deploy-frontend-sp.yml

name: Deploy frontend (with SAM Deploy Pipeline)

on:
  push:
    branches:
      - main

jobs:
  # deploy-basic-auth-sidecar:
  #   runs-on: ubuntu-latest
  #   timeout-minutes: 60
  #   permissions:
  #     id-token: write
  #     contents: read
  #   steps:
  #     - name: Build and push basic-auth-sidecar image
  #       uses: govuk-one-login/devplatform-upload-action-ecr@8f14d1af61737413dc6eb39f071f01dc6d0e6c45 # v1.3.0
  #       with:
  #         role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
  #         container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
  #         build-and-push-image-only: true
  #         working-directory: basic-auth-sidecar
  #         artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
  #         ecr-repo-name: ${{ secrets.BASIC_AUTH_SIDECAR_ECR_REPOSITORY }}

  deploy-service-down-page:
    runs-on: ubuntu-latest
    timeout-minutes: 60
    permissions:
      id-token: write
      contents: read
    steps:
      - name: Build and push service down page image
        uses: govuk-one-login/devplatform-upload-action-ecr@8f14d1af61737413dc6eb39f071f01dc6d0e6c45 # v1.3.0
        with:
          role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
          container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
          build-and-push-image-only: true
          working-directory: service-down-page-config
          artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
          ecr-repo-name: ${{ secrets.SERVICE_DOWN_PAGE_ECR_REPOSITORY }}

  deploy-frontend:
    needs:
      # - deploy-basic-auth-sidecar
      - deploy-service-down-page
    runs-on: ubuntu-latest
    timeout-minutes: 60
    permissions:
      id-token: write
      contents: read
    steps:
      - name: Build, push and deploy frontend
        uses: govuk-one-login/devplatform-upload-action-ecr@8f14d1af61737413dc6eb39f071f01dc6d0e6c45 # v1.3.0
        with:
          role-to-assume-arn: ${{ secrets.GH_ACTIONS_ROLE_ARN }}
          container-sign-kms-key-arn: ${{ secrets.CONTAINER_SIGN_KMS_KEY_ARN }}
          artifact-bucket-name: ${{ secrets.ARTIFACT_SOURCE_BUCKET_NAME }}
          ecr-repo-name: ${{ secrets.FRONTEND_ECR_REPOSITORY }}
          template-file: cloudformation/deploy/template.yaml
          private-docker-registry: khw46367.live.dynatrace.com
          private-docker-login-username: khw46367
          private-docker-login-password: ${{ secrets.DYNATRACE_PAAS_TOKEN }}
          build-contexts: |
            oneagent_codemodules=docker-image://${{ secrets.DYNATRACE_REGISTRY_NAME}}.live.dynatrace.com/linux/oneagent-codemodules-musl:nodejs