e2e-test #691
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: e2e-test | |
| on: | |
| # Runs every day at 3:11 UTC. | |
| schedule: | |
| - cron: "11 3 * * *" | |
| # Allow manually triggered runs. | |
| workflow_dispatch: | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| run-e2e-aws-oidc: | |
| runs-on: ubuntu-latest | |
| # Makes it so only one instance of this workflow can run at a time: | |
| # https://docs.github.com/en/actions/using-jobs/using-concurrency | |
| concurrency: run-e2e-aws-oidc | |
| steps: | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.9' | |
| - name: Install requests | |
| run: pip install requests | |
| - name: Checkout civiform/cloud-deploy-infra | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: civiform/cloud-deploy-infra | |
| path: cloud-deploy-infra | |
| - name: Checkout civiform/civiform-deploy | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: civiform/civiform-deploy | |
| path: civiform-deploy | |
| - id: get-nuke | |
| name: Get aws-nuke | |
| run: | | |
| wget https://github.com/ekristen/aws-nuke/releases/download/v3.17.3/aws-nuke-v3.17.3-linux-amd64.tar.gz -O aws-nuke-v3.17.3-linux-amd64.tar.gz | |
| tar -xzf aws-nuke-v3.17.3-linux-amd64.tar.gz | |
| sudo mv aws-nuke /aws-nuke | |
| sudo chmod u+x /aws-nuke | |
| - id: get-aws-creds | |
| name: Authenticate to AWS | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| # Role in civiform-deploy-e2e-tests account. | |
| role-to-assume: arn:aws:iam::296877675213:role/e2e-test-runner | |
| aws-region: us-east-1 | |
| - name: Pre nuke | |
| run: /aws-nuke run --config $GITHUB_WORKSPACE/cloud-deploy-infra/e2e-test/nuke.yaml --no-dry-run --force --force-sleep=3 | |
| - name: Run bin/setup | |
| run: | | |
| # Must run setup scripts from this directory due to 'source' lines in the scripts. | |
| cd $GITHUB_WORKSPACE/civiform-deploy | |
| yes yes | bin/setup --config=$GITHUB_WORKSPACE/cloud-deploy-infra/e2e-test/civiform_config_aws_oidc.sh | |
| - name: Post nuke | |
| # Post nuke should run even if bin/setup fails. Therefore we need the | |
| # '(success() || failure())' condition: if a status check function is | |
| # not included in the 'if', the success() function is included by | |
| # default: | |
| # https://docs.github.com/en/actions/learn-github-actions/expressions#status-check-functions. | |
| if: (success() || failure()) && steps.get-nuke.outcome == 'success' && steps.get-aws-creds.outcome == 'success' | |
| uses: nick-fields/retry@v3 | |
| with: | |
| timeout_minutes: 10 | |
| max_attempts: 3 | |
| command: /aws-nuke run --config $GITHUB_WORKSPACE/cloud-deploy-infra/e2e-test/nuke.yaml --no-dry-run --force --force-sleep=3 | |
| - name: Notify Slack Complete | |
| if: always() | |
| uses: slackapi/slack-github-action@v1 | |
| with: | |
| channel-id: 'C03UXPUEXU4' | |
| slack-message: "${{ env.STATUS_ICON }} AWS e2e test: <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|${{ job.status }}>" | |
| env: | |
| SLACK_BOT_TOKEN: ${{ secrets.CIVIBOT_TOKEN }} | |
| STATUS_ICON: ${{fromJSON('[":no_entry:", ":white_check_mark:"]')[job.status == 'success']}} |