deploy-to-lambda.yaml

name: Deploy Lambda Function

on:
  workflow_call:
    inputs:
      aws_account_id:
        required: true
        description: Destination AWS Account
        type: string

      lambda_function_name:
        required: true
        description: Name of the target Lambda Function
        type: string

      runs-on:
        required: false
        description: 'Platform to execute on. Default ["self-hosted", "cere-io-large"]'
        type: string
        default: '["self-hosted", "cere-network-large"]'

      aws_region:
        required: false
        description: Target AWS region. Defaults "us-west-2"
        default: us-west-2
        type: string

      build_files:
        required: false
        default: false
        description: Build static files?
        type: boolean

      build_container:
        required: false
        description: Base image to build
        type: string

      install_dependencies_command:
        required: false
        type: string

      install_packages_command:
        required: false
        description: Command to install packages
        type: string

      build_command:
        required: false
        description: Build command
        type: string

      path_to_application_files_to_upload:
        required: false
        default: ''
        description: Path to files to upload
        type: string

      client_path:
        required: false
        default: ''
        type: string

    secrets:
      NPM_TOKEN:
        required: false

jobs:
  build:
    if: "${{ inputs.build_files }}"
    name: Build Lambda Function
    runs-on: "${{ fromJSON(inputs.runs-on) }}"
    container:
      image: "${{ inputs.build_container }}"
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v3

      - name: Install system packages
        run: >
          apt-get update; 
          apt-get install -y zip;
          ${{ inputs.install_dependencies_command }}

      - name: Get npm cache directory
        id: npm-cache-dir
        working-directory: "${{ inputs.client_path }}"
        run: echo "npm_cache_dir=$(npm config get cache)" >> "$GITHUB_ENV"

      - name: Restore cache
        uses: actions/cache@v3
        id: npm-cache
        with:
          path: ${{ github.workspace }}/${{ inputs.client_path }}/${{ env.npm_cache_dir }}
          key: ${{ runner.os }}-node-${{ hashFiles('${{ inputs.client_path }}//package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node-

      - name: Install packages
        working-directory: "${{ github.workspace }}/${{ inputs.client_path }}"
        run: "${{ inputs.install_packages_command }}"
        env:
          NPM_TOKEN: "${{secrets.NPM_TOKEN}}"

      - name: Build
        working-directory: "${{ github.workspace }}/${{ inputs.client_path }}"
        env:
          CI: false
          NPM_TOKEN: "${{secrets.NPM_TOKEN}}"
        run: "${{ inputs.build_command }}"

      - name: Zip artifact
        working-directory: "${{ github.workspace }}/${{ inputs.client_path }}/${{ inputs.path_to_application_files_to_upload }}"
        run: |
          zip -qq -r "${{ inputs.lambda_function_name }}.zip" ./

      - name: Prepare artifact
        uses: actions/upload-artifact@v3
        with:
          name: ${{ inputs.lambda_function_name }}
          path: "${{ github.workspace }}/${{ inputs.client_path }}/${{ inputs.path_to_application_files_to_upload }}/${{ inputs.lambda_function_name }}.zip"

  archive:
    if: "${{ ! inputs.build_files }}"
    name: Prepare Artifact
    runs-on: "${{ fromJSON(inputs.runs-on) }}"
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v3

      - name: Zip artifact
        working-directory: "${{ github.workspace }}/${{ inputs.client_path }}/${{ inputs.path_to_application_files_to_upload }}"
        run: |
          zip -qq -r "${{ inputs.lambda_function_name }}.zip" ./

      - name: Prepare artifact
        uses: actions/upload-artifact@v3
        with:
          name: ${{ inputs.lambda_function_name }}
          path: "${{ github.workspace }}/${{ inputs.client_path }}/${{ inputs.path_to_application_files_to_upload }}/${{ inputs.lambda_function_name }}.zip"

  deploy:
    name: Deploy Lambda Function
    needs:
      - build
      - archive
    if: always() && (needs.build.result == 'success' || needs.archive.result == 'success')
    runs-on: "${{ fromJSON(inputs.runs-on) }}"
    timeout-minutes: 10
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Restore artifact
        uses: actions/download-artifact@v3
        with:
          name: ${{ inputs.lambda_function_name }}
          path: lambda

      - name: Configure aws credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-skip-session-tagging: true
          role-to-assume: "arn:aws:iam::${{ inputs.aws_account_id }}:role/github"
          role-session-name: "${{ github.event.repository.name }}"
          aws-region: "${{ inputs.aws_region }}"

      - name: Upload files
        run: |
          aws s3 mv \
            lambda/${{ inputs.lambda_function_name }}.zip \
            "s3://cere-deployments-${{ inputs.aws_account_id }}/lambda/${{ inputs.lambda_function_name }}.zip"

      - name: Deploy Function
        run: |
          aws lambda update-function-code \
            --function-name "${{ inputs.lambda_function_name }}" \
            --s3-bucket "cere-deployments-${{ inputs.aws_account_id }}" \
            --s3-key "lambda/${{ inputs.lambda_function_name }}.zip"