Skip to content

Commit

Permalink
fixing workflow
Browse files Browse the repository at this point in the history
  • Loading branch information
caiocsgomes committed Mar 16, 2024
1 parent 25e7703 commit e328a4d
Show file tree
Hide file tree
Showing 2 changed files with 42 additions and 48 deletions.
1 change: 0 additions & 1 deletion .github/workflows/deploy.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
# Workflow name
name: S3 Deploy
on:
workflow_dispatch:
Expand Down
89 changes: 42 additions & 47 deletions .github/workflows/terraform.yaml
Original file line number Diff line number Diff line change
@@ -1,66 +1,61 @@
name: Terraform Deploy

on:
push:
branches:
- master
- master
paths:
- 'infra/**'
- .github/workflows/terraform.yaml


- 'infra/**'
- .github/workflows/terraform.yaml
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout

id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
jobs:
plan-and-approve:
runs-on: ubuntu-latest
env:
AWS_REGION: sa-east-1
steps:
- name: configure aws credentials
uses: aws-actions/[email protected]
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
role-session-name: GitHub_to_AWS_via_FederatedOIDC
aws-region: ${{ env.AWS_REGION }}
- name: install terraform
uses: hashicorp/setup-terraform@v2
- name: checkout repository
uses: actions/checkout@v3
with:
submodules: 'true'
- name: terraform init
run: terraform init
working-directory: infra
- name: terraform plan
run: terraform plan
working-directory: infra


- name: configure aws credentials
uses: aws-actions/[email protected]
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
role-session-name: GitHub_to_AWS_via_FederatedOIDC
aws-region: ${{ env.AWS_REGION }}
- name: install terraform
uses: hashicorp/setup-terraform@v2
- name: checkout repository
uses: actions/checkout@v3
with:
submodules: 'true'
- name: terraform init
run: terraform init
working-directory: infra
- name: terraform plan
run: terraform plan
working-directory: infra
execute-plan:
runs-on: ubuntu-latest
needs: plan-and-approve
environment: production # This is required for the approval step
env:
AWS_REGION: sa-east-1
steps:
- name: configure aws credentials
uses: aws-actions/[email protected]
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
role-session-name: GitHub_to_AWS_via_FederatedOIDC
aws-region: ${{ env.AWS_REGION }}
- name: install terraform
uses: hashicorp/setup-terraform@v2
- name: checkout repository
uses: actions/checkout@v3
with:
submodules: 'true'
- name: terraform init
run: terraform init
working-directory: infra
- name: terraform apply
run: terraform apply -auto-approve
working-directory: infra
- name: configure aws credentials
uses: aws-actions/[email protected]
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
role-session-name: GitHub_to_AWS_via_FederatedOIDC
aws-region: ${{ env.AWS_REGION }}
- name: install terraform
uses: hashicorp/setup-terraform@v2
- name: checkout repository
uses: actions/checkout@v3
with:
submodules: 'true'
- name: terraform init
run: terraform init
working-directory: infra
- name: terraform apply
run: terraform apply -auto-approve
working-directory: infra

0 comments on commit e328a4d

Please sign in to comment.