Flutter アプリを flavor 対応から自動リリースするまでの道のり

➜  apps git:(develop) ✗ fvm flutter build ipa --help
  Build an iOS archive bundle and IPA for distribution (macOS host only).

  --dart-define-from-file=<use-define-config.json>    The path of a json format file where flutter define a global constant pool. Json entry will be available as constants from the String.fromEnvironment, bool.fromEnvironment, int.fromEnvironment, and double.fromEnvironment constructors; the key and field are json values.

{
  "ENVIRONMENT": "DEV",
  "LOWERCASE_ENVIRONMENT": "dev",
  "APP_TITLE": "app title (DEV)",
  "APP_ID": "apps.jp.dev",
  "APPLICATION_ID_SUFFIX": ".dev",
  "DYNAMIC_LINK_DOMAIN": "apps.page.link",
  "SCHEME": "apps_scheme",
  "GOOGLE_MAP_API_KEY": "google map api key"
}

<manifest
  xmlns:android="http://schemas.android.com/apk/res/android"
  xmlns:tools="http://schemas.android.com/tools"
  package="${ここを @string/application_id などで動的に変えることができない。変数が展開されなかった}"
>
  ...
</manifest>

  defaultConfig {
    applicationIdSuffix APPLICATION_ID_SUFFIX
    ...
  }

ENVIRONMENT=STAGING
PROVISIONING_PROFILE_SPECIFIER_ENVIRONMENT=dev
APP_TITLE=apps title(DEV)
APPLICATION_ID_SUFFIX=
DYNAMIC_LINK_DOMAIN=apps.page.link
SCHEME=apps_scheme
GOOGLE_MAP_API_KEY=google map api key

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>aps-environment</key>
  <string>development</string>
  <key>com.apple.developer.associated-domains</key>
  <array>
    <string>applinks:devitaco.page.link</string>
  </array>
  <key>com.apple.developer.healthkit</key>
  <true/>
  <key>com.apple.developer.healthkit.access</key>
  <array/>
</dict>
</plist>

#include "Flutter/Generated.xcconfig"
#include? "Pods/Target Support Files/Pods-ImageNotification/Pods-ImageNotification.debug.xcconfig"

#include "Flutter/Generated.xcconfig"
#include? "Pods/Target Support Files/Pods-ImageNotification/Pods-ImageNotification.release.xcconfig"

$ flutter build ipa --export-options-plist=ios/ExportOptions/stg.plist --release --dart-define-from-file=flavor/STAGING.json

$ fvm flutter build ipa --release --dart-define-from-file=flavor/PROD.json

name: Deploy Prod iOS

on:
  workflow_dispatch:

jobs:
  build:
    runs-on: macos-12
    timeout-minutes: 60

    steps:
      - name: Select Xcode version
        run: sudo xcode-select -s '/Applications/Xcode_14.2.app/Contents/Developer'

      - uses: actions/checkout@v3
        with:
          fetch-depth: 1

      - name: make ssh directory
        run: |
          mkdir -p $HOME/.ssh/

      - name: checkout module-core
        env:
          TOKEN: ${{ secrets.SUBMODULE_ACCESSKEY }}
        run: |
          echo -e "$TOKEN" > $HOME/.ssh/id_module_core_rsa
          chmod 600 $HOME/.ssh/id_module_core_rsa
          export GIT_SSH_COMMAND="ssh -i $HOME/.ssh/id_module_core_rsa"
          git submodule update --init --force --recursive lib_core

      - name: checkout module-health
        env:
          MODULE_HEALTH_ACCESSKEY: ${{ secrets.MODULE_HEALTH_ACCESSKEY }}
        run: |
          echo -e "$MODULE_HEALTH_ACCESSKEY" > $HOME/.ssh/id_module_health_rsa
          chmod 600 $HOME/.ssh/id_module_health_rsa
          export GIT_SSH_COMMAND="ssh -i $HOME/.ssh/id_module_health_rsa"
          git submodule update --init --recursive module-health

      - name: checkout module-payment
        env:
          MODULE_PAYMENT_ACCESSKEY: ${{ secrets.MODULE_PAYMENT_ACCESSKEY }}
        run: |
          echo -e "$MODULE_PAYMENT_ACCESSKEY" > $HOME/.ssh/id_module_payment_rsa
          sudo chmod 600 $HOME/.ssh/id_module_payment_rsa
          export GIT_SSH_COMMAND="ssh -i $HOME/.ssh/id_module_payment_rsa"
          git submodule update --init --recursive module-payment

      - name: Create dot env file
        run: |
          touch .env
          echo "${{ secrets.SECRETS_ENV }}" >> .env

      - name: Import Provisioning Profile
        run: |
          mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
          echo '${{ secrets.PROVISIONING_PROFILE_PROD }}' | base64 -d > ~/Library/MobileDevice/Provisioning\ Profiles/apps\ dev.mobileprovision
          echo '${{ secrets.NOTIFICATION_SERVICE_PROVISIONING_PROFILE_PROD }}' | base64 -d > ~/Library/MobileDevice/Provisioning\ Profiles/dev\ ImageNotification.mobileprovision

