buildspec.yml

version: 0.2
#https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html

#####
# Performs an infrastructure deployment.
# For Code Deployments see CircleCI and AWS CodeDeploy
#####

run-as: circleci

env:
  variables:
    #Terraform workspace that we operate in
    TF_DEV_WORKSPACE: Dev
    TF_WORKSPACE: Prod
    #The ref of the main branch we work against
    MAIN_BRANCH_REF: 'refs/heads/main'
    MAIN_BRANCH: 'main'
    #The ref of the dev branch we work against
    DEV_BRANCH_REF: 'refs/heads/dev'
    DEV_BRANCH: 'dev'
    #Metaflow requires a username to run
    USERNAME: 'codebuild'
  secrets-manager:
    #Pull in the default terraform cloud token
    PAGERDUTY_TOKEN: 'CodeBuild/Default:mozilla_pagerduty_token'
    GITHUB_ACCESS_TOKEN: 'CodeBuild/Default:github_access_token'

#All phases are ran within the pocket/pocket-build:prod docker image
phases:
  pre_build:
    run-as: circleci
    commands:
      - |
        . /home/circleci/.codebuild_shims_wrapper.sh
        echo $CODEBUILD_WEBHOOK_HEAD_REF
        echo Setting Github Access Token
        echo "//npm.pkg.github.com/:_authToken=${GITHUB_ACCESS_TOKEN}" > ~/.npmrc
        echo Setting environment variables
        cd .aws
        nvm install --no-progress
        nvm use
        npm ci
        tfenv install
        tfenv use
        if [ "$GIT_BRANCH" = "$DEV_BRANCH" ]; then NODE_ENV=development npm run synth; else npm run synth; fi
        cd cdktf.out/stacks/curation-tools-data-sync
        terraform init
  build:
    run-as: circleci
    commands:
      - echo Build started on `date`
      ### If the branch is not main and its not dev, lets do a plan on prod.
      - 'if [ "$CODEBUILD_WEBHOOK_HEAD_REF" != "$MAIN_BRANCH_REF" ] && [ "$CODEBUILD_WEBHOOK_HEAD_REF" != "$DEV_BRANCH_REF" ] && [ -z "$GIT_BRANCH" ]; then terraform plan -lock=false -refresh=false -no-color; fi'
      #### If the branch is dev, lets do an apply on dev.
      - 'if [ "$GIT_BRANCH" = "$DEV_BRANCH" ]; then TF_WORKSPACE=$TF_DEV_WORKSPACE TF_LOG=INFO terraform apply -auto-approve -no-color; fi'
      #### If the branch is main lets apply.
      - 'if [ "$GIT_BRANCH" = "$MAIN_BRANCH" ]; then terraform apply -auto-approve -no-color; fi'
  post_build:
    run-as: circleci
    commands:
      # get back to the root dir
      - cd ../../
      - echo Build completed on `date`