deploy-dev.yml

name: Deploy to development
run-name: Deploy to development [${{ github.head_ref || github.ref_name }}]

on:
  merge_group:
    types:
      - checks_requested
  pull_request:
    branches:
      - main

concurrency: deploy-development

permissions:
  id-token: write
  contents: read

jobs:
  deploy-frontend:
    if: github.event_name == 'merge_group'
    name: Deploy Frontend (dev)
    runs-on: ubuntu-latest
    timeout-minutes: 30
    environment:
      name: development
      url: ${{ steps.push.outputs.pipeline-url }}
    outputs:
      pipeline-url: ${{ steps.push.outputs.pipeline-url }}
    steps:
      - name: Pull repository
        id: checkout
        uses: actions/checkout@v4

      - name: Push
        id: push
        uses: ./.github/actions/push-frontend
        with:
          deployment-role-arn: ${{ vars.FRONTEND_DEPLOYMENT_ROLE_ARN }}
          artifact-bucket-name: ${{ vars.FRONTEND_DEPLOYMENT_ARTIFACTS_BUCKET }}
          pipeline-name: ${{ vars.FRONTEND_PIPELINE_NAME }}
          dynatrace-pass-token: ${{ secrets.DYNATRACE_PAAS_TOKEN }}
          container-repository-name: ${{ vars.FRONTEND_CONTAINER_REPOSITORY_NAME }}
          test-container-repository-name: ${{ vars.FRONTEND_TEST_CONTAINER_REPOSITORY_NAME }}

  deploy-dynamodb:
    if: github.event_name == 'merge_group'
    name: Deploy Dynamodb (dev)
    runs-on: ubuntu-latest
    timeout-minutes: 10
    environment:
      name: development
      url: ${{ steps.deploy.outputs.pipeline-url }}
    outputs:
      artifact-name: ${{ steps.build.outputs.artifact-name }}
      cache-key: ${{ steps.build.outputs.cache-key }}
      pipeline-url: ${{ steps.deploy.outputs.pipeline-url }}
    steps:
      - name: Build
        id: build
        uses: govuk-one-login/github-actions/sam/build-application@6144f39407b01c9b25b39537b3956deca9e32620 # 22/02/2024
        with:
          template: backend/dynamodb/dynamodb.template.yml
          base-dir: backend/dynamodb
          source-dir: backend/dynamodb
          cache-name: backend-dynamodb-infra
          artifact-name: backend-dynamodb-infrastructure
          pull-repository: true

      - name: Deploy
        id: deploy
        uses: govuk-one-login/github-actions/secure-pipelines/deploy-application@db4b3614f5f863f56a5356052262878ecec83b31 # 22/07/2024
        timeout-minutes: 15
        with:
          aws-role-arn: ${{ vars.DYNAMODB_DEPLOYMENT_ROLE_ARN }}
          artifact-bucket-name: ${{ vars.DYNAMODB_DEPLOYMENT_ARTIFACTS_BUCKET }}
          signing-profile-name: ${{ vars.SIGNING_PROFILE_NAME }}
          pipeline-name: ${{ vars.DYNAMODB_PIPELINE_NAME }}
          artifact-name: ${{ steps.build.outputs.artifact-name }}

  deploy-cognito:
    if: github.event_name == 'merge_group'
    name: Deploy Cognito (dev)
    runs-on: ubuntu-latest
    timeout-minutes: 10
    environment:
      name: development
      url: ${{ steps.deploy.outputs.pipeline-url }}
    outputs:
      artifact-name: ${{ steps.build.outputs.artifact-name }}
      cache-key: ${{ steps.build.outputs.cache-key }}
      pipeline-url: ${{ steps.deploy.outputs.pipeline-url }}
    steps:
      - name: Build
        id: build
        uses: govuk-one-login/github-actions/sam/build-application@6144f39407b01c9b25b39537b3956deca9e32620 # 22/02/2024
        with:
          template: backend/cognito/cognito.template.yml
          manifest: backend/cognito/package.json
          base-dir: backend/cognito
          source-dir: backend/cognito
          cache-name: backend-cognito-infra
          artifact-name: backend-cognito-infrastructure
          pull-repository: true

      - name: Deploy
        id: deploy
        uses: govuk-one-login/github-actions/secure-pipelines/deploy-application@db4b3614f5f863f56a5356052262878ecec83b31 # 22/07/2024
        timeout-minutes: 15
        with:
          aws-role-arn: ${{ vars.COGNITO_DEPLOYMENT_ROLE_ARN }}
          artifact-bucket-name: ${{ vars.COGNITO_DEPLOYMENT_ARTIFACTS_BUCKET }}
          signing-profile-name: ${{ vars.SIGNING_PROFILE_NAME }}
          pipeline-name: ${{ vars.COGNITO_PIPELINE_NAME }}
          artifact-name: ${{ steps.build.outputs.artifact-name }}

  deploy-api:
    if: github.event_name == 'merge_group'
    name: Deploy API (dev)
    runs-on: ubuntu-latest
    timeout-minutes: 15
    environment:
      name: development
      url: ${{ steps.deploy.outputs.pipeline-url }}
    outputs:
      artifact-name: ${{ steps.build.outputs.artifact-name }}
      cache-key: ${{ steps.build.outputs.cache-key }}
      pipeline-url: ${{ steps.deploy.outputs.pipeline-url }}
    steps:
      - name: Build
        id: build
        uses: govuk-one-login/github-actions/sam/build-application@6144f39407b01c9b25b39537b3956deca9e32620 # 22/02/2024
        with:
          template: backend/api/api.template.yml
          manifest: backend/api/package.json
          base-dir: backend/api
          additional-artifact-paths: backend/api/state-machines
          cache-name: backend-api-infra
          artifact-name: backend-api-infrastructure
          pull-repository: true

      - name: Deploy
        id: deploy
        uses: govuk-one-login/github-actions/secure-pipelines/deploy-application@db4b3614f5f863f56a5356052262878ecec83b31 # 22/07/2024
        timeout-minutes: 15
        with:
          aws-role-arn: ${{ vars.API_DEPLOYMENT_ROLE_ARN }}
          artifact-bucket-name: ${{ vars.API_DEPLOYMENT_ARTIFACTS_BUCKET }}
          signing-profile-name: ${{ vars.SIGNING_PROFILE_NAME }}
          pipeline-name: ${{ vars.API_PIPELINE_NAME }}
          artifact-name: ${{ steps.build.outputs.artifact-name }}
          template: .aws-sam/build/template.yaml