-
Notifications
You must be signed in to change notification settings - Fork 0
160 lines (135 loc) · 4.22 KB
/
workflow-partial-ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
name: Workflow Partial - CI
on:
workflow_call:
inputs:
deploy:
required: true
type: boolean
jobs:
install:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Node
uses: actions/setup-node@v3
with:
always-auth: true
node-version-file: .nvmrc
- name: Node Modules Cache
id: node_modules_cache
uses: actions/cache@v3
with:
path: node_modules
key: node_modules-${{ hashFiles('package-lock.json') }}
restore-keys: |
node_modules-
- name: Install
if: ${{ steps.node_modules_cache.outputs.cache-hit != 'true' }}
run: npm ci
lint:
needs: [install]
if: ${{ !inputs.deploy }}
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Node
uses: actions/setup-node@v3
with:
node-version-file: .nvmrc
- name: Node Modules Cache
uses: actions/cache@v3
with:
path: node_modules
key: node_modules-${{ hashFiles('package-lock.json') }}
restore-keys: node_modules-
- name: Run Lint
run: npm run lint
terraform-security-scan:
needs: [install]
if: ${{ !inputs.deploy }}
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Terraform Security Scan
uses: aquasecurity/[email protected]
with:
soft_fail: true
working_directory: terraform
terraform-plan:
needs: [install]
if: ${{ !inputs.deploy }}
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Terraform
uses: hashicorp/setup-terraform@v2
- name: Terraform Init
working-directory: terraform
env:
AWS_ACCESS_KEY_ID: ${{ secrets.aws_access_key_id }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_access_key_id }}
AWS_DEFAULT_REGION: ${{ secrets.aws_default_region }}
run: terraform init
- name: Terraform Plan
working-directory: terraform
env:
AWS_ACCESS_KEY_ID: ${{ secrets.aws_access_key_id }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_access_key_id }}
AWS_DEFAULT_REGION: ${{ secrets.aws_default_region }}
run: terraform plan
terraform-apply:
needs: [install]
if: ${{ inputs.deploy }}
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Terraform
uses: hashicorp/setup-terraform@v2
- name: Terraform Init
working-directory: terraform
env:
AWS_ACCESS_KEY_ID: ${{ secrets.aws_access_key_id }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_access_key_id }}
AWS_DEFAULT_REGION: ${{ secrets.aws_default_region }}
run: terraform init
- name: Terraform Apply
working-directory: terraform
env:
AWS_ACCESS_KEY_ID: ${{ secrets.aws_access_key_id }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_access_key_id }}
AWS_DEFAULT_REGION: ${{ secrets.aws_default_region }}
run: terraform apply -input=false -auto-approve
build-and-deploy:
needs: [install]
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Node
uses: actions/setup-node@v3
with:
node-version-file: .nvmrc
- name: Node Modules Cache
uses: actions/cache@v3
with:
path: node_modules
key: node_modules-${{ hashFiles('package-lock.json') }}
restore-keys: node_modules-
- name: Run Build
run: npm run build
- name: Setup AWS CLI
if: ${{ inputs.deploy }}
uses: unfor19/install-aws-cli-action@v1
- name: Deploy
if: ${{ inputs.deploy }}
working-directory: dist
env:
AWS_ACCESS_KEY_ID: ${{ secrets.aws_access_key_id }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_access_key_id }}
AWS_DEFAULT_REGION: ${{ secrets.aws_default_region }}
run: aws s3 sync . s3://catlord-static-site