pr-website-deploy.yml

name: PR Website Deploy
on:
  pull_request:

concurrency:
  # see https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#example-only-cancel-in-progress-jobs-or-runs-for-the-current-workflow
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  NX_PARALLEL: 6 # ubuntu-latest = 4-core CPU / 16 GB of RAM | macos-14-xlarge (arm) = 6-core CPU / 14 GB of RAM
  NX_PREFER_TS_NODE: true
  NX_VERBOSE_LOGGING: true

  BROWSERSLIST_IGNORE_OLD_DATA: true

  # Deploy host and URL
  # DEPLOY_BASE_PATH: ''
  DEPLOY_HOST: fluentuipr.z22.web.core.windows.net
  DEPLOY_URL: https://fluentuipr.z22.web.core.windows.net/${{ github.event.pull_request.number || github.ref_name }}
  DEPLOY_BASE_PATH: pull/${{github.event.pull_request.number}}

  IS_PR: ${{ github.event_name == 'pull_request' }}
  TARGET_BRANCH: ${{ github.event.pull_request.base.ref || '' }}
  # DEPLOY_BASE_PATH: ${{ github.event.pull_request.number ? 'pull/' + github.event.pull_request.number : 'heads/' + github.ref_name }}

  # GitHub Secrets for Azure access
  # This service principal ("subscription" is a misleading name) only has access to the fluentuipr storage account
  AZURE_SUBSCRIPTION: Azure PR deploy - NEW
  AZURE_STORAGE: fluentuipr

jobs:
  bundle:
    runs-on: macos-14-xlarge
    permissions:
      contents: 'read'
      actions: 'read'

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Derive appropriate SHAs for base and head for `nx affected` commands
        uses: nrwl/nx-set-shas@v4
        with:
          main-branch-name: 'master'

      - uses: actions/setup-node@v4
        with:
          cache: 'yarn'
          node-version: '20'

      - run: echo number of CPUs "$(getconf _NPROCESSORS_ONLN)"

      - run: yarn install --frozen-lockfile

      - name: Bundle
        if: github.event_name == 'pull_request'
        run: yarn nx affected -t bundle --nxBail

      - name: Build Storybooks
        if: github.event_name == 'pull_request'
        run: yarn nx affected -t build-storybook --nxBail

      - name: Generate PR Deploy Site
        if: github.event_name == 'pull_request'
        run: yarn nx run pr-deploy-site:generate:site

      - name: Upload WebSite artifacts
        uses: actions/upload-artifact@v3
        if: ${{ github.event_name == 'pull_request' }}
        with:
          name: pr-website-artifacts
          if-no-files-found: error
          path: |
            apps/pr-deploy-site/dist/

  deploy:
    runs-on: ubuntu-latest
    needs: ['bundle']
    steps:
      - name: Download WebSite artifacts
        uses: actions/download-artifact@v3
        with:
          name: pr-website-artifacts
          path: ./pr-deploy-site/

      - name: Upload PR WebSite
        continue-on-error: true
        if: github.event_name == 'pull_request'
        uses: azure/cli@v2
        with:
          azcliversion: latest
          inlineScript: |
            az storage blob upload-batch \
              --destination '$web' \
              --source ./pr-deploy-site \
              --subscription ${{ env.AZURE_SUBSCRIPTION }}
              --account-name ${{ env.AZURE_STORAGE }} \
              --destination-path ${{ env.DEPLOY_BASE_PATH }} \
              --auth-mode login \
              --overwrite

      - name: Save WebSite DEPLOY url
        run: echo ${{env.DEPLOY_HOST}}/${{ env.DEPLOY_BASE_PATH }} > website-deploy-url.txt

      - name: Save PR number
        run: echo ${{ github.event.number }} > pr.txt

      - uses: actions/upload-artifact@v3
        if: ${{ github.event_name == 'pull_request' }}
        with:
          name: pr-website-deploy-url
          if-no-files-found: error
          path: |
            website-deploy-url.txt
            pr.txt