develop.yml

# this workflow is triggered when a PR to the develop branch is merged.
# the following steps are performed:
#   - build docker image and push to ECR (image tag is the git describe output as well as 'latest')
#   - deploy image to staging environment
name: develop branch workflow
on:
  push:
    branches:
      - develop
      - main # temporary until we get a "develop" branch set up
      - jt-iss-28-design-changes # temporary branch for testing, to be removed once workflow is verified
permissions:
  id-token: write
jobs:
  build-push-deploy:
    runs-on: ubuntu-latest
    steps:
      - name: checkout code
        id: checkout-code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: save command output
        id: save-command-output
        run: |
          echo "DOCKER_REPO=analytics-dashboard-ui" >> $GITHUB_ENV
          echo "DOCKER_TAG=$(git describe)" >> $GITHUB_ENV

      - name: configure aws credentials
        id: configure-aws-credentials
        uses: aws-actions/configure-aws-credentials@v6.1.0
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: build and push docker image
        id: build-push-docker-image
        run: |
          docker buildx build \
            --platform linux/arm64 \
            --push \
            -t ${{ steps.login-ecr.outputs.registry }}/${{ env.DOCKER_REPO }}:${{ env.DOCKER_TAG }} \
            -t ${{ steps.login-ecr.outputs.registry }}/${{ env.DOCKER_REPO }}:latest \
            -t ${{ steps.login-ecr.outputs.registry }}/${{ env.DOCKER_REPO }}:develop \
            .