[DRAFT] Automated Preprod Deploy workflow

[ballPointPenguin]

See Deploy README

Changes

• Creates a ./deploy/ folder with a basic python project for deploy concerns
• Rewrites the clojure/babashka deploy-static-assets.clj as python deploy-static-assets.py
• Add deploy/README.md with general instructions for deployment
• Create a github workflow deploy-preprod.yml file (untested), to be triggered on updates to edge
• Remove ignored ACL settings from JSON Headers

Needs

Github Secrets to add:

• AWS_ROLE_ARN
• HEROKU_API_KEY
• HEROKU_EMAIL

(possibly others)

Need to ensure that the environment is complete for building static assets on github

Works Now

Running python deploy/deploy-static-assets.py --bucket edge.static-assets.pol.is works nicely (provided you are authenticated with aws sso).

[tevko]

This is awesome - I'm assuming the readme instructions are just in case a user would want to do this manually?

[ballPointPenguin]

This is awesome - I'm assuming the readme instructions are just in case a user would want to do this manually?

yes exactly

[tevko]

@ballPointPenguin secrets added