build_and_deploy_hold.yml

name: Build and deploy with a hold state

on:
  push:
    tags:
      - "v*"
  workflow_dispatch: # allow manual run

jobs:
  call_build_US:
    uses: ./.github/workflows/build.yml
    with:
      region: US

  call_build_EU:
    uses: ./.github/workflows/build.yml
    with:
      region: EU

  call_extract_versions:
    uses: ./.github/workflows/extract_versions.yaml

  call_should_deploy_major_version:
    uses: ./.github/workflows/should_deploy_major_version.yml

  call_deploy_full_version:
    needs:
      - call_build_US
      - call_build_EU
      - call_extract_versions
    uses: ./.github/workflows/deploy_hold.yml
    with:
      directory: ${{ needs.call_extract_versions.outputs.full_version }}
      cache-control: "max-age=31536000"
    secrets:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

  call_deploy_major_version:
    needs:
      - call_build_US
      - call_build_EU
      - call_extract_versions
      - call_should_deploy_major_version
    if: ${{ needs.call_should_deploy_major_version.outputs.should_deploy_major_version }}
    uses: ./.github/workflows/deploy_hold.yml
    with:
      directory: ${{ needs.call_extract_versions.outputs.major_version }}
      cache-control: "max-age=43200"
    secrets:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

  call_deploy_minor_version:
    needs:
      - call_build_US
      - call_build_EU
      - call_extract_versions
    uses: ./.github/workflows/deploy_hold.yml
    with:
      directory: ${{ needs.call_extract_versions.outputs.minor_version }}
      cache-control: "max-age=43200"
    secrets:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

concurrency:
  group: ci-build-and-deploy-hold-${{ github.ref }}-1
  cancel-in-progress: true