From 7df8622382787ae2329fb3c822fe6edd022f63fb Mon Sep 17 00:00:00 2001 From: Jarrod Lowe Date: Sat, 10 Aug 2024 14:10:04 +1200 Subject: [PATCH] more test workflaow --- .../workflows/environment-main-deploy.yaml | 41 +++++++++++++++++++ .github/workflows/environment-main-plan.yaml | 3 -- 2 files changed, 41 insertions(+), 3 deletions(-) create mode 100644 .github/workflows/environment-main-deploy.yaml diff --git a/.github/workflows/environment-main-deploy.yaml b/.github/workflows/environment-main-deploy.yaml new file mode 100644 index 00000000..ca71ff9e --- /dev/null +++ b/.github/workflows/environment-main-deploy.yaml @@ -0,0 +1,41 @@ +name: Environment Main - Apply + +on: + push: + branches: + - main + +permissions: + id-token: write + contents: read + pull-requests: write + +jobs: + envtest: + name: Environment Main - Apply + runs-on: ubuntu-latest + environment: main + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + steps: + - name: Checkout code + uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08 + - name: Configure AWS Access + uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 + with: + role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT }}:role/GitHubAction-Wildsea@${{ vars.ENVIRONMENT }} + role-session-name: GitHubTest + aws-region: ${{ vars.AWS_REGION }} + - name: terraform plan + uses: dflook/terraform-apply + with: + path: terraform/environment/github + variables: | + aws_account="${{ vars.AWS_ACCOUNT }}" + aws_region="${{ vars.AWS_REGION }}" + state_bucket="${{ vars.STATE_BUCKET }}" + environment="${{ vars.ENVIRONMENT }}" + backend_config: + bucket=${{ vars.STATE_BUCKET }} + key=${{ vars.ENVIRONMENT }}/terraform.tfstate + region=${{ vars.AWS_REGION }} diff --git a/.github/workflows/environment-main-plan.yaml b/.github/workflows/environment-main-plan.yaml index b44c8108..7bd9379c 100644 --- a/.github/workflows/environment-main-plan.yaml +++ b/.github/workflows/environment-main-plan.yaml @@ -2,9 +2,6 @@ name: Environment Main - Plan on: pull_request: {} - push: - branches: - - main permissions: id-token: write