stage.yml

name: Build and Publish Docker Image

on:
    push:
        branches:
            - stage

jobs:
    build:
        permissions:
            id-token: write # This is required for requesting the JWT
        runs-on: ubuntu-24.04-arm
        steps:
            - name: Checkout code
              uses: actions/checkout@v3
            # - name: Set up Docker Buildx
            #  uses: docker/setup-buildx-action@v1
            - name: configure aws credentials
              uses: aws-actions/configure-aws-credentials@v4
              with:
                  role-to-assume: ${{ secrets.ACTIONS_ROLE_ARN }}
                  role-session-name: GitHub_to_AWS_via_FederatedOIDC
                  aws-region: us-east-2
            - name: Login to Amazon ECR
              id: login-ecr
              uses: aws-actions/amazon-ecr-login@v2
            - name: Build and Push Docker image
              env:
                  ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
                  REPOSITORY: ${{ vars.REPOSITORY }}
                  IMAGE_TAG: ${{ github.sha }}
                  DATABASE_URL: "file:./dev.db"
                  CLUSTER_NAME: ${{ secrets.CLUSTER_NAME }}
                  SERVICE_NAME: ${{ vars.REPOSITORY }}-stage-service
              run: |
                  docker build --output type=image,push=true --platform linux/arm64 -t $ECR_REGISTRY/$REPOSITORY:stage .
                  aws ecs update-service --cluster $CLUSTER_NAME --service $SERVICE_NAME --force-new-deployment --output text --query "service.serviceName" >/dev/null
                  echo "The ECS service will update now"