deploy.yml

name: Deploy

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '22'
      - name: NPM Install
        run: |
          npm ci
          rm -rf node_modules/@mongodb-js/zstd
          npm i --platform=linux --arch=arm64
      - name: Build
        run: npm run build
      - name: Summarize Lamdba deployment bundle sizes
        run: |
          echo '# Lambda Sizes' >> $GITHUB_STEP_SUMMARY
          echo '|Size|Build Directory|' >> $GITHUB_STEP_SUMMARY
          echo '|-|-|' >> $GITHUB_STEP_SUMMARY
          du -hs $(find build -name 'index.*js' -exec dirname {} \;) | perl -pe 's/^\s*/|/; s/(\s+)/|/; s/$/|/' >> $GITHUB_STEP_SUMMARY
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          path: build

  deploy:
    name: Deploy to AWS
    needs: build
    if: github.event_name == 'push' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
    strategy:
      fail-fast: false
      matrix:
        include:
          - env: dev
            url: https://dev.gcn.nasa.gov
          - env: test
            url: https://test.gcn.nasa.gov
          - env: prod
            url: https://gcn.nasa.gov
    environment:
      name: ${{ matrix.env }}
      url: ${{ matrix.url }}
    permissions:
      contents: read
      id-token: write
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '22'
      - name: NPM Install
        run: npm ci
      - name: Download artifacts
        uses: actions/download-artifact@v4
        with:
          merge-multiple: true
          path: build
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
          aws-region: us-east-1
      - name: Deploy
        run: npx arc deploy --prune --production --no-hydrate