ci-modules.yaml

name: CI - Modules

on:
  pull_request:
    branches:
      - main
    paths:
      - 'modules/**'
  push:
    branches:
      - main
    tags:
      - 'v**'
    paths:
      - 'modules/**'

jobs:
  lint:
    name: Lint Templates
    runs-on: ubuntu-latest

    steps:
    - name: Check out code
      uses: actions/checkout@v3

    - name: cfn-lint
      uses: scottbrenner/cfn-lint-action@v2

    - name: Lint
      working-directory: modules
      run: make lint
  
  validate:
    name: Validate Templates
    runs-on: ubuntu-latest

    steps:
    - name: Check out code
      uses: actions/checkout@v3

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: eu-west-1
    
    - name: Validate Templates
      run: make validate
      working-directory: modules
      
  publish:
    name: Publish Templates
    runs-on: ubuntu-latest
    needs:
    - lint
    - validate

    steps:
    - name: Check out code
      uses: actions/checkout@v3

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: eu-west-1

    - name: Publish Templates
      run: make publish
      working-directory: modules
      env:
        S3_BUCKET: cf-templates-cloudvision-ci
        S3_PREFIX: ${{ github.event_name == 'push' && ((contains(github.ref, '/tags/v') && github.ref_name) || 'main') || format('pr/{0}', github.event.pull_request.number)}}