GitHub action to automate redeployment of ECS container in staging

Author: DriesVerachtert

.github/workflows/run-checks.yml

@@ -3,9 +3,9 @@ name: Lint, Format, Test, Build
 on:
   push:
     branches:
-      - "*"
-      - "!main"
-      - "!develop"
+      - '*'
+      - '!main'
+      - '!develop'
   workflow_dispatch:
 
 jobs:
@@ -19,7 +19,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 23
-          cache: "npm"
+          cache: 'npm'
 
       - name: Install Node.js packages
         run: npm ci
@@ -34,7 +34,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 23
-          cache: "npm"
+          cache: 'npm'
 
       - name: Install Node.js packages
         run: npm ci
@@ -52,7 +52,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 23
-          cache: "npm"
+          cache: 'npm'
 
       - name: Install Node.js packages
         run: npm ci
@@ -70,7 +70,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 23
-          cache: "npm"
+          cache: 'npm'
 
       - name: Install Node.js packages
         run: npm ci
@@ -90,7 +90,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: 23
-          cache: "npm"
+          cache: 'npm'
 
       - name: Install Node.js packages
         run: npm ci

.github/workflows/staging-redeploy.yml

@@ -0,0 +1,31 @@
+name: Redeploy ECS container in STAGING
+
+permissions:
+  id-token: write # Required for OIDC authentication
+  contents: read # Standard permission for GitHub Actions
+
+on:
+  workflow_run:
+    workflows: ['Publish STAGING image']
+    types:
+      - completed
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ vars.AWS_STAGING_ECS_REDEPLOY_ROLE_ARN }}
+          aws-region: ${{ vars.AWS_STAGING_REGION }}
+
+      - name: Update ECS Service
+        run: |
+          aws ecs update-service \
+            --cluster ${{ vars.AWS_STAGING_ECS_CLUSTER }} \
+            --service ${{ vars.AWS_STAGING_ECS_SERVICE }} \
+            --force-new-deployment

.gitignore

@@ -205,3 +205,4 @@ certificates
 notes.md
 
 .VSCodeCounter
+*~