Deploy Website Preview to Amplify #456
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Website Preview to Amplify | |
| on: | |
| workflow_run: | |
| workflows: [ WebsitePreviewTrigger ] | |
| types: [ completed ] | |
| jobs: | |
| preview: | |
| permissions: | |
| id-token: write | |
| contents: read | |
| pull-requests: write | |
| statuses: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| - uses: ./.github/actions/download-artifact | |
| - id: website-metadata | |
| run: | | |
| pr_number="$(head -n 1 /tmp/artifacts/website-metadata.txt)" | |
| pr_commit="$(tail -n 1 /tmp/artifacts/website-metadata.txt)" | |
| { | |
| echo PR_COMMIT="$pr_commit" | |
| echo PR_NUMBER="$pr_number" | |
| echo BRANCH_NAME="pr-$pr_number" | |
| } >> "$GITHUB_ENV" | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| with: | |
| ref: ${{ env.PR_COMMIT }} | |
| - uses: ./.github/actions/commit-status/start | |
| with: | |
| name: "${{ github.workflow }} / ${{ github.job }} (pull_request_review)" | |
| git_ref: ${{ env.PR_COMMIT }} | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v5.0.0 | |
| with: | |
| role-to-assume: arn:aws:iam::${{ vars.RELEASE_PREVIEW_ACCOUNT_ID }}:role/${{ vars.WEBSITE_ROLE_NAME }} | |
| aws-region: ${{ vars.AMPLIFY_REGION }} | |
| - name: Get preview URL | |
| run: | | |
| APP_DOMAIN=$(aws amplify get-app --app-id ${{ vars.AMPLIFY_APP_ID_PREVIEW }} --query 'app.defaultDomain' --output text) | |
| PREVIEW_URL="https://${{ env.BRANCH_NAME }}.$APP_DOMAIN" | |
| echo PREVIEW_URL="$PREVIEW_URL" >> "$GITHUB_ENV" | |
| - name: Deploy website | |
| uses: ./.github/actions/deploy-website | |
| with: | |
| role: arn:aws:iam::${{ vars.RELEASE_PREVIEW_ACCOUNT_ID }}:role/${{ vars.WEBSITE_ROLE_NAME }} | |
| region: ${{ vars.AMPLIFY_REGION }} | |
| amplify-app-id: ${{ vars.AMPLIFY_APP_ID_PREVIEW }} | |
| amplify-branch-name: ${{ env.BRANCH_NAME }} | |
| s3-bucket: ${{ vars.AMPLIFY_S3_BUCKET_BETA }} | |
| s3-prefix: pr-${{ env.PR_NUMBER }}/ | |
| hugo-base-url: ${{ env.PREVIEW_URL }} | |
| - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | |
| env: | |
| PREVIEW_URL: ${{ env.PREVIEW_URL }} | |
| PR_COMMIT: ${{ env.PR_COMMIT }} | |
| with: | |
| script: | | |
| const commentBody = `**Preview deployment ready!** | |
| **Preview URL:** ${process.env.PREVIEW_URL} | |
| Built from commit \`${process.env.PR_COMMIT}\``; | |
| const existingComment = (await github.rest.issues.listComments({ | |
| issue_number: process.env.PR_NUMBER, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| })).data.find(comment => | |
| comment.user.login === 'github-actions[bot]' && | |
| comment.body.includes('**Preview deployment ready!**') | |
| ); | |
| if (existingComment) { | |
| await github.rest.issues.updateComment({ | |
| comment_id: existingComment.id, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); | |
| } else { | |
| await github.rest.issues.createComment({ | |
| issue_number: process.env.PR_NUMBER, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); | |
| } | |
| - if: always() | |
| uses: ./.github/actions/commit-status/end | |
| with: | |
| name: "${{ github.workflow }} / ${{ github.job }} (pull_request_review)" | |
| git_ref: ${{ env.PR_COMMIT }} |