feat(ci): automatically update image version in wbaas-deploy on tagged release (#614)

Author: m90

.github/workflows/docker.build.yml

@@ -54,4 +54,76 @@ jobs:
           cache-to: type=local,mode=max,dest=/tmp/.buildx-cache
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.docker_meta.outputs.tags }}
-          labels: ${{ steps.docker_meta.outputs.labels }}
+          labels: ${{ steps.docker_meta.outputs.labels }}
+
+      -
+        name: Check whether wbaas-deploy should be updated
+        id: update-check
+        run: |
+          if [[ "$GITHUB_REF" =~ ^refs/tags/.+$ ]]; then
+              echo "This is a tagged release, will try to create an update in wbaas-deploy."
+              echo "match=true" >> $GITHUB_OUTPUT
+          fi
+      -
+        name: Check out `wmde/wbaas-deploy` repository in staging child directory
+        if: steps.update-check.outputs.match == 'true'
+        uses: actions/checkout@v3.3.0
+        with:
+          repository: wmde/wbaas-deploy
+          path: ./repos/wbaas-deploy-staging
+      -
+        name: Check out `wmde/wbaas-deploy` repository in production child directory
+        if: steps.update-check.outputs.match == 'true'
+        uses: actions/checkout@v3.3.0
+        with:
+          repository: wmde/wbaas-deploy
+          path: ./repos/wbaas-deploy-production
+      -
+        name: Update values for local, staging and production
+        if: steps.update-check.outputs.match == 'true'
+        id: update-values
+        run: |
+          TAG="$(echo ${{ steps.docker_meta.outputs.tags }} | cut -d':' -f2)"
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+          sed -i "/image:/{n;s/tag:.*/tag: $TAG/;}" ./repos/wbaas-deploy-staging/k8s/helmfile/env/local/api.values.yaml.gotmpl
+          sed -i "/image:/{n;s/tag:.*/tag: $TAG/;}" ./repos/wbaas-deploy-staging/k8s/helmfile/env/staging/api.values.yaml.gotmpl
+          sed -i "/image:/{n;s/tag:.*/tag: $TAG/;}" ./repos/wbaas-deploy-production/k8s/helmfile/env/production/api.values.yaml.gotmpl
+      -
+        name: Truncate commit message
+        if: steps.update-check.outputs.match == 'true'
+        id: truncate-commit-message
+        run: |
+          MSG=$(echo "${{ github.event.head_commit.message }}" | head -n 1)
+          echo "msg=$MSG" >> $GITHUB_OUTPUT
+      -
+        uses: peter-evans/create-pull-request@v4
+        if: steps.update-check.outputs.match == 'true'
+        with:
+          path: ./repos/wbaas-deploy-staging
+          commit-message: 'Staging+Local: Deploy new Platform API image ${{ steps.docker_meta.outputs.tags }}'
+          title: 'Staging+Local: Deploy new Platform API image ${{ steps.docker_meta.outputs.tags }}'
+          branch: deploy-to-staging-${{ steps.update-values.outputs.tag }}
+          committer: wmdebot <github-bots@wikimedia.de>
+          author: ${{ github.actor }} <github-bots@wikimedia.de>
+          labels: automated pr
+          token: ${{ secrets.WBAAS_DEPLOY_TOKEN }}
+          body: |
+            This is an automated update for the `api` image in staging and local, using `${{ steps.update-values.outputs.tag }}`.
+
+            **Changes**: [${{ steps.truncate-commit-message.outputs.msg }}](https://github.com/wbstack/api/commit/${{ github.sha }})
+      -
+        uses: peter-evans/create-pull-request@v4
+        if: steps.update-check.outputs.match == 'true'
+        with:
+          path: ./repos/wbaas-deploy-production
+          commit-message: 'Production: Deploy new Platform API image ${{ steps.docker_meta.outputs.tags }}'
+          title: 'Production: Deploy new Platform API image ${{ steps.docker_meta.outputs.tags }}'
+          branch: deploy-to-production-${{ steps.update-values.outputs.tag }}
+          committer: wmdebot <github-bots@wikimedia.de>
+          author: ${{ github.actor }} <github-bots@wikimedia.de>
+          labels: automated pr
+          token: ${{ secrets.WBAAS_DEPLOY_TOKEN }}
+          body: |
+            This is an automated update for the `api` image in production, using `${{ steps.update-values.outputs.tag }}`.
+
+            **Changes**: [${{ steps.truncate-commit-message.outputs.msg }}](https://github.com/wbstack/api/commit/${{ github.sha }})