name: Lambda Main Workflow

on:
  push:
    branches: [main, feature/document_upload]

env:
  AWS_REGION: eu-west-2

jobs:
  shared-lambda-terraform:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Deploy shared Lambda Config Terraform
        uses: ./.github/workflows/actions/terraform-deploy
        with:
          working_directory: ./deployment/lambda/lambda_shared
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

  lambda-ecr-example:
    runs-on: ubuntu-latest
    needs: shared-lambda-terraform 
    permissions:
      id-token: write
      contents: read

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Build and deploy Lambda example
        uses: ./.github/workflows/actions/lambda-deploy
        with:
          lambda_name: lambda_example
          dockerfile_path: ./deployment/lambda/lambda_example/docker/Dockerfile
          ecr_tf_dir: ./deployment/lambda/lambda_example/docker/
          lambda_tf_dir: ./deployment/lambda/lambda_example/
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}
          git-sha: ${{ github.sha }}
          git-ref: ${{ github.ref_name }}

  extractor-and-loader:
    runs-on: ubuntu-latest
    needs: shared-lambda-terraform 
    permissions:
      id-token: write
      contents: read

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Build and deploy Extractor & Loader Lambda
        uses: ./.github/workflows/actions/lambda-deploy
        with:
          lambda_name: extractor_and_loader
          dockerfile_path: ./deployment/lambda/extractor_and_loader/docker/Dockerfile
          ecr_tf_dir: ./deployment/lambda/extractor_and_loader/docker/
          lambda_tf_dir: ./deployment/lambda/extractor_and_loader/
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}
          git-sha: ${{ github.sha }}
          git-ref: ${{ github.ref_name }}