deploy-to-cloudfront.yaml

name: Deploy to CloudFront

on:
  workflow_call:
    inputs:
      aws_account_id:
        required: true
        description: Destination AWS Account
        type: string

      build_container:
        required: true
        description: Base image to build
        type: string

      runs-on:
        required: false
        description: 'Platform to execute on. Default ["self-hosted", "cere-network-large"]'
        type: string
        default: '["self-hosted", "cere-network-large"]'

      build_static_files:
        required: false
        default: true
        description: Build static files?
        type: boolean

      install_dependencies_command:
        required: false
        type: string

      install_packages_command:
        required: false
        description: Command to install packages
        type: string

      build_command:
        required: false
        description: Build command
        type: string

      path_to_static_files_to_upload:
        required: false
        default: "build"
        description: Path to files to upload
        type: string

      client_path:
        required: false
        default: "."
        type: string

      s3_bucket_name:
        required: false
        description: Name of S3 bucket for CloudFront. Defaults to cloudfront_name
        type: string

      s3_delete_enabled:
        required: false
        description: Is delete enabled with new deploy to s3
        type: boolean
        default: true

      send_notification_to_slack:
        required: false
        type: boolean
        default: false

      disable_cache_restoring:
        required: false
        type: boolean
        default: false

    secrets:
      NPM_TOKEN:
        required: false
      SLACK_WEBHOOK:
        required: false

jobs:
  build:
    if: ${{ inputs.build_static_files }}
    name: Build static files
    runs-on: ${{ fromJSON(inputs.runs-on) }}
    container:
      image: ${{ inputs.build_container }}
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v3

      - name: Install system packages
        run: ${{ inputs.install_dependencies_command }}

      - name: Restore cache
        if: ${{ !inputs.disable_cache_restoring }}
        uses: actions/cache@v3
        with:
          path: '${{ inputs.client_path }}/node_modules'
          key: ${{ runner.os }}-modules-${{ hashFiles('${{ inputs.client_path }}/yarn.lock') }}

      - name: Install packages
        working-directory: ${{ inputs.client_path }}
        run: ${{ inputs.install_packages_command }}
        env:
          NPM_TOKEN: ${{secrets.NPM_TOKEN}}

      - name: Build
        working-directory: ${{ inputs.client_path }}
        env:
          CI: false
          NPM_TOKEN: ${{secrets.NPM_TOKEN}}
        run: ${{ inputs.build_command }}

      - name: Zip artifacts
        uses: montudor/action-zip@v1
        with:
          args: zip -qq -r artifacts.zip ${{ inputs.path_to_static_files_to_upload }}

      - name: Prepare artifacts
        uses: actions/upload-artifact@v3
        with:
          name: build
          path: ${{ github.workspace }}/artifacts.zip

  deploy:
    needs: build
    name: Deploy static files
    if: needs.build.result == 'success' || needs.build.result == 'skipped'
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Restore build
        if: ${{ inputs.build_static_files }}
        uses: actions/download-artifact@v3
        with:
          name: build
          path: artifacts

      - name: Unzip artifacts
        if: ${{ inputs.build_static_files }}
        uses: montudor/action-zip@v1
        with:
          args: unzip -qq artifacts/artifacts.zip

      - name: Checkout repository
        if: ${{ !inputs.build_static_files }}
        uses: actions/checkout@v3

      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-skip-session-tagging: true
          role-to-assume: arn:aws:iam::${{ inputs.aws_account_id }}:role/github
          role-session-name: ${{ github.event.repository.name }}
          aws-region: us-east-1

      - name: Upload files
        run: |
          args=('--metadata-directive=REPLACE' '--exclude ".*"')
          if [[ ${{inputs.s3_delete_enabled}} ]]; then
            args+=('--delete')
          fi
          aws s3 sync ${args[@]} \
            ${{ inputs.path_to_static_files_to_upload }}/ s3://${{ inputs.s3_bucket_name }}

      - name: Invalidate cache
        run: |
          for id in $(
            aws cloudfront list-distributions \
                --query 'DistributionList.Items[*].{id:Id,origin:Origins.Items[0].DomainName}[?starts_with(origin, `${{ inputs.s3_bucket_name }}`)].id' \
                --output text
          ); do 
            invalidation_id=$(
              aws cloudfront create-invalidation \
                --distribution-id $id \
                --paths "/*" \
                --query Invalidation.Id \
                --output text
            )
            aws cloudfront wait invalidation-completed \
              --distribution-id $id \
              --id ${invalidation_id}
          done

    outputs:
      fqdn: "https://${{ inputs.s3_bucket_name }}/"

  slack_notify:
    if: ${{ inputs.send_notification_to_slack }}
    needs: deploy
    name: Send notification to slack
    runs-on: ubuntu-latest
    timeout-minutes: 1
    steps:
      - uses: rtCamp/action-slack-notify@v2
        env:
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_USERNAME: 'GITHUB_ACTIONS'
          SLACK_ICON: 'https://github.com/cere-io/reusable-workflows/raw/master/Documentation/logo.ico'
          SLACK_FOOTER: ''