Ccap provider prototype 1

.env.test

@@ -6,4 +6,4 @@ MAIL-GUN_API-KEY=some-key
 ENCRYPTION_KEY={"primaryKeyId": 869825478, "key": [{"keyData": {"typeUrl": "type.googleapis.com/google.crypto.tink.AesGcmKey", "keyMaterialType": "SYMMETRIC", "value": "GiAhCnm/EboK1bHxsyI+RquzYfrrMGKWzyBEGMwRnnO7Gg=="}, "outputPrefixType": "TINK", "keyId": 869825478, "status": "ENABLED"}]}
 MIXPANEL_API-KEY=some-key
 SMARTY_STREET_AUTHTOKEN=some-key
-SMARTY_STREET_AUTHID=some-key
+SMARTY_STREET_AUTHID=some-key

.github/workflows/deploy-to-atst.yml

@@ -0,0 +1,80 @@
+name: Deploy to MNbenefits ATST
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Target branch to be released'
+        required: true
+        default: staging
+
+jobs:
+  draft-release:
+    name: Draft a new release
+    runs-on: ubuntu-latest
+    outputs:
+      tag_name: release-${{ steps.create-tagname.outputs.TAG_NAME }}
+    steps:
+      - name: Create tag name
+        id: create-tagname
+        run: echo "::set-output name=TAG_NAME::$(date +'%Y-%m-%d-%H%M')"
+      - name: Draft Release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: release-${{ steps.create-tagname.outputs.TAG_NAME }}
+          release_name: release-${{ steps.create-tagname.outputs.TAG_NAME }}
+          commitish: ${{ github.event.inputs.branch }}
+          body: |
+            Fill in details about this release
+          draft: true
+          prerelease: true
+
+  # Deploy to MNbenefits ATST steps:
+  # 1. find latest git release
+  # 2. Login to openshift non-prod
+  # 3. update build config, set git ref to the release tag
+  # 4. update build config, set image tag to the release tag
+  # 5. build image
+  # 6. update deployment config to the release tag
+  # 7. rollout updated image
+  mnitdeploy:
+    name: deploy to MNbenefits ATST
+    needs: draft-release
+    runs-on: ubuntu-latest
+    steps:
+    - name: Authenticate and set context for non-prod
+      uses: redhat-actions/oc-login@v1
+      with:
+        openshift_server_url: ${{ secrets.OPENSHIFT_SERVER_NON_PROD }}
+        openshift_token: ${{ secrets.OPENSHIFT_TOKEN_NON_PROD }}
+        namespace: ${{ secrets.OPENSHIFT_NAMESPACE_NON_PROD }}
+    - name: update and run build
+      run: |
+        oc patch bc mn-benefits-release -p '{"spec":{"source":{"git":{"ref":"${{ github.event.inputs.branch }}"}}}}'
+        oc patch bc mn-benefits-release -p '{"spec":{"output":{"to":{"name":"mn-benefits:${{ needs.draft-release.outputs.tag_name }}"}}}}'
+        oc start-build mn-benefits-release --follow
+        oc patch dc mn-benefits-atst -p '{"spec":{"triggers":[{"type": "ImageChange", "imageChangeParams":{"from":{"name":"mn-benefits:${{ needs.draft-release.outputs.tag_name }}"}, "containerNames":["mn-benefits-atst"]}}]}}'
+        oc rollout latest dc/mn-benefits-atst
+    - name: Announce success on Teams
+      if: ${{ job.status == 'success' }}
+      uses: jdcargile/ms-teams-notification@v1.4
+      with:
+        github-token: ${{ github.token }} # this will use the runner's token.
+        ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+        notification-summary: Deploy to MNbenefits ATST succeeded, status - ${{ job.status }}
+        # color is green
+        notification-color: 008000
+        timezone: America/Chicago          
+    - name: Announce fail on Teams
+      if: ${{ job.status != 'success' }}
+      uses: jdcargile/ms-teams-notification@v1.4
+      with:
+        github-token: ${{ github.token }} # this will use the runner's token.
+        ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+        notification-summary: Deploy to MNbenefits ATST failed, status - ${{ job.status }}
+        # color is red
+        notification-color: ff0000
+        timezone: America/Chicago          

