Merge pull request #119 from mattwigway/new-unc-forms #34
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: AWS Auth + Welcome Email | |
| on: | |
| push: | |
| branches: [ main ] | |
| paths: | |
| 'configs/**.json' | |
| env: | |
| AWS_ACCT_ID: ${{ secrets.AWS_ACCT_ID }} | |
| AWS_REGION : 'us-west-2' | |
| IAM_ROLE: ${{ secrets.ROLE_NAME }} | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| changed_files: | |
| runs-on: ubuntu-latest # windows-latest || macos-latest | |
| name: Get config file name | |
| outputs: | |
| config-file-name: ${{ steps.config-file-name.outputs.CONFIG_FILES}} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 # OR "2" -> To retrieve the preceding commit. | |
| - name: Get changed files | |
| id: get-changed-files | |
| uses: tj-actions/changed-files@v40 | |
| # NOTE: `since_last_remote_commit: true` is implied by default and falls back to the previous local commit. | |
| - name: List all changed files | |
| id: config-file-name | |
| run: | | |
| echo ${{ steps.get-changed-files.outputs.all_changed_files }} | |
| changedfiles=() | |
| for file in ${{ steps.get-changed-files.outputs.all_changed_files }}; do | |
| if [[ "$file" == *nrel-op.json ]]; then | |
| changedfiles+=("${file}") | |
| echo "The name of the config file is: ${file}." | |
| fi | |
| done | |
| echo "final changedfiles array: ${changedfiles[*]}" | |
| echo "CONFIG_FILES=${changedfiles[*]}" >> "$GITHUB_OUTPUT" | |
| AssumeRoleAndCallIdentity: | |
| name: AWS Authentication + Sending Welcome Email | |
| needs: changed_files | |
| if: always() | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Git clone the repository | |
| uses: actions/checkout@v3 | |
| - name: configure aws credentials | |
| uses: aws-actions/[email protected] | |
| with: | |
| role-to-assume: arn:aws:iam::${{ env.AWS_ACCT_ID }}:role/${{ env.IAM_ROLE }} | |
| role-session-name: GitHub_to_AWS_via_FederatedOIDC | |
| aws-region: ${{ env.AWS_REGION }} | |
| # Hello from AWS: WhoAmI | |
| - name: Sts GetCallerIdentity | |
| run: | | |
| aws sts get-caller-identity --debug | |
| - name: Install Boto3 | |
| run: pip install boto3 | |
| - name: Run email-config.py | |
| run: | | |
| echo "changed files string: ${{ needs.changed_files.outputs.config-file-name }}" | |
| for config_file in ${{ needs.changed_files.outputs.config-file-name }}; do | |
| echo "config file name ${config_file}" | |
| python email_automation/email-config.py -g ${config_file} | |
| done |