feat: setup explorer on argus

.github/workflows/argus-stack-prod-upsert.yaml

@@ -0,0 +1,19 @@
+name: Update prod
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  prod_stack_upsert:
+    runs-on: [ARM64, self-hosted, Linux]
+    permissions:
+        id-token: write
+        contents: read
+
+    steps:
+      - name: Upsert Prod Stack
+        uses: chanzuckerberg/argus-artifacts/ci/packages/[email protected]
+        with:
+          appName: single-cell-explorer
+          envName: prod

.github/workflows/argus-stack-rdev-create.yaml

@@ -0,0 +1,20 @@
+name: Create an RDev Stack
+
+on:
+  pull_request:
+    types: [ labeled, synchronize ]
+
+jobs:
+  create-rdev-stack:
+    runs-on: [ARM64, self-hosted, Linux]
+    if: contains(github.event.pull_request.labels.*.name, 'stack')
+    permissions:
+        id-token: write
+        contents: read
+
+    steps:
+      - name: Create Stack
+        uses: chanzuckerberg/argus-artifacts/ci/packages/[email protected]
+        with:
+          appName: single-cell-explorer
+          envName: rdev

.github/workflows/argus-stack-rdev-delete.yaml

@@ -0,0 +1,20 @@
+name: Delete an RDev Stack
+
+on:
+  pull_request:
+    types: [ unlabeled, closed ]
+
+jobs:
+  delete-rdev-stack:
+    runs-on: [ARM64, self-hosted, Linux]
+    if: ${{ !contains(github.event.pull_request.labels.*.name, 'stack') || github.event.pull_request.state == 'closed' }}
+    permissions:
+        id-token: write
+        contents: read
+
+    steps:
+      - name: Delete Stack
+        uses: chanzuckerberg/argus-artifacts/ci/packages/[email protected]
+        with:
+          appName: single-cell-explorer
+          envName: rdev

.github/workflows/argus-stack-staging-upsert.yaml

@@ -0,0 +1,28 @@
+name: Update staging
+
+on:
+  pull_request:
+    paths:
+      - '.infra/common.yaml'
+      - '.infra/staging/values.yaml'
+
+jobs:
+  run_if:
+    if: github.head_ref == 'release-please--branches--main'
+    runs-on: [ARM64, self-hosted, Linux]
+    steps:
+      - run: echo "The head branch of this PR is the release please branch"
+
+  staging_stack_upsert:
+    needs: run_if
+    runs-on: [ARM64, self-hosted, Linux]
+    permissions:
+        id-token: write
+        contents: read
+
+    steps:
+      - name: Upsert Staging Stack
+        uses: chanzuckerberg/argus-artifacts/ci/packages/[email protected]
+        with:
+          appName: single-cell-explorer
+          envName: staging

.github/workflows/docker-build-rdev.yaml

@@ -0,0 +1,13 @@
+name: Docker Image Build - rdev
+
+on:
+  - push
+
+jobs:
+  rdev_argus_builder:
+    uses: ./.github/workflows/workflow-argus-docker-build.yaml
+    secrets: inherit
+    with:
+      envs: rdev
+      path_filters: '!.infra/**'
+      branches_ignore: main,release-please--branches--main

.github/workflows/docker-build-staging-prod.yaml

@@ -0,0 +1,13 @@
+name: Docker Image Build - staging/prod
+
+on:
+  - push
+
+jobs:
+  argus_builder:
+    uses: ./.github/workflows/workflow-argus-docker-build.yaml
+    secrets: inherit
+    with:
+      envs: staging,prod
+      path_filters: '!.infra/**'
+      branches: release-please--branches--main

.github/workflows/release-please.yaml

@@ -0,0 +1,26 @@
+on:
+  push:
+    branches:
+      - main
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+name: release-please
+jobs:
+  release-please:
+    runs-on: [ARM64, self-hosted, Linux]
+    steps:
+      # See https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow
+      # For why we need to generate a token and not use the default
+      - name: Generate token
+        id: generate_token
+        uses: chanzuckerberg/[email protected]
+        with:
+          app_id: ${{ secrets.CZI_RELEASE_PLEASE_APP_ID }}
+          private_key: ${{ secrets.CZI_RELEASE_PLEASE_PK }}
+
+      - name: release please
+        uses: google-github-actions/release-please-action@v4
+        id: release
+        with:
+          token: ${{ steps.generate_token.outputs.token }}

