deploy-production.yml

name: Deploy to Production

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      version:
        description: 'Version tag to deploy (e.g., v1.0.0)'
        required: true
      skip_approval:
        description: 'Skip manual approval (use with caution)'
        required: false
        default: 'false'
        type: boolean

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}
  ENVIRONMENT: production

jobs:
  validate:
    name: Validate Deployment
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.get_version.outputs.version }}
      image_tag: ${{ steps.get_version.outputs.image_tag }}
    steps:
      - name: Get version from trigger
        id: get_version
        run: |
          if [ "${{ github.event_name }}" == "release" ]; then
            VERSION="${{ github.event.release.tag_name }}"
          else
            VERSION="${{ github.event.inputs.version }}"
          fi

          # Remove 'v' prefix if present for image tag
          IMAGE_TAG="${VERSION#v}"

          echo "version=$VERSION" >> $GITHUB_OUTPUT
          echo "image_tag=$IMAGE_TAG" >> $GITHUB_OUTPUT
          echo "Deploying version: $VERSION (image tag: $IMAGE_TAG)"

      - name: Checkout code
        uses: actions/checkout@v6

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Verify image exists
        run: |
          IMAGE_TAG="${{ steps.get_version.outputs.image_tag }}"
          docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG} || {
            echo "Error: Image tag ${IMAGE_TAG} not found in registry"
            echo "Available tags can be found at: https://github.com/${{ github.repository }}/pkgs/container"
            exit 1
          }
          echo "Image verified: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG}"

  approval:
    name: Production Approval
    runs-on: ubuntu-latest
    needs: validate
    if: github.event.inputs.skip_approval != 'true'
    environment:
      name: production-approval
    steps:
      - name: Approval gate
        run: |
          echo "Production deployment approved for version: ${{ needs.validate.outputs.version }}"
          echo "Proceeding with deployment..."

  deploy:
    name: Deploy to Production
    runs-on: ubuntu-latest
    needs: [validate, approval]
    if: always() && needs.validate.result == 'success' && (needs.approval.result == 'success' || needs.approval.result == 'skipped')
    environment:
      name: production
      url: ${{ steps.deploy.outputs.url }}
    permissions:
      contents: read
      packages: read
      deployments: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Create deployment
        id: deployment
        uses: chrnorm/deployment-action@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          environment: production
          initial-status: in_progress

      - name: Create backup marker
        run: |
          # Record current deployment for rollback capability
          echo "PREVIOUS_VERSION=$(date +%Y%m%d%H%M%S)" > /tmp/deployment-backup.env
          echo "DEPLOY_VERSION=${{ needs.validate.outputs.version }}" >> /tmp/deployment-backup.env
          echo "DEPLOY_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> /tmp/deployment-backup.env

      - name: Deploy to production environment
        id: deploy
        run: |
          IMAGE_TAG="${{ needs.validate.outputs.image_tag }}"
          echo "Deploying ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG} to production..."

          # Create deployment manifest
          cat > /tmp/deploy-production.yaml << EOF
          # Production Kubernetes/Docker deployment manifest
          # Customize for your infrastructure

          # For Kubernetes deployment:
          # kubectl set image deployment/arctic-text2sql \
          #   app=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG} \
          #   -n production
          # kubectl rollout status deployment/arctic-text2sql -n production

          # For AWS ECS deployment:
          # aws ecs update-service --cluster production --service arctic-text2sql \
          #   --force-new-deployment
          # aws ecs wait services-stable --cluster production --services arctic-text2sql

          # For Docker Swarm deployment:
          # docker service update --image ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG} \
          #   arctic-text2sql
          EOF

          echo "url=https://api.text2sql.example.com" >> $GITHUB_OUTPUT
          echo "Production deployment completed successfully"

      - name: Update deployment status (success)
        if: success()
        uses: chrnorm/deployment-status@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          deployment-id: ${{ steps.deployment.outputs.deployment_id }}
          state: success
          environment-url: ${{ steps.deploy.outputs.url }}

      - name: Update deployment status (failure)
        if: failure()
        uses: chrnorm/deployment-status@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          deployment-id: ${{ steps.deployment.outputs.deployment_id }}
          state: failure

  smoke-test:
    name: Production Smoke Tests
    runs-on: ubuntu-latest
    needs: deploy
    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Wait for deployment to stabilize
        run: sleep 60

      - name: Run production smoke tests
        run: |
          echo "Running smoke tests against production environment..."

          # Health check
          # curl -f https://api.text2sql.example.com/api/v1/health || exit 1

          # Basic functionality check
          # curl -f -X POST https://api.text2sql.example.com/api/v1/validate \
          #   -H "Content-Type: application/json" \
          #   -d '{"sql": "SELECT 1"}' || exit 1

          echo "Production smoke tests passed (placeholder - configure actual endpoints)"

  notify:
    name: Deployment Notification
    runs-on: ubuntu-latest
    needs: [validate, deploy, smoke-test]
    if: always()
    steps:
      - name: Notify success
        if: needs.deploy.result == 'success' && needs.smoke-test.result == 'success'
        run: |
          echo "::notice::Successfully deployed ${{ needs.validate.outputs.version }} to production"
          # Add Slack/Discord/Email notification here
          # curl -X POST ${{ secrets.SLACK_WEBHOOK }} \
          #   -H "Content-Type: application/json" \
          #   -d '{"text": "Arctic Text2SQL ${{ needs.validate.outputs.version }} deployed to production"}'

      - name: Notify failure
        if: needs.deploy.result == 'failure' || needs.smoke-test.result == 'failure'
        run: |
          echo "::error::Production deployment failed for ${{ needs.validate.outputs.version }}"
          # Add failure notification here