ci(frontend): workflow to auto-deploy frontend in staging [GIX-3078]

[AntonioVentilii-DFINITY]

Motivation

As discussed off-line, we aim to make Staging env up-to-date with the latest main commit, in order to make it a "real" staging env.

Changes

• initial script with necessary steps
• adjusted script with handling of envvars on step level
• created and imported identity
• added branch check
• added envvars on job level

[AntonioVentilii-DFINITY]

@inc-man will take over this PR

Have a look at @lmuntaner 's suggestion: they are doing something similar here:

• https://github.com/dfinity/internet-identity/blob/main/.github/workflows/deploy-rc.yml

[bitdivine]

Looks good to me, thanks!

[bitdivine]

Suggested change

	key_pem=$(mktemp)
	printenv "DFX_DEPLOY_STAGING_KEY" > "$key_pem"
	dfx identity import --disable-encryption --force default "$key_pem"
	dfx identity import --storage-mode=plaintext --force default <(printenv DFX_DEPLOY_STAGING_KEY)

• --disable-encryption has been deprecated and replaced with --storage-mode=plaintext
• If you like (not obligatory) you can use a herefile as shown. Normally when dealing with key material one avoids letting it touch disk, but in this case the key material is landing in plaintext on disk anyway so it's a moot point.

[bitdivine]

I see that Internet Identity still uses --disable-encryption. We should do a scan of all our repositories and update them all. I'll add a Jira ticket to do that.

[bitdivine]

I think we probably want to deploy the backend as well, however we can do that in another PR. That could be in this or another workflow. Here is an example of a workflow that deploys another project with 2 canisters to a test environment. It has a checklist for which canisters to deploy:

  workflow_dispatch:
    inputs:
      mode:
        type: choice
        description: "The dfx canister install mode.  See `dfx canister install --help` for details."
        options:
          - upgrade
          - reinstall
          - install
          - auto
      canisters:
        type: choice
        description: Which canisters to install
        options:
          - all
          - nns-dapp
          - sns_aggregator

[bitdivine]

For workflow dispatch it would be nice to be able to choose the target network, so that this can also be used to deploy to the mainnet test canisters test_fe_1..4 But this can be done in another PR.