deploy-cdk-sandbox.yml

name: Deploy CDK Sandbox Stack to AWS

on:
  push:
    branches:
      - cdk-sandbox

concurrency: ${{ github.workflow }}-${{ github.ref }}

jobs:
  deploy:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          - environment: hyp3-cdk
            domain: hyp3-cdk-sandbox.asf.alaska.edu
            template_bucket: cf-templates-1hz9ldhhl4ahu-us-west-2
            image_tag: test
            product_lifetime_in_days: 14
            default_credits_per_user: 0
            default_application_status: APPROVED
            cost_profile: DEFAULT
            deploy_ref: refs/heads/cdk-sandbox
            job_files: >-
              job_spec/AUTORIFT.yml
              job_spec/INSAR_GAMMA.yml
              job_spec/RTC_GAMMA.yml
              job_spec/INSAR_ISCE_BURST.yml
            instance_types: r6id.xlarge,r6id.2xlarge,r6id.4xlarge,r6id.8xlarge,r6idn.xlarge,r6idn.2xlarge,r6idn.4xlarge,r6idn.8xlarge
            default_max_vcpus: 640
            expanded_max_vcpus: 640
            required_surplus: 0
            security_environment: ASF
            ami_id: /aws/service/ecs/optimized-ami/amazon-linux-2023/recommended/image_id
            distribution_url: ''

    environment:
      name: ${{ matrix.environment }}
      url: https://${{ matrix.domain }}

    steps:
      - uses: actions/checkout@v4.2.2

      - uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.V2_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.V2_AWS_SECRET_ACCESS_KEY }}
          aws-session-token: ${{ secrets.V2_AWS_SESSION_TOKEN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - uses: actions/setup-python@v5
        with:
          python-version: 3.9

      - uses: ./.github/actions/deploy-hyp3
        with:
          TEMPLATE_BUCKET:  ${{ matrix.template_bucket }}
          STACK_NAME: ${{ matrix.environment }}
          DOMAIN_NAME: ${{ matrix.domain }}
          API_NAME: ${{ matrix.environment }}
          CERTIFICATE_ARN:  ${{ secrets.CERTIFICATE_ARN }}
          IMAGE_TAG: ${{ matrix.image_tag }}
          PRODUCT_LIFETIME: ${{ matrix.product_lifetime_in_days }}
          VPC_ID: ${{ secrets.VPC_ID }}
          SUBNET_IDS: ${{ secrets.SUBNET_IDS }}
          SECRET_ARN: ${{ secrets.SECRET_ARN }}
          DEFAULT_CREDITS_PER_USER: ${{ matrix.default_credits_per_user }}
          DEFAULT_APPLICATION_STATUS: ${{ matrix.default_application_status }}
          COST_PROFILE: ${{ matrix.cost_profile }}
          JOB_FILES: ${{ matrix.job_files }}
          DEFAULT_MAX_VCPUS: ${{ matrix.default_max_vcpus }}
          EXPANDED_MAX_VCPUS: ${{ matrix.expanded_max_vcpus }}
          MONTHLY_BUDGET: ${{ secrets.MONTHLY_BUDGET }}
          REQUIRED_SURPLUS: ${{ matrix.required_surplus }}
          ORIGIN_ACCESS_IDENTITY_ID: ${{ secrets.ORIGIN_ACCESS_IDENTITY_ID }}
          SECURITY_ENVIRONMENT: ${{ matrix.security_environment }}
          AMI_ID: ${{ matrix.ami_id }}
          INSTANCE_TYPES: ${{ matrix.instance_types }}
          DISTRIBUTION_URL: ${{ matrix.distribution_url }}
          AUTH_PUBLIC_KEY: ${{ secrets.AUTH_PUBLIC_KEY }}