Deployment #375

	name: Deployment

	on:
	workflow_dispatch:
	inputs:
	ref:
	description: "Version to deploy"
	required: true

	permissions:
	id-token: write
	contents: write

	env:
	STACK_NAME: ${{ vars.STACK_NAME }}
	AWS_REGION: ${{ vars.AWS_REGION }}
	FORCE_COLOR: 3
	JSII_SILENCE_WARNING_UNTESTED_NODE_VERSION: 1
	API_DOMAIN_NAME: ${{ vars.API_DOMAIN_NAME }}
	API_DOMAIN_ROUTE_53_ROLE_ARN: ${{ secrets.API_DOMAIN_ROUTE_53_ROLE_ARN }}

	jobs:
	deploy:
	runs-on: ubuntu-24.04

	environment: production

	steps:
	- uses: actions/checkout@v4
	with:
	ref: ${{ github.event.inputs.ref }}

	- name: Determine released version
	id: version
	run: \|
	git fetch --tags
	VERSION=`git describe --abbrev=0 --tags --always \| tr -d '\n'`
	echo "VERSION=$VERSION" >> $GITHUB_ENV

	- uses: actions/setup-node@v4
	with:
	node-version: "22.x"
	cache: "npm"

	- name: Install dependencies
	run: npm ci --no-audit

	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: ${{ secrets.AWS_ROLE }}
	aws-region: ${{ vars.AWS_REGION }}

	- run: npx cdk diff

	- name: Deploy solution stack
	run: npx cdk deploy --require-approval never

Provide feedback