fix: CDS-1747 get rid of iam permissions for shipper custom resource … #162
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| refToBuild: | |
| description: 'Branch, tag or commit SHA1' | |
| required: true | |
| type: string | |
| push: | |
| branches: [master] | |
| paths: | |
| - "**/template.yaml" | |
| - "**/template.yml" | |
| jobs: | |
| Publish: | |
| name: publish | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout when triggered by commit | |
| uses: actions/checkout@v4 | |
| if: "${{ inputs.refToBuild == null }}" | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - name: checkout when trigger manually | |
| uses: actions/checkout@v4 | |
| if: "${{ inputs.refToBuild != null }}" | |
| with: | |
| ref: ${{ inputs.refToBuild }} | |
| persist-credentials: false | |
| fetch-depth: 0 | |
| - uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.PUBLISH_ACCESS_KEY }} | |
| aws-secret-access-key: ${{ secrets.PUBLISH_SECRET_ACCESS_KEY }} | |
| aws-region: eu-central-1 | |
| - name: Get changed files | |
| id: changed-files | |
| uses: tj-actions/changed-files@v41 | |
| - name: Upload integrations files to s3 | |
| run: | | |
| changed_files_string="${{ steps.changed-files.outputs.all_changed_files }}" | |
| read -ra changed_files_array <<< "$changed_files_string" | |
| for changed_template in "${changed_files_array[@]}"; do | |
| if [[ $changed_template == */template.* ]]; then | |
| aws s3 cp $changed_template s3://cgx-cloudformation-templates/${changed_template} | |
| fi | |
| done |