Add CDK deploy action #12
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: deploy | |
| on: | |
| push: | |
| branches: [ 'main', 'feature/**'] | |
| tags: [ 'v*'] | |
| env: | |
| AWS_DEFAULT_REGION: us-east-1 | |
| AWS_DEFAULT_OUTPUT: json | |
| jobs: | |
| deploy-cdk: | |
| name: Deploy CDK | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write # This is required for requesting the JWT | |
| contents: read # This is required for actions/checkout | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - run: echo "Job triggered by ${{ github.event_name }} event." | |
| - run: echo "Job running on a ${{ runner.os }} server hosted by GitHub." | |
| - run: echo "Branch name is ${{ github.ref }} and repository is ${{ github.repository }}." | |
| - uses: actions/setup-python@v4 | |
| with: | |
| python-version: 3.11 | |
| - name: Install Poetry | |
| uses: snok/install-poetry@v1 | |
| with: | |
| virtualenvs-create: true | |
| virtualenvs-in-project: true | |
| installer-parallel: true | |
| - name: Install Poetry dependencies | |
| run: poetry install --no-interaction | |
| - name: Set up NodeJs | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: "20" | |
| - name: Install CDK | |
| run: | | |
| npm install -g aws-cdk | |
| # # MY OLD AUTH CONFIG (NOW WITH GITHUB OIDC TOKEN) | |
| # - name: Configure AWS credentials | |
| # uses: aws-actions/configure-aws-credentials@master | |
| # with: | |
| # aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY }} | |
| # aws-secret-access-key: ${{ secrets.AWS_SECRET_KEY }} | |
| # aws-region: "us-east-1" | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: ${{ env.AWS_DEFAULT_REGION }} | |
| role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/${{ secrets.AWS_DEPLOY_ROLE }} | |
| role-session-name: myGitHubActions | |
| # Sample STS get caller identity for tests | |
| - name: sts get-caller-identity | |
| run: | | |
| aws sts get-caller-identity | |
| - name: Synth CDK to CloudFormation Template | |
| run: | | |
| source .venv/bin/activate | |
| cdk synth | |
| # NOTE: for now no manual approvals are required | |
| - name: Deploy to AWS | |
| run: | | |
| source .venv/bin/activate | |
| cdk deploy --require-approval=never |