Add deploy files

.github/workflows/ci-properties.json

@@ -0,0 +1,43 @@
+{
+  "app_name": "rootstock-config-service",
+  "aws_region": "us-east-2",
+  "k8s_cluster_name": "k8-mainnet",
+  "registry": "docker.io",
+  "image_name": "sovryn/rootstock-config-service",
+  "prod_branch": "production",
+  "dev_branch": "main",
+  "dockerfile_path": ".",
+  "APP_ENV_VARS": {
+    "POSTGRES_NAME": "config-service",
+    "POSTGRES_PORT": 5432,
+    "DEBUG": "false",
+    "DEFAULT_FILE_STORAGE": "storages.backends.s3boto3.S3Boto3Storage",
+    "DOCKER_NGINX_VOLUME_ROOT": "/nginx",
+    "GUNICORN_BIND_PORT": "8000",
+    "GUNICORN_BIND_SOCKET": "unix:/nginx/gunicorn.socket",
+    "GUNICORN_WEB_RELOAD": "false",
+    "NGINX_ENVSUBST_OUTPUT_DIR": "/etc/nginx/",
+    "NGINX_HOST_PORT": "80",
+    "DOCKER_NGINX_VOLUME_ROOT":"/nginx",
+    "GUNICORN_BIND_SOCKET": "unix:/nginx/gunicorn.socket",
+    "PYTHONDONTWRITEBYTECODE": "true",
+    "ROOT_LOG_LEVEL": "INFO",
+    "AWS_STORAGE_BUCKET_NAME": "sovryn-gnosis-config",
+    "DJANGO_SU_NAME": "sovryn",
+    "DJANGO_SU_EMAIL": "[email protected]"
+  },
+  "DEV_ENV_VARS": {
+    "CGW_URL": "https://safe-client.test.sovryn.app",
+    "DJANGO_ALLOWED_HOSTS": "safe-config.test.sovryn.app",
+    "CSRF_TRUSTED_ORIGINS": "http://localhost:80",
+    "NODE_ENV": "test",
+    "INGRESS_HOSTNAME": "safe-config.test.sovryn.app"
+  },
+  "PROD_ENV_VARS": {
+    "CGW_URL": "https://safe-client.sovryn.app",
+    "DJANGO_ALLOWED_HOSTS": "safe-config.sovryn.app",
+    "CSRF_TRUSTED_ORIGINS": "http://localhost:80",
+    "NODE_ENV": "production",
+    "INGRESS_HOSTNAME": "safe-config.sovryn.app"
+  }
+}

.github/workflows/deployment.yml

@@ -0,0 +1,39 @@
+name: CI Template
+
+on:
+  push:
+    branches: [ production, main ]
+  workflow_dispatch:
+
+jobs:
+  call-workflow-init:
+   uses: DistributedCollective/.github/.github/workflows/init.yml@master
+   with:
+     ref: ${{ github.ref }}
+     base_ref: ${{ github.base_ref }}
+  call-workflow-docker-build:
+    uses: DistributedCollective/.github/.github/workflows/docker.yml@master
+    needs: [call-workflow-init]
+    with:
+      IMAGE_NAME: ${{ needs.call-workflow-init.outputs.image_name }}
+      KUBE_NAMESPACE: ${{ needs.call-workflow-init.outputs.KUBE_NAMESPACE }}
+      event_name: ${{ github.event_name }}
+      registry: ${{ needs.call-workflow-init.outputs.registry }}
+      dockerfile_path:  ${{ needs.call-workflow-init.outputs.dockerfile_path }}
+    secrets:
+      DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+      DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+  call-workflow-k8s-deploy:
+    uses: DistributedCollective/.github/.github/workflows/deploy-k8s.yml@master
+    needs: [call-workflow-init, call-workflow-docker-build]
+    if: github.event_name != 'pull_request'
+    with:
+      IMAGE_NAME: ${{ needs.call-workflow-init.outputs.image_name }}
+      KUBE_NAMESPACE: ${{ needs.call-workflow-init.outputs.KUBE_NAMESPACE }}
+      aws_region: ${{ needs.call-workflow-init.outputs.aws_region }}
+      ci_env: ${{ needs.call-workflow-init.outputs.ci_env }}
+      k8s_cluster_name: ${{ needs.call-workflow-init.outputs.k8s_cluster_name }}
+      app_name: ${{ needs.call-workflow-init.outputs.app_name }}
+    secrets:
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}