cdn_deploy.yml

name: 🚩 Deploy to CDN

on:
  push:
    branches:
      - main
    tags:
      - "*"
    # Workflow is triggered only if src changes
    paths:
      - components/**
      - i18n/**
      - react/**
      - theme/**
  # Allow manual trigger (workflow_dispatch)
  workflow_dispatch:

jobs:
  publish:
    runs-on: ubuntu-latest
    # These permissions are needed to interact with GitHub's OIDC Token endpoint
    permissions:
      id-token: write
      contents: write

    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - uses: pnpm/action-setup@v2
        with:
          version: 8

      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: 18
          cache: "pnpm"
          cache-dependency-path: "pnpm-lock.yaml"

      - name: Install dependencies
        working-directory: .
        run: CI=true pnpm install

      - name: Build Dist
        working-directory: .
        run: pnpm build

      - name: Configure AWS Creds
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/${{ secrets.AWS_OIDC_ROLE }}
          aws-region: us-east-1

      - name: Upload to S3
        env:
          # latest for main branch, else tag name
          S3_PATH: ${{ github.ref_name == 'main' && 'latest' || github.ref_name }}
        run: |
          # Sync the necessary files to S3
          aws s3 sync --delete \
          --exclude "*" \
          --include='dist/*' \
          --include "components/*" \
          --include "react/*" \
          --include "theme/*" \
          --include "i18n/*.xliff" \
          ${{ github.workspace }} \
          s3://${{ vars.S3_BUCKET_NAME }}/${{ env.S3_PATH }}/