name: Deploy

# Auto-deploy on push to main disabled for now; manual trigger only.
on:
  workflow_dispatch:

concurrency:
  group: deploy-backend
  cancel-in-progress: false

permissions:
  id-token: write
  contents: read

jobs:
  deploy:
    name: Deploy to AWS
    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main
    with:
      cdk-dir: infra
      dotnet-version: "8.0.x"
      dotnet-publish-project: api/src/ProposalSystem.Api/ProposalSystem.Api.csproj
      python-version: "3.12"
      post-deploy-script: scripts/post-deploy.sh
    secrets:
      deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}