feat: Perform EC2 deployments via CloudFormation #1374
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| pull_request: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| CI: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| # These permissions are required by guardian/actions-riff-raff... | |
| id-token: write # ...to exchange an OIDC JWT ID token for AWS credentials | |
| pull-requests: write #...to comment on PRs | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # Node is needed for CDK | |
| - name: Setup node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version-file: '.nvmrc' | |
| cache: 'npm' | |
| cache-dependency-path: 'cdk/package-lock.json' | |
| # Java is needed for the Scala Play app | |
| - name: Set up Java | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '11' # TODO read this from the `.java-version` file in the repository | |
| distribution: 'corretto' | |
| - run: ./scripts/ci | |
| - uses: guardian/actions-riff-raff@v4 | |
| with: | |
| projectName: devx::prism | |
| githubToken: ${{ secrets.GITHUB_TOKEN }} | |
| roleArn: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }} | |
| configPath: cdk/cdk.out/riff-raff.yaml | |
| contentDirectories: | | |
| cdk.out: | |
| - cdk/cdk.out | |
| prism: | |
| - dist |