.github/workflows/workflow-argus-docker-build.yaml

@@ -0,0 +1,42 @@
+name: Docker Image Build
+
+on:
+  workflow_call:
+    inputs:
+      envs:
+        description: 'Env names, comma delimited'
+        required: true
+        type: string
+      path_filters:
+        description: 'Glob patterns to match against changed files in the repository, comma delimited'
+        required: true
+        type: string
+      branches:
+        description: 'Branches to build on, comma delimited'
+        required: false
+        type: string
+        default: '*'
+      branches_ignore:
+        description: 'Branches to skip build on, comma delimited'
+        required: false
+        type: string
+        default: ''
+
+jobs:
+  argus_builder:
+    uses: chanzuckerberg/github-actions/.github/workflows/[email protected]
+    secrets: inherit
+    with:
+      branches: ${{ inputs.branches }}
+      branches_ignore: ${{ inputs.branches_ignore }}
+      path_filters: ${{ inputs.path_filters }}
+      envs: ${{ inputs.envs }}
+      images: |
+        [
+          {
+            "name": "explorer",
+            "context": ".",
+            "dockerfile": "hosted/Dockerfile",
+            "platform": "linux/amd64"
+          }
+        ]

.infra/common.yaml

@@ -0,0 +1,52 @@
+global:
+  replicaCount: 1
+  autoscaling:
+    enabled: false
+  service:
+    port: 5000
+  nodeSelector:
+    kubernetes.io/arch: amd64
+  livenessProbe:
+    httpGet:
+      path: /cellxgene/health
+  readinessProbe:
+    httpGet:
+      path: /cellxgene/health
+services:
+  explorer:
+    serviceAccount:
+      create: true
+      automount: true
+      annotations:
+        "eks.amazonaws.com/role-arn": arn:aws:iam::699936264352:role/data_portal_dev_explorer
+    image:
+      repository: 533267185808.dkr.ecr.us-west-2.amazonaws.com/core-platform/single-cell-explorer/explorer
+    resources:
+      limits:
+        cpu: 4
+        memory: 4Gi
+      requests:
+        cpu: 2
+        memory: 2Gi
+    env:
+      - name: REMOTE_DEV_PREFIX
+        value: /explorer-devstack
+      - name: DEPLOYMENT_STAGE
+        value: dev
+      - name: DATA_LOCATOR_DOMAIN
+        value: api.cellxgene.dev.single-cell.czi.technology
+      - name: CXG_BUCKET_PATH
+        value: hosted-cellxgene-dev
+      - name: AWS_REGION
+        value: us-west-2
+      - name: AWS_DEFAULT_REGION
+        value: us-west-2
+      - name: API_DOMAIN
+        value: $ARGOCD_APP_NAME.dev-sc.dev.czi.team # TODO: be able to swap out stack name?
+      - name: WEB_DOMAIN
+        value: $ARGOCD_APP_NAME.dev-sc.dev.czi.team # TODO: be able to swap out stack name?
+    ingress:
+      hosts:
+        - paths:
+            - path: /
+              pathType: Prefix

.infra/prod/values.yaml

@@ -0,0 +1,5 @@
+services:
+  explorer:
+    image:
+      tag: sha-3883f979
+    replicaCount: 3

.infra/rdev/values.yaml

@@ -0,0 +1,5 @@
+services:
+  explorer:
+    image:
+      tag: sha-e521aee0
+    replicaCount: 1

.infra/staging/values.yaml

@@ -0,0 +1,5 @@
+services:
+  explorer:
+    image:
+      tag: sha-3883f979
+    replicaCount: 1

.release-please-manifest.json

@@ -0,0 +1,2 @@
+{
+}

hosted/Dockerfile

@@ -1,4 +1,4 @@
-FROM ubuntu:22.04
+FROM 533267185808.dkr.ecr.us-west-2.amazonaws.com/docker.io/sci/library/ubuntu:22.04
 
 ENV LC_ALL=C.UTF-8
 ENV LANG=C.UTF-8

release-please-config.json

@@ -0,0 +1,25 @@
+{
+  "release-type": "simple",
+  "pull-request-title-pattern": "chore${scope}: release${component} ${version}",
+  "bump-minor-pre-major": true,
+  "changelog-sections": [
+    {
+      "type": "feat",
+      "section": "Features",
+      "hidden": false
+    },
+    {
+      "type": "fix",
+      "section": "Bug Fixes",
+      "hidden": false
+    },
+    {
+      "type": "chore",
+      "section": "Misc",
+      "hidden": false
+    }
+  ],
+  "packages": {
+    ".": {}
+  }
+}