DevOps

name: CI/CD Pipeline

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run tests
        run: npm test

      - name: Build Docker image
        run: docker build -t myapp:${{ github.sha }} .

      - name: Push to registry
        if: github.ref == 'refs/heads/main'
        run: |
          echo ${{ secrets.REGISTRY_TOKEN }} | docker login -u user --password-stdin
          docker push myapp:${{ github.sha }}

# Build stage
FROM node:20-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
COPY . .
RUN npm run build

# Production stage
FROM node:20-alpine
WORKDIR /app
RUN addgroup -g 1001 -S nodejs && adduser -S nodejs -u 1001
COPY --from=builder --chown=nodejs:nodejs /app/dist ./dist
COPY --from=builder --chown=nodejs:nodejs /app/node_modules ./node_modules
USER nodejs
EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s CMD wget -qO- http://localhost:3000/health || exit 1
CMD ["node", "dist/server.js"]

## Severity Classification

| Level | Description | Response Time |
|-------|-------------|---------------|
| P1 | Complete outage, revenue impact | 15 min |
| P2 | Degraded service, workaround exists | 1 hour |
| P3 | Minor issue, no customer impact | 4 hours |

## RCA Template

1. **Incident Summary** — What happened, when, duration
2. **Impact** — Customers affected, SLA breach
3. **Timeline** — Detection → mitigation → resolution
4. **Root Cause** — 5 Whys analysis
5. **Corrective Actions** — Short-term fix + long-term prevention
6. **Lessons Learned** — Process improvements