Automated commit by github action: 12206219948 #1040
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build/Deploy to AWS | |
| on: | |
| # Runs on pushes targeting the default branch | |
| push: | |
| branches: ['main', 'stage'] | |
| paths-ignore: | |
| - 'README.md' | |
| pull_request: | |
| branches: | |
| - main | |
| # Allows you to run this workflow manually from the Actions tab | |
| workflow_dispatch: | |
| # Allow one concurrent deployment | |
| concurrency: | |
| group: ${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.pull_request.number) || github.event_name == 'push' && 'main' }} | |
| cancel-in-progress: true | |
| env: | |
| BASE_URL: '/' | |
| permissions: | |
| id-token: write # This is required for requesting the JWT | |
| contents: write | |
| pull-requests: write | |
| pages: write | |
| # A workflow run is made up of one or more jobs that can run sequentially or in parallel | |
| jobs: | |
| publish: | |
| runs-on: macos-latest-large | |
| steps: | |
| - name: Configure AWS credentials from Test account | |
| uses: aws-actions/configure-aws-credentials@v3 | |
| with: | |
| role-to-assume: arn:aws:iam::176038645705:role/github-action-role | |
| role-session-name: deploy-developer-site-infra-to-aws | |
| aws-region: us-east-1 | |
| # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it | |
| - name: Check out repo | |
| uses: actions/checkout@v3 | |
| - name: setup SAM | |
| uses: aws-actions/setup-sam@v2 | |
| - name: set env vars | |
| run: | | |
| if [ "${{ github.ref }}" = "refs/heads/main" ]; then | |
| echo "STACK=developer-sailpoint-site" >> $GITHUB_ENV | |
| elif [[ ${{ github.ref }} == refs/pull/* ]]; then | |
| PR_NUMBER=$(echo ${{ github.ref }} | awk -F '/' '{print $3}') | |
| echo "STACK=developer-sailpoint-site-$PR_NUMBER" >> $GITHUB_ENV | |
| elif [ "${{ github.ref }}" = "refs/heads/stage" ]; then | |
| echo "STACK=developer-sailpoint-site-stage" >> $GITHUB_ENV | |
| fi | |
| # push these files to AWS | |
| - name: run SAM build | |
| run: | | |
| sam build | |
| sam deploy --no-confirm-changeset --no-fail-on-empty-changeset --stack-name $STACK --s3-prefix $STACK --parameter-overrides ParameterKey=AuthUsername,ParameterValue='${{ secrets.AUTH_USERNAME }}' ParameterKey=AuthPassword,ParameterValue='${{ secrets.AUTH_PASSWORD }}' | |
| - name: Get S3 bucket location, cloudfront url, and api gateway url | |
| run: | | |
| export S3_BUCKET=$(aws cloudformation describe-stacks --stack-name $STACK --query "Stacks[0].Outputs[?OutputKey=='DeveloperSailpointWebS3BucketName'].OutputValue" --output text) | |
| echo "S3_BUCKET=$S3_BUCKET" >> $GITHUB_ENV | |
| export CLOUDFRONT_URL=$(aws cloudformation describe-stacks --stack-name $STACK --query "Stacks[0].Outputs[?OutputKey=='DeveloperSailpointCloudFrontDistributionDomainName'].OutputValue" --output text) | |
| echo "CLOUDFRONT_URL=$CLOUDFRONT_URL" >> $GITHUB_ENV | |
| export API_GATEWAY_URL=$(aws cloudformation describe-stacks --stack-name $STACK --query "Stacks[0].Outputs[?OutputKey=='DeveloperSailpointAPIGatewayEndpoint'].OutputValue" --output text) | |
| echo "API_GATEWAY_URL=$API_GATEWAY_URL" >> $GITHUB_ENV | |
| export API_GATEWAY_ID=$(aws cloudformation describe-stacks --stack-name $STACK --query "Stacks[0].Outputs[?OutputKey=='ApiGatewayRestApiId'].OutputValue" --output text) | |
| echo "API_GATEWAY_ID=$API_GATEWAY_ID" >> $GITHUB_ENV | |
| - name: set CORS policy on API Gateway | |
| run: | | |
| aws apigatewayv2 update-api --api-id $API_GATEWAY_ID --cors-configuration AllowOrigins='["https://${{ env.CLOUDFRONT_URL }}","https://developer.sailpoint.com"]',AllowMethods='["OPTIONS","GET","POST"]',AllowHeaders='["Content-Type"]' | |
| # Install and build Developer Community site | |
| - name: Build Developer Community site | |
| run: | | |
| echo "CMS_APP_API_ENDPOINT=$API_GATEWAY_URL" >> .env | |
| echo ${{ secrets.NPM_FONTAWESOME_CONFIG }} | base64 -d >> .npmrc | |
| export NODE_OPTIONS="--max_old_space_size=16384" | |
| export DOCUSAURUS_IGNORE_SSG_WARNINGS=true | |
| npm ci | |
| npm run gen-api-docs-all | |
| npm run build | |
| # push these files to AWS | |
| - name: Copy files to the test website with the AWS CLI | |
| run: | | |
| aws s3 sync ./build s3://$S3_BUCKET | |
| - name: Find Comment | |
| uses: peter-evans/find-comment@v2 | |
| id: find-comment | |
| with: | |
| issue-number: ${{ github.event.pull_request.number }} | |
| body-includes: Visit the preview URL for this PR | |
| continue-on-error: true | |
| - name: add cloudfront url to PR | |
| if: github.event_name == 'pull_request' | |
| uses: peter-evans/create-or-update-comment@v2 | |
| with: | |
| comment-id: ${{ steps.find-comment.outputs.comment-id }} | |
| issue-number: ${{ github.event.pull_request.number }} | |
| edit-mode: replace | |
| body: | | |
| 🌎🌎🌎 Visit the preview URL for this PR [HERE](https://${{ env.CLOUDFRONT_URL }}) | |
| built from commit ${{ github.event.pull_request.head.sha }} | |
| continue-on-error: true | |
| - name: deploy to prod | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/main' | |
| id: deploy_github_pages | |
| uses: crazy-max/ghaction-github-pages@v3 | |
| with: | |
| target_branch: gh-pages | |
| build_dir: build | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| publish-failure: | |
| runs-on: ubuntu-latest | |
| if: ${{ always() && (needs.publish.result == 'failure' || needs.publish.result == 'timed_out') }} | |
| needs: | |
| - publish | |
| steps: | |
| - name: Invoke GithubNotificationsFunction Lambda | |
| run: | | |
| curl -X POST \ | |
| -H "Content-Type: application/json" \ | |
| -d '{ | |
| "workflowName": "${{ github.job }}", | |
| "repositoryName": "${{ github.event.repository.name }}", | |
| "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" | |
| }' \ | |
| "${{ secrets.NOTIFICATIONS_FUNCTION_URL }}" |