ci.yml

name: Test and Deploy

on:
  workflow_dispatch:
  push:
    branches:
    - main
    - dev
    tags:
    - 'v*'
    paths:
      - 'pyproject.toml'
      - 'infrastructure/aws/**'
      - 'titiler/**'
      - '.pre-commit-config.yaml'
  pull_request:

env:
  LATEST_PY_VERSION: '3.12'

permissions:
  id-token: write
  contents: read


jobs:
  tests:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ['3.10', '3.11', '3.12', '3.13']

    steps:
      - uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v3
        with:
          version: "0.5.*" 
          enable-cache: true
    
      - name: Set up Python ${{ matrix.python-version }}
        run: uv python install ${{ matrix.python-version }}
      
      - name: Install dependencies
        run: |
          uv sync --all-extras

      - name: run pre-commit
        if: ${{ matrix.python-version == env.LATEST_PY_VERSION }}
        run: |
          uv run pre-commit run --all-files

      - name: Run tests
        run: uv run pytest

  cdk-checks:
    needs: [tests]
    runs-on: ubuntu-latest
    environment: dev
    if: github.event_name == 'pull_request'
    env:
      UV_PYTHON: 3.12
      CDK_DEFAULT_ACCOUNT: ${{ vars.CDK_DEFAULT_ACCOUNT }}
      CDK_DEFAULT_REGION: ${{ vars.CDK_DEFAULT_REGION }}
      STAGE: ${{ vars.STAGE }}
      VPC_ID: ${{ vars.VPC_ID }}
      TITILER_MULTIDIM_PYTHONWARNINGS: ignore
      TITILER_MULTIDIM_DEBUG: true
      TITILER_MULTIDIM_READER_ROLE_ARN: ${{ vars.TITILER_MULTIDIM_READER_ROLE_ARN }}
  
    defaults:
      run:
        working-directory: infrastructure/aws

    steps:
      - uses: actions/checkout@v4

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ vars.AWS_ROLE_ARN }}
          role-session-name: github-actions-pr
          aws-region: ${{ vars.CDK_DEFAULT_REGION }}

      - uses: ./.github/actions/cdk-deploy
        with:
          dir: 'infrastructure/aws'
          skip_deploy: 'true'