add hasura grahpql integration and CI workflow

[DaMandal0rian]

PR Type

enhancement, configuration changes

---

Description

• Updated deployment workflow for micro squids to use the production branch and handle HASURA_GRAPHQL_ADMIN_SECRET in the .env file.
• Added a new deployment workflow for monolith squid with steps for code checkout, SSH key installation, Docker Compose deployment, and Slack notifications on failure.
• Enhanced sample environment variables to include Hasura-related configurations.
• Integrated Hasura GraphQL Engine service into Docker Compose setup with necessary environment variables and dependencies.

---

Changes walkthrough 📝

	Relevant files
Configuration changes	gh-deploy-micro-squids.yml Update deployment workflow for micro squids                            .github/workflows/gh-deploy-micro-squids.yml Changed deployment branch from main to production. Added HASURA_GRAPHQL_ADMIN_SECRET to environment variables. Included logic to update .env file with HASURA_GRAPHQL_ADMIN_SECRET. +11/-1    gh-deploy-monolith-squid.yml Add deployment workflow for monolith squid                              .github/workflows/gh-deploy-monolith-squid.yml Added new deployment workflow for monolith squid. Included steps for checking out code, installing SSH key, and deploying with Docker Compose. Added logic to handle HASURA_GRAPHQL_ADMIN_SECRET in .env file. Included Slack notification on deployment failure. +75/-0
Enhancement	.env.sample Update sample environment variables for Hasura integration indexers/squid-blockexplorer/.env.sample Added HASURA_GRAPHQL_ENDPOINT, HASURA_GQL_PORT, and HASURA_GRAPHQL_ADMIN_SECRET to sample environment variables. +3/-0      docker-compose.yml Add Hasura GraphQL Engine service to Docker Compose            indexers/squid-blockexplorer/docker-compose.yml Added Hasura GraphQL Engine service configuration. Configured environment variables for Hasura service. Set up ports and dependencies for Hasura service. +25/-0

---

💡 PR-Agent usage:
Comment /help on the PR to get a list of all available PR-Agent tools and their descriptions

[netlify]

✅ Deploy Preview for dev-astral canceled.

Name	Link
🔨 Latest commit	c088b7f
🔍 Latest deploy log	https://app.netlify.com/sites/dev-astral/deploys/66b2550b6ecdfd00088e39f5

[DaMandal0rian]

related PR in infra
autonomys/infra#334

[DaMandal0rian]

/review

[github-actions]

PR Reviewer Guide 🔍

⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪

🧪 No relevant tests

🔒 Security concerns Sensitive information exposure: The PR includes changes that handle sensitive environment variables in a way that could potentially expose them. This includes writing secrets to files in shell scripts, which might not be secure depending on the environment configuration and access controls.

⚡ Key issues to review Security Concern The .env file is being updated with sensitive information (HASURA_GRAPHQL_ADMIN_SECRET) in a potentially insecure way using shell commands. This could expose sensitive information if not handled properly. Security Concern Similar to the micro squids deployment, the monolith squid deployment also handles sensitive information in the .env file using shell commands, which might expose sensitive data. Hardcoded Secret The sample environment file contains a hardcoded value for HASURA_GRAPHQL_ADMIN_SECRET, which is a security risk as it might be used inadvertently in a production environment.

[marc-aurele-besner]

Awesome 🚀