deployment.yml

name: cc-frontend
on:
  pull_request:
    branches:
      - main
permissions:
  id-token: write
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Get code
        uses: actions/checkout@v3
      - name: Load & cache dependencies
        id: cache-dependencies
        uses: ./.github/actions/cached-dependencies
      - name: Build website
        run: npm run build
      - name: Build export
        run: npm run export
      - name: Upload artifacts
        uses: actions/upload-artifact@v3
        with:
          name: out-files
          path: out

  lint:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Get code
        uses: actions/checkout@v3
      - name: Load & cache dependencies
        id: cache-dependencies
        uses: ./.github/actions/cached-dependencies
      - name: Lint code
        run: npm run lint

  deploy-uat:
    needs: lint
    runs-on: ubuntu-latest
    steps:
      - name: Get code
        uses: actions/checkout@v3
      - name: Get build artifacts
        uses: actions/download-artifact@v3
        with:
          name: out-files
          path: out
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: arn:aws:iam::245866473499:role/OIDC-S3-deployment
          aws-region: ap-southeast-2
      - name: Deploy to PROD S3
        run: |
          aws s3 sync out ${{ secrets.S3_UAT_ADMIN_BUCKET }}

  deploy-prod:
    needs: deploy-uat
    runs-on: ubuntu-latest
    steps:
      - name: Get code
        uses: actions/checkout@v3
      - name: Get build artifacts
        uses: actions/download-artifact@v3
        with:
          name: out-files
          path: out
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: arn:aws:iam::245866473499:role/OIDC-S3-deployment
          aws-region: ap-southeast-2
      - name: Deploy to PROD S3
        run: |
          aws s3 sync out ${{ secrets.S3_PROD_ADMIN_BUCKET }}