pse.dev/.github/workflows/deploy.yml

name: Deploy
on:
  #push:
  #  branches: [main]
  workflow_dispatch:
    inputs:
      build:
        description: "Build trigger"
        required: true
        default: "enable"
        type: choice
        options:
          - enable
          - disable

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  deploy:
    runs-on: ubuntu-latest
    env:
      DATA: ${{ github.event.inputs.build }}
    permissions:
      id-token: write
      contents: read

    steps:
      - name: Check branch
        run: |
            if [ "$GITHUB_REF_NAME" != "main" ]; then
              echo "Operation not permitted"
              exit 1
            fi

      - name: Checkout
        uses: actions/checkout@v2
        with:
          persist-credentials: false
  
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: arn:aws:iam::490752553772:role/pse-web-ecs-deploy-slc
          role-duration-seconds: 1800
          aws-region: eu-central-1
  
      - name: Build and Push images to ECR
        run: |
            .github/scripts/build.sh ${{ env.DATA }}
  
      - name: Update Deployment
        run: |
            .github/scripts/deploy.sh