      - name: Import Code-Signing Certificates
        uses: Apple-Actions/import-codesign-certs@v1
        with:
          p12-file-base64: ${{ secrets.CERTIFICATES_P12_PROD }}
          p12-password: ${{ secrets.CERTIFICATES_P12_PASSWORD_PROD }}

      - uses: kuhnroyal/flutter-fvm-config-action@v1
        id: fvm-config-action

      - uses: subosito/[email protected]
        with:
          channel: ${{ steps.fvm-config-action.outputs.FLUTTER_CHANNEL }}
          flutter-version: ${{ steps.fvm-config-action.outputs.FLUTTER_VERSION }}

      - name: flutter dependencies install
        run: flutter pub get

      - name: build ipa
        run: flutter build ipa --export-options-plist=ios/ExportOptions/prod.plist --release --dart-define-from-file=flavor/PROD.json

      - name: Upload to artifacts
        uses: actions/[email protected]
        with:
          name: ios
          path: /Users/runner/work/apps/demo/build/ios/ipa/module_app.ipa
          if-no-files-found: error

  upload:
    needs: [build]
    runs-on: macos-12
    timeout-minutes: 20
    steps:
      - name: Select Xcode version
        run: sudo xcode-select -s '/Applications/Xcode_14.2.app/Contents/Developer'

      - uses: actions/checkout@v3
        with:
          fetch-depth: 1

      - name: Download artifact
        uses: actions/[email protected]
        with:
          name: ios
          path: ios

      - name: Create private keys
        run: |
          mkdir -p ~/.private_keys && touch ~/.private_keys/AuthKey_{{ secrets.APP_STORE_CONNECT_KEY_ID }}.p8
          echo "${{ secrets.APP_STORE_CONNECT_PRIVATE_KEYS }}" >> ~/.private_keys/AuthKey_{{ APP_STORE_CONNECT_KEY_ID }}.p8

      - name: Validate ipa
        run: |
          xcrun altool --validate-app -f ios/module_app.ipa -t ios --apiKey ${{ secrets.APP_STORE_CONNECT_KEY_ID }} --apiIssuer ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}

      - name: Upload to TestFlight
        run: |
          xcrun altool --upload-app -f ios/module_app.ipa -t ios --apiKey ${{ secrets.APP_STORE_CONNECT_KEY_ID }} --apiIssuer ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
      - name: Delete artifact
        uses: geekyeggo/delete-artifact@v1
        with:
          name: ios

android {
  defaultConfig {
    applicationIdSuffix APPLICATION_ID_SUFFIX
    minSdkVersion 26
    targetSdkVersion 33
    versionCode flutterVersionCode.toInteger()
    versionName flutterVersionName
    multiDexEnabled true

    resValue "string", "app_title", APP_TITLE
    resValue "string", "dynamic_link_domain", DYNAMIC_LINK_DOMAIN
    resValue "string", "scheme", SCHEME
    resValue "string", "google_map_api_key", GOOGLE_MAP_API_KEY
  }
}

  <intent-filter android:autoVerify="true">
    <action android:name="android.intent.action.VIEW"/>
    <category android:name="android.intent.category.DEFAULT"/>
    <category android:name="android.intent.category.BROWSABLE"/>
    <data
      android:host="@string/dynamic_link_domain"
      android:scheme="https"
    />
  </intent-filter>

task selectGoogleServicesJson(type: Copy) {
    from "src/$ENVIRONMENT/google-services.json"
    into './'
}

tasks.whenTaskAdded { task ->
    task.dependsOn copySources

     if (task.name == 'processDebugGoogleServices' || task.name == 'processReleaseGoogleServices') {
        task.dependsOn selectGoogleServicesJson
    }
}

  deploy:
    needs: [build]
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 1

      - name: create-json
        id: create-json
        uses: jsdaniell/[email protected]
        with:
          name: "service_account.json"
          json: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}

      - name: Download artifact
        uses: actions/[email protected]
        with:
          name: android
          path: android

      - name: upload artifact to Google Play
        uses: r0adkll/upload-google-play@v1
        with:
          serviceAccountJson: service_account.json
          packageName: ${{ package name }}
          releaseFiles: android/app-release.aab
          track: internal

      - name: Delete artifact
        uses: geekyeggo/delete-artifact@v1
        with:
          name: android

      - name: upload artifact to Google Play
        uses: r0adkll/upload-google-play@v1
        with:
          serviceAccountJson: service_account.json
          packageName: ${{ package name }}
          releaseFiles: android/app-release.aab
          track: internal
          # まだアプリ自体が一度も公開されていない状態だと draft に指定しないといけないため、初期リリースのバージョン 1.0.0 のときは draft を渡す
          status: ${{ needs.build.outputs.VERSION_NAME == '1.0.0' && 'draft' || 'completed' }}