-
Notifications
You must be signed in to change notification settings - Fork 4
119 lines (100 loc) · 3.74 KB
/
aws-deploy.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
# Workflow derived from https://github.com/r-lib/actions/tree/master/examples
# Need help debugging build failures? Start at https://github.com/r-lib/actions#where-to-find-help
name: aws-deploy
on:
pull_request:
branches: ['*']
push:
branches: ['*']
concurrency: ci-${{ github.ref }}
jobs:
tests:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v3
- name: Static Analysis
uses: pre-commit/action@v3.0.0
- name: cdk synth
uses: youyo/aws-cdk-github-actions@v2
with:
cdk_subcommand: 'synth'
actions_comment: false
cdk_args: '--context env=dev --debug'
- name: Install dependencies
run: pip install -r requirements.txt -r requirements-dev.txt
- name: Run unit tests
run: python -m pytest tests/ -s -v
cdk-deploy-dev:
runs-on: ubuntu-latest
if: ${{ github.ref == 'refs/heads/dev' }}
needs: tests
permissions:
id-token: write
contents: read
packages: write
steps:
- name: Checkout repository
uses: actions/checkout@v3
# Authenticate to AWS using GitHub OIDC
- name: Assume AWS Role
uses: aws-actions/configure-aws-credentials@v1
with:
aws-region: us-east-1
role-to-assume: arn:aws:iam::631692904429:role/sagebase-github-oidc-sage-bionetworks-schematic-infra
role-session-name: GitHubActions-${{ github.repository_owner }}-${{ github.event.repository.name }}-${{ github.run_id }}
role-duration-seconds: 1200
- name: cdk deploy to org-sagebase-dnt-dev (631692904429)
uses: youyo/aws-cdk-github-actions@v2
with:
cdk_subcommand: 'deploy'
cdk_args: '--require-approval never --context env=dev --progress events --debug'
actions_comment: false
cdk-deploy-staging:
runs-on: ubuntu-latest
if: ${{ github.ref == 'refs/heads/staging' }}
needs: tests
permissions:
id-token: write
contents: read
packages: write
steps:
- name: Checkout repository
uses: actions/checkout@v3
- name: Assume AWS Role
uses: aws-actions/configure-aws-credentials@v1
with:
aws-region: us-east-1
role-to-assume: arn:aws:iam::878654265857:role/sagebase-github-oidc-sage-bionetworks-schematic-infra
role-session-name: GitHubActions-${{ github.repository_owner }}-${{ github.event.repository.name }}-${{ github.run_id }}
role-duration-seconds: 1200
- name: cdk deploy to org-sagebase-dca-prod (878654265857)
uses: youyo/aws-cdk-github-actions@v2
with:
cdk_subcommand: 'deploy'
cdk_args: '--require-approval never --context env=staging --progress events --debug'
actions_comment: false
cdk-deploy-prod:
runs-on: ubuntu-latest
if: ${{ github.ref == 'refs/heads/prod' }}
needs: tests
permissions:
id-token: write
contents: read
packages: write
steps:
- name: Checkout repository
uses: actions/checkout@v3
- name: Assume AWS Role
uses: aws-actions/configure-aws-credentials@v1
with:
aws-region: us-east-1
role-to-assume: arn:aws:iam::878654265857:role/sagebase-github-oidc-sage-bionetworks-schematic-infra
role-session-name: GitHubActions-${{ github.repository_owner }}-${{ github.event.repository.name }}-${{ github.run_id }}
role-duration-seconds: 1200
- name: cdk deploy to org-sagebase-dca-prod (878654265857)
uses: youyo/aws-cdk-github-actions@v2
with:
cdk_subcommand: 'deploy'
cdk_args: '--require-approval never --context env=prod --progress events --debug'
actions_comment: false