deploy.yml

# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".

name: Deploy
on:
  workflow_dispatch: {}
  push:
    branches:
      - main
jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    env:
      CI: "true"
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Set git identity
        run: |-
          git config user.name "Automation"
          git config user.email "github-actions@github.com"
      - name: Setup Node.js
        uses: actions/setup-node@v2.2.0
        with: {}
      - name: Cache Node Modules
        id: cache-node
        uses: actions/cache@v2
        with:
          path: node_modules
          key: node-modules-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        run: npm ci
        if: steps.cache-node.outputs.cache-hit != 'true'
      - name: Anti-tamper check
        run: git diff --exit-code
      - name: Build
        run: npx projen build
      - name: Anti-tamper check
        run: git diff --exit-code
      - name: Upload artifact
        uses: actions/upload-artifact@v2.1.1
        with:
          name: build-artifact
          path: cdk.out
  Secrets_demo:
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    environment: demo
    concurrency:
      group: Secrets_demo
      cancel-in-progress: false
    env:
      STAGE: demo
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Download build artifact
        uses: actions/download-artifact@v2
        with:
          name: build-artifact
          path: cdk.out
      - name: Setup Node.js
        uses: actions/setup-node@v2.2.0
        with: {}
      - name: Cache Node Modules
        id: cache-node
        uses: actions/cache@v2
        with:
          path: node_modules
          key: node-modules-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        run: npm ci
        if: steps.cache-node.outputs.cache-hit != 'true'
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.OIDC_ROLE }}
          role-duration-seconds: 1200
      - name: Deploy Secrets-demo
        run: npx cdk deploy --exclusively Secrets-demo --app cdk.out --require-approval never
  Datastore_demo:
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    environment: demo
    concurrency:
      group: Datastore_demo
      cancel-in-progress: false
    env:
      STAGE: demo
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Download build artifact
        uses: actions/download-artifact@v2
        with:
          name: build-artifact
          path: cdk.out
      - name: Setup Node.js
        uses: actions/setup-node@v2.2.0
        with: {}
      - name: Cache Node Modules
        id: cache-node
        uses: actions/cache@v2
        with:
          path: node_modules
          key: node-modules-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        run: npm ci
        if: steps.cache-node.outputs.cache-hit != 'true'
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.OIDC_ROLE }}
          role-duration-seconds: 1200
      - name: Deploy Datastore-demo
        run: npx cdk deploy --exclusively Datastore-demo --app cdk.out --require-approval never
  AsyncJobs_demo:
    needs:
      - build
      - Datastore_demo
      - Secrets_demo
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    environment: demo
    concurrency:
      group: AsyncJobs_demo
      cancel-in-progress: false
    env:
      STAGE: demo
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Download build artifact
        uses: actions/download-artifact@v2
        with:
          name: build-artifact
          path: cdk.out
      - name: Setup Node.js
        uses: actions/setup-node@v2.2.0
        with: {}
      - name: Cache Node Modules
        id: cache-node
        uses: actions/cache@v2
        with:
          path: node_modules
          key: node-modules-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        run: npm ci
        if: steps.cache-node.outputs.cache-hit != 'true'
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.OIDC_ROLE }}
          role-duration-seconds: 1200
      - name: Deploy AsyncJobs-demo
        run: npx cdk deploy --exclusively AsyncJobs-demo --app cdk.out --require-approval never
  Api_demo:
    needs:
      - build
      - Datastore_demo
      - Secrets_demo
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    environment: demo
    concurrency:
      group: Api_demo
      cancel-in-progress: false
    env:
      STAGE: demo
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Download build artifact
        uses: actions/download-artifact@v2
        with:
          name: build-artifact
          path: cdk.out
      - name: Setup Node.js
        uses: actions/setup-node@v2.2.0
        with: {}
      - name: Cache Node Modules
        id: cache-node
        uses: actions/cache@v2
        with:
          path: node_modules
          key: node-modules-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        run: npm ci
        if: steps.cache-node.outputs.cache-hit != 'true'
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.OIDC_ROLE }}
          role-duration-seconds: 1200
      - name: Deploy Api-demo
        run: npx cdk deploy --exclusively Api-demo --app cdk.out --require-approval never
  Dashboards_demo:
    needs:
      - build
      - AsyncJobs_demo
      - Api_demo
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    environment: demo
    concurrency:
      group: Dashboards_demo
      cancel-in-progress: false
    env:
      STAGE: demo
    steps:
      - name: Checkout
        uses: actions/checkout@v2
      - name: Download build artifact
        uses: actions/download-artifact@v2
        with:
          name: build-artifact
          path: cdk.out
      - name: Setup Node.js
        uses: actions/setup-node@v2.2.0
        with: {}
      - name: Cache Node Modules
        id: cache-node
        uses: actions/cache@v2
        with:
          path: node_modules
          key: node-modules-${{ hashFiles('package-lock.json') }}
      - name: Install dependencies
        run: npm ci
        if: steps.cache-node.outputs.cache-hit != 'true'
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: us-east-1
          role-to-assume: ${{ secrets.OIDC_ROLE }}
          role-duration-seconds: 1200
      - name: Deploy Dashboards-demo
        run: npx cdk deploy --exclusively Dashboards-demo --app cdk.out --require-approval never