Code updates and Infrastructure upgrades have been mostly automated so that these operations can happen rapidly. This happens via multiple github repositories and actions.

Playbooks

Playbooks are composed of an action or series of actions that constitute a a common process.

Test a new version of WordPress and/or nginx

A scheduled process is responsible for periodically checking for a new version of WordPress and nginx. This process will deploy the image to the wordpress-wordpress-run:latest image tag, from which a test suite will be run comparing the dev and latest versions, at the end of which digital-latest.apps.silver.devops.gov.bc.ca will be a copy of production with the latest version of wordpress running on it.

Check the results of the screenshot tests, and do some user testing of the site. Once satisfied with the upgrade, you can change the test and production image tags in openshift and bring down the pods in those deployments. Once the deployments are restarted with new pods, the new version of wordpress will be in place.

Workflows

Spin up a new wordpress instance

A new WordPress site can be created by executing the Create Wordpress Instance workflow. This will create all the necessary openshift resources in the specified environment, who’s names will be prefixed by the site-name input and the URL will be digital-site-nameapps.silver.appsdevops.gov.bc.ca. The controlling infrastructure-as-code is implemented with kustomized, and can be found in the wordpress-deploy-digimod repository. The action will also copy the wordpress cli to the container and perform a site install.

...

You can deploy the latest theme from the bcgov-wordpress-block-theme-digimod repository with the Deploy Plugins workflow. The will deploy to the specified environment for digital-site-nameapps.silver.appsdevops.gov.bc.ca.

Update digimod plugins

You can deploy the latest plugins from the wordpress-digimod repository with the Deploy Plugins workflow. The will deploy to the specified environment for digital-site-nameapps.appssilver.devops.gov.bc.ca.

Update a single plugin

You can deploy the a specific plugin from the wordpress-digimod repository with the Deploy Plugin workflow. The will deploy the plugin to the specified environment for digital-site-nameapps.silver.appsdevops.gov.bc.ca.

Run the test suite

Perform a full site export and test

...

WordPress deployments can be configured for SSO integration with Keycloak. The integrations are managed through the CSS app. SSO is managed on the client side with the MiniOrange OAuth plugin. Sites in Dev, Test, and Prod all must use different client credentials, so they must be set up differently. This can be set up by running the Reconfigure SSO workflow. Note that both the MiniOrange OAuth plugin and the digimod-misc plugin (which contains the wordpress script for changing the MiniOrange configuration) must already be installed on the site for this to work. This can be done either from an Export from production, deploy plugins, or deploy plugin workflow.

Export from production

You can perform a site backup from production and import it to the specified environment for digital-site-nameapps.appssilver.devops.gov.bc.ca. This can be done by running the Site Export from Production workflow.

...

You can perform a migration to production and import it from the specified environment and site digital-site-nameapps.silver.appsdevops.gov.bc.ca. This can be done by running the Site Export from Production workflow.

...