deploy.yaml

name: Deploy
on:
  workflow_call:
    inputs:
      STACK:
        required: true
        type: string
      AWS_REGION:
        required: true
        type: string
      GH_ENVIRONMENT:
        required: true
        type: string
    secrets:
      AWS_ACCESS_KEY_ID:
        required: true
      AWS_SECRET_ACCESS_KEY:
        required: true
      REACT_APP_GA_MEASUREMENT_ID:
        required: false
      REACT_APP_STORYBLOK_TOKEN:
        required: true
jobs:
  build-and-deploy:
    env:
      BUNDLE_PATH: client/build
    environment: ${{ inputs.GH_ENVIRONMENT }}
    runs-on: ubuntu-latest
    steps:
      - name: Configure aws credentials
        uses: aws-actions/configure-aws-credentials@master
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ inputs.AWS_REGION }}

      - uses: actions/checkout@v3

      - uses: actions/setup-node@v2
        with:
          node-version: "16"

      - name: Install infra dependencies
        working-directory: infra
        run: npm ci

      - name: Install client dependencies
        working-directory: client
        run: npm ci

      - name: Build client
        working-directory: client
        run: npm run build
        env:
          REACT_APP_STORYBLOK_API: https://gapi.storyblok.com/v1/api
          REACT_APP_STORYBLOK_TOKEN: ${{ secrets.REACT_APP_STORYBLOK_TOKEN }}
          REACT_APP_GA_MEASUREMENT_ID: ${{ secrets.REACT_APP_GA_MEASUREMENT_ID }}
          INLINE_RUNTIME_CHUNK: false
          GENERATE_SOURCEMAP: false

      - name: Synth infra
        working-directory: infra
        run: npx cdk synth ${{ inputs.STACK }}

      - name: Deploy
        working-directory: infra
        run: npx cdk deploy ${{ inputs.STACK }} --require-approval never