Run AWS commands via dockerized aws-cli
Some checks failed
Deploy Hello Lambda CFT / deploy (push) Failing after 3s
Some checks failed
Deploy Hello Lambda CFT / deploy (push) Failing after 3s
This commit is contained in:
parent
e8234e5e12
commit
17ab6b480e
1 changed files with 26 additions and 9 deletions
|
|
@ -28,13 +28,13 @@ jobs:
|
||||||
echo "SRC_DIR=${SRC_DIR}" >> "$GITHUB_ENV"
|
echo "SRC_DIR=${SRC_DIR}" >> "$GITHUB_ENV"
|
||||||
echo "Using source directory: ${SRC_DIR}"
|
echo "Using source directory: ${SRC_DIR}"
|
||||||
|
|
||||||
- name: Ensure AWS CLI
|
- name: Ensure Docker is available
|
||||||
run: |
|
run: |
|
||||||
if ! command -v aws >/dev/null 2>&1; then
|
if ! command -v docker >/dev/null 2>&1; then
|
||||||
echo "aws CLI is not available on this runner. Install aws cli on the runner host/container and rerun."
|
echo "docker is not available on this runner."
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
aws --version
|
docker --version
|
||||||
|
|
||||||
- name: Check required AWS secrets
|
- name: Check required AWS secrets
|
||||||
run: |
|
run: |
|
||||||
|
|
@ -50,19 +50,36 @@ jobs:
|
||||||
- name: Verify AWS identity
|
- name: Verify AWS identity
|
||||||
run: |
|
run: |
|
||||||
set -e
|
set -e
|
||||||
if ! aws sts get-caller-identity; then
|
if ! docker run --rm \
|
||||||
|
-e AWS_ACCESS_KEY_ID \
|
||||||
|
-e AWS_SECRET_ACCESS_KEY \
|
||||||
|
-e AWS_SESSION_TOKEN \
|
||||||
|
-e AWS_DEFAULT_REGION \
|
||||||
|
amazon/aws-cli:2 sts get-caller-identity; then
|
||||||
echo "AWS authentication failed. If using STS creds, regenerate and update all 3 secrets: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN."
|
echo "AWS authentication failed. If using STS creds, regenerate and update all 3 secrets: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN."
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
- name: Validate CFT
|
- name: Validate CFT
|
||||||
run: |
|
run: |
|
||||||
aws cloudformation validate-template \
|
docker run --rm \
|
||||||
--template-body "file://${SRC_DIR}/infra/hello-lambda.yml"
|
-e AWS_ACCESS_KEY_ID \
|
||||||
|
-e AWS_SECRET_ACCESS_KEY \
|
||||||
|
-e AWS_SESSION_TOKEN \
|
||||||
|
-e AWS_DEFAULT_REGION \
|
||||||
|
-v "$PWD/${SRC_DIR}/infra:/infra" \
|
||||||
|
amazon/aws-cli:2 cloudformation validate-template \
|
||||||
|
--template-body file:///infra/hello-lambda.yml
|
||||||
|
|
||||||
- name: Deploy CFT
|
- name: Deploy CFT
|
||||||
run: |
|
run: |
|
||||||
aws cloudformation deploy \
|
docker run --rm \
|
||||||
|
-e AWS_ACCESS_KEY_ID \
|
||||||
|
-e AWS_SECRET_ACCESS_KEY \
|
||||||
|
-e AWS_SESSION_TOKEN \
|
||||||
|
-e AWS_DEFAULT_REGION \
|
||||||
|
-v "$PWD/${SRC_DIR}/infra:/infra" \
|
||||||
|
amazon/aws-cli:2 cloudformation deploy \
|
||||||
--stack-name hello-lambda-stack \
|
--stack-name hello-lambda-stack \
|
||||||
--template-file "${SRC_DIR}/infra/hello-lambda.yml" \
|
--template-file /infra/hello-lambda.yml \
|
||||||
--capabilities CAPABILITY_NAMED_IAM
|
--capabilities CAPABILITY_NAMED_IAM
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue