deploy-docs.yml

---
name: Deploy docs to Azure Storage static site

on:
  push:
    branches:
      - main
    paths:
      - 'terraform/**'
      - '.github/workflows/deploy-docs.yml'
      - 'docs/**'
      - 'includes/**'
      - 'useful_docs/**'
      - 'mkdocs.yml'
  workflow_dispatch:

jobs:
  build-docs:
    runs-on: ubuntu-latest
    permissions: 
      contents: read

    steps:
      - name: checkout
        uses: actions/checkout@v4

      - name: setup python
        uses: actions/setup-python@v5
        with:
          python-version: '3.12.3'
    
      - name: install mkdocs
        run: python3 -m pip install mkdocs mkdocs-material pymdown-extensions

      - name: build docs
        run: mkdocs build -d site/
    
      - name: Upload site directory
        uses: actions/upload-artifact@v4
        with:
          name: site
          path: site/
          retention-days: 1
        
      - name: Upload useful_docs directory
        uses: actions/upload-artifact@v4
        with:
          name: useful_docs
          path: useful_docs/
          retention-days: 1

  build-infra:

    runs-on: ubuntu-latest
    needs: build-docs

    permissions: 
      contents: read

    outputs:
      storage_account: ${{ steps.run-tf.outputs.STORAGE_ACCOUNT_NAME }}
      cdn_profile: ${{ steps.run-tf.outputs.CDN_PROFILE_NAME }}
      cdn_endpoint: ${{ steps.run-tf.outputs.CDN_ENDPOINT_NAME }}
      resource_group: ${{ steps.run-tf.outputs.RESOURCE_GROUP_NAME }}

    steps:
      - name: checkout
        uses: actions/checkout@v4

      - name: Download site directory
        uses: actions/download-artifact@v4
        with:
          name: site
          path: site/

      - name: Deploy terraform
        uses: hashicorp/setup-terraform@v3
        with:
            terraform_version: 1.9.5
            terraform_wrapper: false

      - name: Terraform version
        run: terraform -version

      - name: Run terraform
        id: run-tf
        env:
            ARM_ACCESS_KEY: ${{ secrets.ARM_ACCESS_KEY }}
            ARM_CLIENT_ID: ${{ secrets.ARM_CLIENT_ID }}
            ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
            ARM_SUBSCRIPTION_ID: ${{ secrets.ARM_SUBSCRIPTION_ID }}
            ARM_TENANT_ID: ${{ secrets.ARM_TENANT_ID }}
        run: |
          cd terraform/
          terraform init
          terraform apply -auto-approve

          echo "STORAGE_ACCOUNT_NAME=$(terraform output -raw storage_account_name)" >> $GITHUB_OUTPUT
          echo "CDN_PROFILE_NAME=$(terraform output -raw cdn_profile_name)" >> $GITHUB_OUTPUT
          echo "CDN_ENDPOINT_NAME=$(terraform output -raw cdn_endpoint_name)" >> $GITHUB_OUTPUT
          echo "RESOURCE_GROUP_NAME=$(terraform output -raw resource_group_name)" >> $GITHUB_OUTPUT


  push-files:
    needs: [build-docs, build-infra]
    runs-on: ubuntu-latest

    permissions: 
      contents: read

    steps:
      - name: Download site directory
        uses: actions/download-artifact@v4
        with:
          name: site
          path: site/

      - name: Download useful_docs directory
        uses: actions/download-artifact@v4
        with:
          name: useful_docs
          path: useful_docs/
  
      - name: Azure Login
        uses: azure/login@v2
        with:
          creds: '{"clientId":"${{ secrets.ARM_CLIENT_ID }}","clientSecret":"${{ secrets.ARM_CLIENT_SECRET }}","subscriptionId":"${{ secrets.ARM_SUBSCRIPTION_ID }}","tenantId":"${{ secrets.ARM_TENANT_ID }}"}'

      - name: Upload to blob storage
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az storage blob upload-batch --account-name ${{ needs.build-infra.outputs.storage_account }} -d '$web' --overwrite --source ./site
            az storage blob upload-batch --account-name ${{ needs.build-infra.outputs.storage_account }} -d '$web/useful_docs' --overwrite --source ./useful_docs
            

      - name: Purge CDN endpoint
        uses: azure/CLI@v2
        with:
          inlineScript: |
            az cdn endpoint purge --content-paths  "/*" --profile-name ${{ needs.build-infra.outputs.cdn_profile }} --endpoint-name ${{ needs.build-infra.outputs.cdn_endpoint }} --resource-group ${{ needs.build-infra.outputs.resource_group }}