deploy.yaml

name: Deploy to AWS

on:
  push:
    branches:
      - master

# You can authenticate AWS workloads using OIDC.
# @docs https://docs.github.com/ko/enterprise-cloud@latest/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services
permissions:
  id-token: write
  contents: read

env:
  AWS_REGION: ap-northeast-2
  AWS_ROLE: arn:aws:iam::755333364809:role/GithubS3Role
  UOSLIFE_TOKEN: ${{ secrets.UOSLIFE_TOKEN }}
  VITE_BASE_API_URL: ${{ secrets.VITE_BASE_API_URL }}

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2

      - name: Setup bun
        uses: oven-sh/setup-bun@v1

      - name: Install Dependencies
        env:
          VITE_BASE_API_URL: ${{ env.VITE_BASE_API_URL }}
          UOSLIFE_TOKEN: ${{ env.UOSLIFE_TOKEN }}
        run: bun install

      - name: Build
        run: bun run build

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-region: ${{ env.AWS_REGION }}
          role-to-assume: ${{ env.AWS_ROLE }}
          role-session-name: GithubS3RoleSession

      - name: Deploy to S3
        run: |
          aws s3 sync dist/ s3://uoslife-library-recap

      - name: Invalidate CloudFront Cache
        run: |
          aws cloudfront create-invalidation --distribution-id E358GJ8WE0C9JG --paths "/*"