cicd.yml

name: Build and Push

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  build_and_push:
    runs-on: ubuntu-latest

    steps:
    - name: Checkout code
      uses: actions/checkout@v3

    - name: Set up AWS CLI
      uses: aws-actions/configure-aws-credentials@v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: ${{ secrets.AWS_REGION }}

    - name: Build Docker image
      run: |
        docker build -t hello-world:latest .

    - name: Log in to Amazon ECR
      run: |
        aws ecr get-login-password --region ${{ secrets.AWS_REGION }} | docker login --username AWS --password-stdin ${{ secrets.ECR_REGISTRY }}

    - name: Tag Docker image
      run: |
        docker tag hello-world:latest ${{ secrets.ECR_REGISTRY }}/hello-world:latest

    - name: Push Docker image to Amazon ECR
      run: |
        docker push ${{ secrets.ECR_REGISTRY }}/hello-world:latest

  update_task_definition:
    runs-on: ubuntu-latest
    needs: build_and_push

    steps:
    - name: Set up AWS CLI
      uses: aws-actions/configure-aws-credentials@v2
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: ${{ secrets.AWS_REGION }}

    - name: Check if ECS task definition exists
      id: check-task-def
      run: |
        TASK_DEF_COUNT=$(aws ecs list-task-definitions --query 'length(taskDefinitionArns)' --output text)
        if [ "$TASK_DEF_COUNT" -gt 0 ]; then
          echo "task_def_exists=true" >> $GITHUB_ENV
        else
          echo "task_def_exists=false" >> $GITHUB_ENV
          echo "Nothing to update"
        fi

    - name: Update ECS Task Definition
      id: task-def
      if: env.task_def_exists == 'true'
      run: |
        FAMILY="${{ secrets.ECS_TASK_FAMILY }}"
        TASK_DEFINITION=$(aws ecs describe-task-definition --task-definition $FAMILY)
        CONTAINER_DEFINITIONS=$(echo $TASK_DEFINITION | jq --arg IMAGE_URI "${{ secrets.ECR_REGISTRY }}/hello-world:latest" '.taskDefinition.containerDefinitions | map(.image = $IMAGE_URI)')
        UPDATED_TASK_DEFINITION=$(echo $TASK_DEFINITION | jq --argjson CONTAINER_DEFINITIONS "$CONTAINER_DEFINITIONS" '.taskDefinition | .containerDefinitions = $CONTAINER_DEFINITIONS | {family: .family, containerDefinitions: .containerDefinitions, executionRoleArn: .executionRoleArn, networkMode: .networkMode, requiresCompatibilities: .requiresCompatibilities, cpu: .cpu, memory: .memory}')
        echo $UPDATED_TASK_DEFINITION > updated-task-def.json
        aws ecs register-task-definition --cli-input-json file://updated-task-def.json

    - name: Update ECS Service
      if: env.task_def_exists == 'true'
      run: |
        CLUSTER_NAME="${{ secrets.ECS_CLUSTER }}"
        SERVICE_NAME="${{ secrets.ECS_SERVICE }}"
        TASK_FAMILY="${{ secrets.ECS_TASK_FAMILY }}"
        NEW_TASK_DEFINITION=$(aws ecs describe-task-definition --task-definition $TASK_FAMILY --query "taskDefinition.taskDefinitionArn" --output text)
        aws ecs update-service --cluster $CLUSTER_NAME --service $SERVICE_NAME --task-definition $NEW_TASK_DEFINITION