1673 - /ingestion/datasources is also should be whitelisted, because … #385
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Main branch Build | |
on: | |
workflow_dispatch: | |
push: | |
branches: | |
- 'main' | |
concurrency: main_build | |
jobs: | |
images: | |
runs-on: ubuntu-latest | |
env: | |
REGISTRY: 436866023604.dkr.ecr.eu-central-1.amazonaws.com | |
steps: | |
- uses: actions/checkout@v3 | |
with: | |
fetch-depth: 1 | |
- uses: unfor19/install-aws-cli-action@v1 | |
- name: Configure AWS credentials | |
uses: aws-actions/configure-aws-credentials@v1 | |
with: | |
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
aws-region: ${{ secrets.AWS_REGION }} | |
- name: Login to Amazon ECR | |
uses: aws-actions/[email protected] | |
- name: Set up JDK 17 | |
uses: actions/setup-java@v3 | |
with: | |
java-version: '17' | |
distribution: 'temurin' | |
cache: 'gradle' | |
- name: Cache local Gradle dependencies | |
uses: actions/cache@v3 | |
with: | |
path: | | |
~/.gradle/caches | |
~/.gradle/wrapper | |
key: ${{ runner.os }}-shared-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }} | |
restore-keys: | | |
${{ runner.os }}-gradle- | |
- name: Run tests and build the image | |
env: | |
GENERATE_SOURCEMAP: false | |
CI: false | |
run: ./gradlew test jib --no-daemon --image ${{ env.REGISTRY }}/${{ github.event.repository.name }} --scan -Pversion=ci-${GITHUB_SHA::6} | |
update_tag: | |
needs: ['images'] | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v3 | |
with: | |
repository: opendatadiscovery/saas-iac | |
ref: development | |
token: ${{ secrets.ODD_GIT_TOKEN }} | |
- run: | | |
sed -i "s/tag:.*/tag: ci-${GITHUB_SHA::6}/" states/main/eu-central-1/development/argocd/odd-platform/demo.yaml | |
git config user.name github-actions | |
git config user.email [email protected] | |
git add . | |
git commit --allow-empty -m "update tag" | |
git push |