Merge pull request #112 from Kobzol/ci-deployment

Add a CI job for deploying to production

Author: Mark-Simulacrum

.github/workflows/deploy.yml

@@ -8,9 +8,11 @@ on:
 concurrency: deploy
 
 jobs:
-  deploy:
+  deploy-to-staging:
     name: Deploy
     runs-on: ubuntu-latest
+    environment: staging
+    concurrency: staging
     permissions:
       id-token: write
       contents: read
@@ -44,3 +46,41 @@ jobs:
 
       - name: Kick ECS to deploy new version
         run: aws ecs update-service --service bors --cluster bors --force-new-deployment
+  deploy-to-production:
+    name: Deploy
+    runs-on: ubuntu-latest
+    environment: production
+    concurrency: production
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v3
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          role-to-assume: arn:aws:iam::351621253146:role/gha-access
+          aws-region: us-east-2
+
+      - name: Login to Amazon ECR
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v1
+
+      - uses: docker/setup-buildx-action@v2
+      - name: Build and tag the Docker image
+        env:
+          REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+          REPOSITORY: bors
+          IMAGE_TAG: latest
+        uses: docker/build-push-action@v4
+        with:
+          context: .
+          tags: ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:${{ env.IMAGE_TAG }}
+          push: true
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Kick ECS to deploy new version
+        run: aws ecs update-service --service bors --cluster bors --force-new-deployment