Merge pull request #17186 from cagov/create-pull-request/patch #11702
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: 11ty build Staging Site | |
| # site: https://staging.cannabis.ca.gov | |
| # s3 bucket http://staging.cannabis.ca.gov.live.s3-website-us-west-1.amazonaws.com | |
| # editor: https://api.cannabis.ca.gov | |
| on: | |
| workflow_run: | |
| workflows: ["Update static content [staging]"] | |
| types: ['completed'] | |
| branches: | |
| - staging | |
| push: | |
| branches: | |
| - staging | |
| concurrency: | |
| group: sync_staging_deployments | |
| cancel-in-progress: true | |
| jobs: | |
| build_deploy: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@master | |
| - uses: actions/setup-node@master | |
| with: | |
| node-version: 18.16.0 | |
| cache: 'npm' | |
| - name: Install packages | |
| run: | | |
| mkdir dist | |
| npm ci --production | |
| - name: Build 11ty | |
| run: | | |
| SITE_ENV=staging DOMAIN=staging.cannabis.ca.gov npm run build | |
| - name: Write robots.txt | |
| run: | | |
| echo 'User-agent: *' > docs/robots.txt | |
| echo 'Disallow: /' >> docs/robots.txt | |
| # deploy built files to separate branch that contains only built files that github pages uses to serve site | |
| - name: Deploy to github pages branch | |
| uses: peaceiris/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| publish_dir: ./docs | |
| publish_branch: deploy_staging | |
| # Set up AWS CLI | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@master | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID_MUKHTAR }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY_MUKHTAR }} | |
| aws-region: us-west-1 | |
| - name: Deploy to S3 (staging.cannabis.ca.gov) | |
| run: aws s3 sync --follow-symlinks --delete ./docs s3://staging.cannabis.ca.gov.live --exclude 'wp-content/uploads/*' | |
| # Reset the cache-control headers on static assets on S3 bucket | |
| - name: Reset cache-control on static files | |
| uses: prewk/s3-cp-action@v2 | |
| with: | |
| aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID_MUKHTAR }} | |
| aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY_MUKHTAR }} | |
| aws_region: 'us-west-1' # optional: defaults to us-east-1 | |
| source: './docs/fonts' | |
| dest: 's3://staging.cannabis.ca.gov.live/fonts' | |
| flags: --recursive --cache-control max-age=15552000 | |
| - name: Reset cache-control on assets | |
| uses: prewk/s3-cp-action@v2 | |
| with: | |
| aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID_MUKHTAR }} | |
| aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY_MUKHTAR }} | |
| aws_region: 'us-west-1' # optional: defaults to us-east-1 | |
| source: './docs/assets' | |
| dest: 's3://staging.cannabis.ca.gov.live/assets' | |
| flags: --recursive --cache-control max-age=15552000 | |
| # - name: Deploy redirects | |
| # run: | | |
| # AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID_MUKHTAR }} AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY_MUKHTAR }} npm run deploy:redirects | |
| # Invalidate Cloudfront production distribution | |
| - name: Invalidate Cloudfront (cannabis.ca.gov) | |
| run: aws cloudfront create-invalidation --distribution-id E3DT30NBQC365Z --paths "/*" |