product_lifetime_in_days: 14 | |
default_credits_per_user: 10000 | |
default_application_status: APPROVED | |
cost_profile: EDC | |
deploy_ref: refs/heads/main | |
job_files: >- | |
job_spec/AUTORIFT.yml | |
job_spec/INSAR_GAMMA.yml | |
job_spec/RTC_GAMMA.yml | |
job_spec/INSAR_ISCE_BURST.yml | |
instance_types: r6id.xlarge,r6id.2xlarge,r6id.4xlarge,r6id.8xlarge,r6idn.xlarge,r6idn.2xlarge,r6idn.4xlarge,r6idn.8xlarge | |
default_max_vcpus: 1500 | |
expanded_max_vcpus: 3000 | |
required_surplus: 2000 | |
security_environment: EDC | |
ami_id: image_id_ecs_amz2 | |
distribution_url: 'https://d3gm2hf49xd6jj.cloudfront.net' | |
- environment: hyp3-edc-uat | |
domain: '' | |
api_name: hyp3-test | |
template_bucket: cf-templates-118ylv0o6jp2n-us-west-2 | |
image_tag: test | |
product_lifetime_in_days: 14 | |
default_credits_per_user: 10000 | |
default_application_status: APPROVED | |
cost_profile: EDC | |
deploy_ref: refs/heads/develop | |
job_files: >- | |
job_spec/AUTORIFT.yml | |
job_spec/INSAR_GAMMA.yml | |
job_spec/RTC_GAMMA.yml | |
job_spec/INSAR_ISCE_BURST.yml | |
instance_types: r6id.xlarge,r6id.2xlarge,r6id.4xlarge,r6id.8xlarge,r6idn.xlarge,r6idn.2xlarge,r6idn.4xlarge,r6idn.8xlarge | |
default_max_vcpus: 1500 | |
expanded_max_vcpus: 3000 | |
required_surplus: 2000 | |
security_environment: EDC | |
ami_id: image_id_ecs_amz2 | |
distribution_url: 'https://d1riv60tezqha9.cloudfront.net' | |
environment: | |
name: ${{ matrix.environment }} | |
url: https://${{ matrix.domain }} | |
steps: | |
- uses: actions/[email protected] | |
- uses: aws-actions/configure-aws-credentials@v4 | |
with: | |
aws-access-key-id: ${{ secrets.V2_AWS_ACCESS_KEY_ID }} | |
aws-secret-access-key: ${{ secrets.V2_AWS_SECRET_ACCESS_KEY }} | |
aws-session-token: ${{ secrets.V2_AWS_SESSION_TOKEN }} | |
aws-region: ${{ secrets.AWS_REGION }} | |
- uses: actions/setup-python@v5 | |
with: | |
python-version: 3.9 | |
- uses: ./.github/actions/deploy-hyp3 | |
if: github.ref == matrix.deploy_ref | |
with: | |
TEMPLATE_BUCKET: ${{ matrix.template_bucket }} | |
STACK_NAME: ${{ matrix.environment }} | |
DOMAIN_NAME: ${{ matrix.domain }} | |
API_NAME: ${{ matrix.api_name }} | |
CERTIFICATE_ARN: ${{ secrets.CERTIFICATE_ARN }} | |
IMAGE_TAG: ${{ matrix.image_tag }} | |
PRODUCT_LIFETIME: ${{ matrix.product_lifetime_in_days }} | |
VPC_ID: ${{ secrets.VPC_ID }} | |
SUBNET_IDS: ${{ secrets.SUBNET_IDS }} | |
SECRET_ARN: ${{ secrets.SECRET_ARN }} | |
CLOUDFORMATION_ROLE_ARN: ${{ secrets.CLOUDFORMATION_ROLE_ARN }} | |
DEFAULT_CREDITS_PER_USER: ${{ matrix.default_credits_per_user }} | |
DEFAULT_APPLICATION_STATUS: ${{ matrix.default_application_status }} | |
COST_PROFILE: ${{ matrix.cost_profile }} | |
JOB_FILES: ${{ matrix.job_files }} | |
DEFAULT_MAX_VCPUS: ${{ matrix.default_max_vcpus }} | |
EXPANDED_MAX_VCPUS: ${{ matrix.expanded_max_vcpus }} | |
MONTHLY_BUDGET: ${{ secrets.MONTHLY_BUDGET }} | |
REQUIRED_SURPLUS: ${{ matrix.required_surplus }} | |
ORIGIN_ACCESS_IDENTITY_ID: ${{ secrets.ORIGIN_ACCESS_IDENTITY_ID }} | |
SECURITY_ENVIRONMENT: ${{ matrix.security_environment }} | |
AMI_ID: ${{ matrix.ami_id }} | |
INSTANCE_TYPES: ${{ matrix.instance_types }} | |
DISTRIBUTION_URL: ${{ matrix.distribution_url }} | |
AUTH_PUBLIC_KEY: ${{ secrets.AUTH_PUBLIC_KEY }} | |
call-bump-version-workflow: | |
if: github.ref == 'refs/heads/main' | |
needs: deploy | |
uses: ASFHyP3/actions/.github/workflows/[email protected] | |
secrets: | |
USER_TOKEN: ${{ secrets.TOOLS_BOT_PAK }} |