update.yml

name: TDR Update Auth Server Configuration
on:
  workflow_dispatch:
    inputs:
      environment:
        description: 'Environment'
        required: true
        default: 'intg'
      update-policy:
        description: 'The update policy'
        required: true
        default: "SKIP"
permissions:
  id-token: write
jobs:
  update:
    environment: ${{ github.event.inputs.environment }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - id: role-name
        run: |
          import os
          with open(os.environ['GITHUB_OUTPUT'], 'a') as fh: 
            print(f"role-name=TDRGitHubRunKeycloakUpdateRole{'${{ github.event.inputs.environment }}'.title()}", file=fh)
        shell: python
      - uses: aws-actions/configure-aws-credentials@v1
        with:
          role-to-assume: arn:aws:iam::${{ secrets.ACCOUNT_NUMBER }}:role/${{ steps.role-name.outputs.role-name }}
          aws-region: eu-west-2
          role-session-name: RunKeycloakUpdateTask
      - run: |
          pip install boto3
          python .github/scripts/run_ecs_task.py ${{ secrets.ACCOUNT_NUMBER }} ${{ github.event.inputs.environment }} ${{ github.event.inputs.update-policy }}