cd.yaml

name: Continuous Delivery

on:
  push:

jobs:
  infra:
    runs-on: ubuntu-latest
    name: deploy infrastructure
    permissions:
      contents: read
      id-token: write
    outputs:
      StaticSiteBucketName: ${{ steps.deploy.outputs.StaticSiteBucketName }}
    steps:
      - uses: actions/checkout@v4
      - uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::865116139480:role/github-actions-limulus-dot-net-cf
          aws-region: us-west-2
      - uses: aws-actions/aws-cloudformation-github-deploy@v1
        with:
          name: limulus-dot-net-${{ github.ref_name }}
          template: infra.yaml
          no-fail-on-empty-changeset: '1'
          capabilities: 'CAPABILITY_NAMED_IAM,CAPABILITY_AUTO_EXPAND'
          parameter-overrides: >-
            BranchName=${{ github.ref_name }},
            LimulusDotNetZoneId=${{ secrets.LIMULUS_DOT_NET_ZONE_ID }},
            LimulusDotNetCertificateArn=${{ secrets.LIMULUS_DOT_NET_CERTIFICATE_ARN }}

  build:
    runs-on: ubuntu-latest
    name: build website
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'
      - run: npm ci
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
      - run: npm run build
      - uses: actions/upload-artifact@v4
        with:
          name: dist-www
          path: dist/www
          retention-days: 15

  deploy:
    needs:
      - infra
      - build
    name: deploy website
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - run: echo "StaticSiteBucketName ${{ needs.infra.outputs.StaticSiteBucketName }}"
      # - uses: actions/download-artifact@v4
      #   with:
      #     name: dist-www
      #     path: www
      # - uses: aws-actions/configure-aws-credentials@v4
      #   with:
      #     role-to-assume: arn:aws:iam::865116139480:role/github-actions-limulus-penumbra
      #     aws-region: us-west-2
      # - run: aws s3 sync www s3://${{ needs.infra.outputs.StaticSiteBucketName }} --delete --cache-control max-age=60,public