feat: use deploy-environment workflow for int rollback

.github/workflows/cd.yaml

@@ -355,31 +355,21 @@ jobs:
     needs:
       - test_int
       - terraform_env_int
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v3
-      - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
-        with:
-          role-to-assume: ${{ vars.ENV_int_TF_OIDC_ROLE }}
-          aws-region: ${{ vars.ENV_int_TF_AWS_REGION }}
-      - name: Terraform Init
-        run: terraform init -no-color -input=false
-        working-directory: infra/terraform/environments/int
-      - name: Plan Rollback
-        run: |
-          terraform plan -no-color -input=false -out=tfplan \
-            -var "api_image_tag=${{ needs.terraform_env_int.outputs.previous_api_image_tag }}" \
-            -var "cli_image_tag=${{ needs.terraform_env_int.outputs.previous_cli_image_tag }}" \
-            -var "selfserve_image_tag=${{ needs.terraform_env_int.outputs.previous_selfserve_image_tag }}" \
-            -var "internal_image_tag=${{ needs.terraform_env_int.outputs.previous_internal_image_tag }}" \
-            -var "assets_version=${{ needs.terraform_env_int.outputs.previous_assets_version }}"
-        working-directory: infra/terraform/environments/int
-      - name: Apply Rollback
-        run: terraform apply -no-color -input=false -auto-approve tfplan
-        working-directory: infra/terraform/environments/int
+    uses: ./.github/workflows/deploy-environment.yaml
+    with:
+      environment: int
+      rollback: true
+      apply: true
+      api-image-tag: ${{ needs.terraform_env_int.outputs.previous_api_image_tag }}
+      cli-image-tag: ${{ needs.terraform_env_int.outputs.previous_cli_image_tag }}
+      selfserve-image-tag: ${{ needs.terraform_env_int.outputs.previous_selfserve_image_tag }}
+      internal-image-tag: ${{ needs.terraform_env_int.outputs.previous_internal_image_tag }}
+      assets-version: ${{ needs.terraform_env_int.outputs.previous_assets_version }}
+    permissions:
+      contents: read
+      id-token: write
+      pull-requests: write
+    secrets: inherit
 
   terraform-account-prod:
     name: Account (prod)

.github/workflows/deploy-environment.yaml

@@ -80,6 +80,11 @@ on:
         type: boolean
         required: false
         default: false
+      rollback:
+        type: boolean
+        required: false
+        default: false
+
     outputs:
       terraform-output:
         description: "Terraform output"
@@ -110,7 +115,7 @@ concurrency:
 
 jobs:
   deploy:
-    name: ${{ inputs.destroy && 'Destroy ' || '' }}${{ inputs.apply && 'Apply' || 'Plan' }}
+    name: ${{ inputs.rollback && 'Rollback' || '' }}${{ inputs.destroy && 'Destroy ' || '' }}${{ inputs.apply && 'Apply' || 'Plan' }}
     runs-on: ubuntu-latest
     # As a workaround for: https://github.com/actions/runner/issues/2120
     # Environment will not be defined for non-apply jobs to ensure that deployments are kept accurate in the GitHub UI.
@@ -297,6 +302,18 @@ jobs:
         if: ${{ inputs.apply && inputs.destroy && inputs.workspace }}
         run: terraform workspace select default && terraform workspace delete ${{ inputs.workspace }}
 
+      - name: Add Rollback Notice
+        if: ${{ inputs.rollback && inputs.apply }}
+        run: |
+          echo "## ⚠️ Environment Rollback Performed" >> $GITHUB_STEP_SUMMARY
+          echo "Environment: ${{ inputs.environment }}" >> $GITHUB_STEP_SUMMARY
+          echo "Rolled back to:" >> $GITHUB_STEP_SUMMARY
+          echo "- API: ${{ inputs.api-image-tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- CLI: ${{ inputs.cli-image-tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Selfserve: ${{ inputs.selfserve-image-tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Internal: ${{ inputs.internal-image-tag }}" >> $GITHUB_STEP_SUMMARY
+          echo "- Assets: ${{ inputs.assets-version }}" >> $GITHUB_STEP_SUMMARY
+
       - name: Set outputs
         if: ${{ always() && !cancelled() && !failure() && !inputs.destroy }}
         id: terraform-output

app/api/.gitignore

@@ -26,5 +26,5 @@ phpcs.xml
 phpstan.neon
 phpunit.xml
 psalm.xml
-# Trigger CD - 2024-10-29-0745
+# Trigger CD - 2024-10-30-0900