deploy.yml

name: Chained Deploy
run-name: Chained Deploy Layer for ${{ github.ref_name }} to ${{ inputs.app_name }} ${{ inputs.environment || (github.event_name == 'release' && 'prod') || 'nonprod' }}

on:
  workflow_call:
    inputs:
      app_name:
        description: "name of application folder under infra directory"
        required: true
        type: string
      environment:
        description: "the name of the application environment (e.g. dev, staging, prod)"
        required: true
        type: string

concurrency: cd-${{inputs.app_name}}-${{ inputs.environment }}

jobs:
  build-and-publish:
    name: Build
    uses: ./.github/workflows/build-and-publish.yml
    with:
      app_name: ${{ inputs.app_name }}
      ref: ${{ github.ref }}

  database-migrations:
    name: Database migrations
    uses: ./.github/workflows/database-migrations.yml
    needs: [build-and-publish]
    with:
      app_name: ${{ inputs.app_name }}
      environment: ${{ inputs.environment }}

  deploy:
    name: Deploy
    runs-on: ubuntu-22.04
    needs: [database-migrations]
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v4
      - uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: 1.9.7
          terraform_wrapper: false

      - name: Configure AWS credentials
        uses: ./.github/actions/configure-aws-credentials
        with:
          app_name: ${{ inputs.app_name }}
          environment: ${{ inputs.environment }}

      - name: Deploy release
        run: make release-deploy \
          APP_NAME=${{ inputs.app_name }} \
          ENVIRONMENT=${{ inputs.environment }}