TCLOUD-4860: Create a workflow for releasing docs (#3943)

* TCLOUD-4860: Create a workflow for releasing docs

* TCLOUD-4860: Trigger action first time so it can be triggered manually

* TCLOUD-4860: Re-enable upload features; leave push trigger for now

* TCLOUD-4860: Add id-token write permission for OIDC

* TCLOUD-4860: Try a tweak to read the environment input

* TCLOUD-4860: Work around inputs limitation

The inputs are only available for a dispatch event.

* TCLOUD-4860: Another attempt to get a default input value

* TCLOUD-4860: Fixed typo

* TCLOUD-4860: Add cloudfront invalidation step

* TCLOUD-4860: Remove unneeded env var

* TCLOUD-4860: Remove push trigger

* TCLOUD-4860: Update version of cleanup action

Author: tiny-james

.github/workflows/deploy_docs_v2.yml

@@ -0,0 +1,97 @@
+name: Deploy Tiny Docs v2
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Deployment Environment'
+        required: true
+        default: 'staging'
+        type: choice
+        options:
+        - 'staging'
+        - 'production'
+
+# Need ID token write permission to use OIDC
+permissions:
+  id-token: write
+
+env:
+  TARGET: ${{ inputs.environment || 'staging' }}
+  ACCT: ${{ inputs.environment == 'production' && '990880627107' || '327995277200' }}
+  BUCKET: ${{ inputs.environment == 'production' && 'tiny-cloud-antora-docs-release' || 'tiny-cloud-antora-docs-preview' }}
+  DISTRIBUTION: ${{ inputs.environment == 'production' && 'E3LFU502SQ5UR' || 'E7DUUPEI08HNW'}}
+  RUN: run-${{ github.run_number }}-${{ github.run_attempt }}
+
+jobs:
+  build:
+    name: Build Docs and Deploy
+
+    if: github.repository == 'tinymce/tinymce-docs' && github.repository_owner == 'tinymce'
+
+    runs-on: ubuntu-latest
+
+    defaults:
+      run:
+        shell: bash
+
+    steps:
+    - name: Checkout branch
+      uses: actions/checkout@v5
+
+    - name: Setup Node.js
+      uses: actions/setup-node@v5
+      with:
+        cache: 'yarn'
+        node-version: 24
+
+    - name: Install dependencies
+      run: yarn install
+
+    - name: Build Website
+      run: yarn antora ./antora-playbook.yml
+
+    - name: Rename site folder to docs
+      run: |
+        mv ./build/site ./build/docs
+
+    - name: Rename sitemap.xml to antora-sitemap.xml
+      run: |
+        mv ./build/docs/sitemap.xml ./build/docs/antora-sitemap.xml
+
+    - name: configure aws credentials
+      uses: aws-actions/[email protected]
+      with:
+        role-to-assume: 'arn:aws:iam::${{ env.ACCT }}:role/${{ env.TARGET }}-tinymce-docs-update'
+        role-session-name: tinymce-docs-${{ env.TARGET }}-release
+        aws-region: us-east-1
+
+    - name: Upload website preview to S3
+      run: |
+        aws s3 sync ./build s3://${BUCKET}/main/${RUN}
+
+    - name: Create redirects on S3
+      uses: tinymce/[email protected]
+      with:
+        build: ./build/
+        redirects: ./redirects.json
+        bucket: ${{ env.BUCKET }}
+        prefix: main/${{ env.RUN }}
+        parallel: 10
+
+    - name: Update pointer to current run output
+      run: |
+        aws s3api put-object --bucket ${BUCKET} --key main/index.html --body .github/workflows/resources/empty.html --content-type text/html --metadata pointer=${RUN}
+
+    - name: Tag old versions for cleanup
+      uses: tinymce/[email protected]
+      with:
+        bucket: ${{ env.BUCKET }}
+        folder: main
+        parallel: 20
+
+    - name: Invalidate Cloudfront Cache
+      # sleep to wait for envoy's version pointer caching to expire
+      run: |
+        sleep 30s
+        aws cloudfront create-invalidation --distribution-id ${{ env.DISTRIBUTION }} --paths "/docs/*"