deploy.yaml

name: Test, Build, and Deploy

on:
  push:
    branches:
      - main

permissions:
  id-token: write
  contents: read 

env:
  TF_INPUT: false

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Node
        uses: actions/setup-node@v4.0.2

      - name: Install dependencies
        run: npm install

      - name: Test
        run: npm test

      - name: Build
        run: npm run build

      - name: "Configure AWS Credentials"
        uses: aws-actions/configure-aws-credentials@v4.0.2
        with:
          aws-region: us-east-1
          role-to-assume: "arn:aws:iam::110322115102:role/github-actions"

      - name: Set up Terraform
        uses: hashicorp/setup-terraform@v3.0.0

      - name: Initialize Terraform
        run: |
          cd terraform
          terraform init

      - name: Validate Terraform
        run: |
          cd terraform
          terraform validate

      - name: Deploy
        run: |
          cd terraform
          terraform apply -target aws_s3_object.site_files -auto-approve

      - name: install-aws-cli-action
        uses: unfor19/install-aws-cli-action@v1

      - name: Invalidate Cloudfront cache
        env: 
          DISTRIBUTION_ID: ${{ secrets.AWS_CLOUDFRONT_DISTRIBUTION_ID }}
        run: |
          aws cloudfront create-invalidation --distribution-id $DISTRIBUTION_ID --paths "/*"