name: Deploy

# Auto-deploy on push to main disabled for now; manual trigger only.
on:
  workflow_dispatch:

concurrency:
  group: deploy-backend
  cancel-in-progress: false

permissions:
  id-token: write
  contents: read

jobs:
  deploy:
    name: Deploy to AWS
    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@af0f002e14a08cdbfd879c1183bfe7eb2604bce9 # v1.0.8
    with:
      cdk-dir: infra
      dotnet-version: "8.0.x"
      dotnet-publish-project: api/src/ProposalSystem.Api/ProposalSystem.Api.csproj
      python-version: "3.12"
      post-deploy-script: scripts/post-deploy.sh
    secrets:
      deploy-role-arn: ${{ secrets.AWS_DEPLOY_ROLE_ARN }}