deploy.yml

name: Build e Deploy na AWS

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout código
        uses: actions/checkout@v4

      - name: Configurar credenciais AWS
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Login no Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: Build, tag e push da imagem
        env:
          IMAGE_TAG: ${{ github.sha }}
        run: |
          docker build -t ${{ secrets.ECR_REGISTRY }}/devops-api:$IMAGE_TAG .
          docker push ${{ secrets.ECR_REGISTRY }}/devops-api:$IMAGE_TAG

      - name: Configurar acesso ao EKS
        run: |
          aws eks update-kubeconfig \
            --name ${{ secrets.EKS_CLUSTER_NAME }} \
            --region ${{ secrets.AWS_REGION }}
          aws eks create-access-entry \
            --cluster-name ${{ secrets.EKS_CLUSTER_NAME }} \
            --principal-arn arn:aws:iam::814636798784:root \
            --region ${{ secrets.AWS_REGION }} 2>/dev/null || true
          aws eks associate-access-policy \
            --cluster-name ${{ secrets.EKS_CLUSTER_NAME }} \
            --principal-arn arn:aws:iam::814636798784:root \
            --policy-arn arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy \
            --access-scope type=cluster \
            --region ${{ secrets.AWS_REGION }} 2>/dev/null || true

      - name: Criar Secret do banco
        run: |
          kubectl create secret generic db-secret \
            --from-literal=database_url='mysql+pymysql://devops:SenhaForte123!@devops-mysql.cud820qa4kbc.us-east-1.rds.amazonaws.com:3306/devopsdb' \
            --dry-run=client -o yaml | kubectl apply -f -

      - name: Aplicar manifestos Kubernetes
        run: |
          kubectl apply -f k8s/

      - name: Deploy no Kubernetes
        env:
          IMAGE_TAG: ${{ github.sha }}
        run: |
          kubectl set image deployment/api-deployment \
            api=${{ secrets.ECR_REGISTRY }}/devops-api:$IMAGE_TAG
          kubectl rollout status deployment/api-deployment