update cloudwatch role in cdk #31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: production | |
| on: | |
| push: | |
| branches: 'main' | |
| jobs: | |
| prod-environment: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - name: Checking out latest source code... | |
| uses: actions/checkout@v3 | |
| - name: Runtime setup for CDK | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 18.x | |
| - name: Runtime setup for Go | |
| uses: actions/setup-go@v3 | |
| - name: AWS Access | |
| uses: aws-actions/configure-aws-credentials@v1-node16 | |
| with: | |
| role-to-assume: ${{ secrets.AWS_OIDC_GOWN }} | |
| aws-region: eu-west-1 | |
| - name: Build and deploy source code | |
| run: | | |
| npm install -g aws-cdk | |
| export NAMESPACE='prod' | |
| export ENVIRONMENT='prod' | |
| export CLIENT_DOMAIN=${{ secrets.DOMAIN }} | |
| export CREATE_REFERRER_TABLE=true | |
| chmod +x build.sh | |
| ./build.sh | |
| cd cdk && npm i && cdk deploy --require-approval never |