ci: add a draft of diff-to-us and deploy-to-us

Author: michalrus

.github/workflows/std.yml

@@ -13,10 +13,12 @@ on:
     branches:
       - master
       - conway-era
+      - dev-preview
   push:
     branches:
       - master
       - conway-era
+      - dev-preview
     tags:
       - '@cardano-sdk/cardano-services**'
 env:
@@ -96,3 +98,80 @@ jobs:
           echo commit: ${{ github.sha }}
       - uses: divnix/std-action/run@main
         with: {ffBuildInstructions: true, remoteStore: "ssh-ng://eu.nixbuild.net"}
+
+  ### FIXME:
+  ### FIXME: change all instances of `dev-preview` in `diff-to-us` back to `${{ github.ref_name }}`
+  ### FIXME:
+
+  diff-to-us:
+    needs: images
+    name: Comment with a Plan Diff (${{ github.ref_name }})
+    if: github.event_name == 'pull_request' && (github.ref_name == 'dev-preview' || github.ref_name == 'chore/LW-9879-lace-ops-to-sdk')
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: DeterminateSystems/nix-installer-action@main
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/[email protected]
+        with:
+          role-to-assume: ${{ env.AWS_ROLE_ARN }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Generate the Diff
+        run: |
+          nix develop -L --command bash -c '
+            set -euo pipefail
+
+            nix run -L ".#[email protected]" 2&1 \
+              | tee plan-diff.txt
+          '
+
+      - name: Post Comment on the PR
+        uses: actions/github-script@v5
+        with:
+          script: |
+            const fs = require('fs');
+            const output = fs.readFileSync('plan-diff.txt', 'utf8');
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: output,
+            });
+
+
+  deploy-to-us:
+    if: github.ref_name == 'dev-preview'
+    # TODO: if: github.ref_name == 'dev-preview' || github.ref_name == 'chore/LW-9879-lace-ops-to-sdk'
+    needs: [images, diff-to-us]
+    concurrency:
+      # Only one deployment at a time per environment, and wait for the previous one to finish:
+      group: deploy-${{ github.ref_name }}
+      cancel-in-progress: false
+    name: Deploy (${{ github.ref_name }})
+    runs-on: ubuntu-22.04
+    environment:
+      name: ${{ github.ref_name }}
+      url: https://${{ github.ref_name }}.dapps.lw.iog.io/
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: DeterminateSystems/nix-installer-action@main
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/[email protected]
+        with:
+          role-to-assume: ${{ env.AWS_ROLE_ARN }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Deploy to K8s
+        run: |
+          echo "Will deploy ‘${{ github.sha }}’ to ‘${{ github.ref_name }}’"
+
+          nix develop -L --command bash -c '
+            set -euo pipefail
+
+            echo yes | nix run -L ".#helm.x86_64-linux.${{ github.ref_name }}@us-east-1.apply"
+          '