.github/workflows/deploy-to-dev.yml

@@ -0,0 +1,96 @@
+# This workflow will build a Java project with Gradle
+# For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-gradle
+# For more information regarding posting announcements to MS Teams see: https://github.com/marketplace/actions/microsoft-teams-notification
+
+name: Deploy to MNbenefits DEV
+
+on:
+  workflow_run:
+    workflows: ["Run tests"]
+    branches: [main]
+    types:
+      - completed
+  workflow_dispatch:
+    inputs: { }
+
+jobs:
+  announce_failure:
+    name: Announce test failure on Teams
+    runs-on: ubuntu-latest
+    steps:
+      - name: Announce on Teams
+        if: ${{ github.event.workflow_run.conclusion == 'failure' }}
+        uses: jdcargile/ms-teams-notification@v1.4
+        with:
+          github-token: ${{ github.token }} # this will use the runner's token.
+          ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+          notification-summary: MNbenefits tests failed in CI! 
+          # color is red
+          notification-color: ff0000
+          timezone: America/Chicago          
+  mnitdeploy:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    name: deploy to MNbenefits DEV
+    runs-on: ubuntu-latest
+    steps:
+      - name: Authenticate and set context for non-prod
+        uses: redhat-actions/oc-login@v1
+        with:
+          openshift_server_url: ${{ secrets.OPENSHIFT_SERVER_NON_PROD }}
+          openshift_token: ${{ secrets.OPENSHIFT_TOKEN_NON_PROD }}
+          namespace: ${{ secrets.OPENSHIFT_NAMESPACE_NON_PROD }}
+      - name: update and run build
+        run: |
+          oc start-build mn-benefits --follow
+      - name: Announce success on Teams
+        if: ${{ job.status == 'success' }}
+        uses: jdcargile/ms-teams-notification@v1.4
+        with:
+          github-token: ${{ github.token }} # this will use the runner's token.
+          ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+          notification-summary: Deploy to MNbenefits DEV succeeded, status - ${{ job.status }}
+          # color is green
+          notification-color: 008000
+          timezone: America/Chicago          
+      - name: Announce fail on Teams
+        if: ${{ job.status != 'success' }}
+        uses: jdcargile/ms-teams-notification@v1.4
+        with:
+          github-token: ${{ github.token }} # this will use the runner's token.
+          ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+          notification-summary: Deploy to MNbenefits DEV failed, status - ${{ job.status }}
+          # color is red
+          notification-color: ff0000
+          timezone: America/Chicago          
+  merge_to_staging:
+    needs: mnitdeploy
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    name: Merge main -> staging
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: '0'
+          ref: main
+      - uses: MaximeHeckel/github-action-merge-fast-forward@v1.1.1
+        with:
+          branchtomerge: main
+          branch: staging
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  evaluate_workflow:
+    needs: [mnitdeploy, merge_to_staging]  
+    name: evaluate workflow
+    runs-on: ubuntu-latest
+    if: |
+      always() &&
+      (needs.mnitdeploy.result == 'skipped' || needs.merge_to_staging == 'skipped')
+    steps:
+      - name: force workflow failure
+        uses: actions/github-script@v7
+        with:
+          script: |
+            core.setFailed('One or more required workflow jobs were skipped')
+
+

.github/workflows/deploy-to-production.yml

@@ -11,22 +11,22 @@ jobs:
   # 4. Import image tagged with the git release tag from non-prod to prod
   # 5. Rollout updated image
   mnitdeploy:
-    name: deploy to MNIT prod
+    name: deploy to MNbenefits PROD
     runs-on: ubuntu-latest
     steps:
     - name: Fetch Latest Release
       id: fetch-latest-release
       uses: thebritican/fetch-latest-release@v2.0.0
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         ref: ${{ steps.fetch-latest-release.outputs.tag_name }}
     - name: Create Sentry release
-      uses: getsentry/action-release@v1.1.6
+      uses: getsentry/action-release@v1.7.0
       env:
         SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
-        SENTRY_ORG: codeforamerica
+        SENTRY_ORG: mnbenefits
         SENTRY_PROJECT: shiba
       with:
         environment: production
@@ -42,13 +42,24 @@ jobs:
         oc import-image mn-benefits:${{ steps.fetch-latest-release.outputs.tag_name }} --from=${{ secrets.OPENSHIFT_IMAGE_LOCATION }}/mn-benefits:${{ steps.fetch-latest-release.outputs.tag_name }} -n ${{ secrets.OPENSHIFT_NAMESPACE_PROD }}
         oc patch dc mn-benefits-prod -p '{"spec":{"triggers":[{"type": "ImageChange", "imageChangeParams":{"from":{"name":"mn-benefits:${{ steps.fetch-latest-release.outputs.tag_name }}"}, "containerNames":["mn-benefits-prod"]}}]}}'
         oc rollout latest dc/mn-benefits-prod
-    - name: Announce on Slack
-      if: ${{ always() }}
-      uses: innocarpe/actions-slack@v1
+    - name: Announce success on Teams
+      if: ${{ job.status == 'success' }}
+      uses: jdcargile/ms-teams-notification@v1.4
       with:
-        status: ${{ job.status }}
-        success_text: 'Deploy to MNIT production succeeded :smile: <!subteam^S0209RR14KB> <@U019GSLR63H>'
-        failure_text: 'Deploy to MNIT production failed :frowning:'
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK }}
+        github-token: ${{ github.token }} # this will use the runner's token.
+        ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+        notification-summary: Deploy to MNbenefits Production succeeded, status - ${{ job.status }}
+        # color is green
+        notification-color: 008000
+        timezone: America/Chicago          
+    - name: Announce fail on Teams
+      if: ${{ job.status != 'success' }}
+      uses: jdcargile/ms-teams-notification@v1.4
+      with:
+        github-token: ${{ github.token }} # this will use the runner's token.
+        ms-teams-webhook-uri: ${{ secrets.MS_TEAMS_WEBHOOK_URI }}
+        notification-summary: Deploy to MNbenefits Production failed, status - ${{ job.status }}
+        # color is red
+        notification-color: ff0000
+        timezone: America/Chicago          
+