Merge branch 'master' into refactor-ci-workflow #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: push | |
| env: | |
| AWS_REGION: us-east-1 | |
| AWS_ROLE_DURATION: 3600 | |
| # role generated from https://github.com/Sceptre/sceptre-aws/blob/master/config/prod/gh-oidc-sceptre-tests.yaml | |
| AWS_ROLE: arn:aws:iam::743644221192:role/gh-oidc-sceptre-tests | |
| on: | |
| workflow_run: | |
| workflows: | |
| - check | |
| types: | |
| - completed | |
| push: | |
| branches: | |
| - '*' | |
| jobs: | |
| integration-tests: | |
| if: ${{ github.event.workflow_run.conclusion == 'success' }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Poetry | |
| uses: snok/install-poetry@v1 | |
| - name: Install dependencies | |
| run: poetry install --no-interaction --all-extras | |
| # Update poetry for https://github.com/python-poetry/poetry/issues/7184 | |
| - name: update poetry | |
| run: poetry self update --no-ansi | |
| - name: Setup Python | |
| id: setup-python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.10' | |
| cache: 'poetry' | |
| - name: Assume AWS role | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: ${{ env.AWS_REGION }} | |
| role-to-assume: ${{ env.AWS_ROLE }} | |
| role-session-name: GHA-${{ github.repository_owner }}-${{ github.event.repository.name }}-${{ github.run_id }} | |
| role-duration-seconds: ${{ env.AWS_ROLE_DURATION }} | |
| - name: run tests | |
| run: poetry run behave integration-tests/features --junit --junit-directory build/behave | |
| env: | |
| AWS_DEFAULT_REGION: eu-west-1 | |
| docker-build-push: | |
| needs: | |
| - integration-tests | |
| if: ${{ github.ref == 'refs/heads/master' }} | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Extract metadata (tags, labels) for Docker | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| # docker convention: edge tag refers to the very latest code | |
| - name: Build and push Docker image to sceptreorg/sceptre:${{ steps.meta.outputs.tags }} | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| push: true | |
| tags: sceptreorg/sceptre:edge | |
| labels: ${{ steps.meta.outputs.labels }} |