assets.yaml

name: Assets

on:
  workflow_call:
    inputs:
      ref:
        type: string
        required: false
      account:
        description: "Environment to deploy"
        type: string
        required: true
      version:
        type: string
        required: true
      push:
        type: boolean
        default: false
        required: false

concurrency:
  group: assets-${{ inputs.account }}

jobs:
  build:
    name: Build${{ inputs.push && ' and Push' || '' }}
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: app/cdn
    env:
      ASSET_BUCKET: "vol-app-assets"
      ACCOUNT_NUMBER: ${{ vars[inputs.account == 'prod' && 'ACCOUNT_PROD' || 'ACCOUNT_NONPROD'] }}
      AWS_OIDC_ROLE: ${{ vars[inputs.account == 'prod' && 'ACCOUNT_PROD_TF_OIDC_ROLE' || 'ACCOUNT_NONPROD_TF_OIDC_ROLE'] }}
      AWS_REGION: ${{ vars.DVSA_AWS_REGION }}
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ inputs.ref || null }}
          sparse-checkout: app/cdn
          fetch-depth: ${{ !inputs.ref && 1 || 0 }}

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: "npm"
          cache-dependency-path: app/cdn/package.json

      - run: npm install --prefer-offline
        shell: bash

      - run: npm run build:production
        shell: bash

      - name: Configure AWS credentials
        if: ${{ inputs.push }}
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ env.AWS_OIDC_ROLE }}
          aws-region: ${{ env.AWS_REGION }}

      - name: Upload assets to CloudFront assets bucket
        if: ${{ inputs.push }}
        run: aws s3 cp ./public s3://${{ env.ACCOUNT_NUMBER }}-${{ env.ASSET_BUCKET }}/${{ inputs.version }}/ --recursive