Support Platform CLI #1113
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Template CI Infra Checks | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| paths: | |
| - bin/** | |
| - infra/** | |
| - template-only-bin/** | |
| - template-only-infra/** | |
| - template-only-test/** | |
| - .github/workflows/template-only-ci-infra.yml | |
| - template-only-app/Dockerfile | |
| workflow_dispatch: | |
| # For now, only allow one workflow run at a time, since this provisions an OIDC | |
| # provider for github actions and only one OIDC provider can exist at a time. | |
| concurrency: platform-template-only-ci-infra | |
| jobs: | |
| lint: | |
| name: Lint template scripts | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Shellcheck | |
| run: make -f template-only.mak lint-template-scripts | |
| test: | |
| name: Infra Tests | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout template-infra repo | |
| uses: actions/checkout@v4 | |
| with: | |
| path: template-infra | |
| - name: Set up Terraform | |
| uses: ./.github/actions/setup-terraform | |
| with: | |
| version-file: ./template-infra/.terraform-version | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: ">=1.19.0" | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.13" | |
| - name: Install nava-platform CLI | |
| run: pipx install --python "$(which python)" git+https://github.com/navapbc/platform-cli | |
| - name: Install infra template | |
| run: | | |
| # Note: project_name can't be too long since S3 bucket names have a 63 | |
| # character max length, $RANDOM has a max value of 32767 | |
| unique_id=$(printf '%.5d' $((RANDOM))) | |
| project_name=plt-tst-act-${unique_id} | |
| echo "PROJECT_NAME=${project_name}" >> "$GITHUB_ENV" | |
| # TODO: add --data-file support to CLI and have as many of these | |
| # settings in more maintainable separate file | |
| nava-platform infra install --template-uri ./template-infra --version HEAD \ | |
| --data base_project_name="${project_name}" \ | |
| --data base_owner=platform-admins \ | |
| --data base_code_repository_url=${{ github.repositoryUrl }} \ | |
| --data base_default_region=us-east-1 \ | |
| --data app_name=app \ | |
| --data app_local_port=3000 \ | |
| --data app_has_dev_env_setup=true \ | |
| project-dir | |
| - name: Copy template-only things to project copy of template | |
| run: | | |
| cp -vr ./template-infra/template-only* ./project-dir | |
| - name: Install example app for infra tests | |
| run: | | |
| mv -vf ./project-dir/template-only-app ./project-dir/app | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: us-east-1 | |
| # Use access key credentials for the template infra test workflow | |
| # instead of using GitHub OIDC because only one GitHub OIDC provider | |
| # can be added to the Platform account, and we want to create a | |
| # GitHub OIDC provider as part of the template test. | |
| # (see https://docs.aws.amazon.com/cli/latest/reference/iam/create-open-id-connect-provider.html) | |
| # | |
| # For this test, use PlatformTestUser20220726 credentials | |
| aws-access-key-id: ${{ secrets.TESTER_AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.TESTER_AWS_SECRET_ACCESS_KEY }} | |
| - name: Run Terratest | |
| working-directory: project-dir | |
| run: make -f template-only.mak test | |
| env: | |
| # GitHub token needed for GitHub CLI which is used during tests to check GitHub Actions auth | |
| GH_TOKEN: ${{ secrets.PLATFORM_TESTER_GITHUB_TOKEN }} | |
| IMAGE_TAG: ${{ github.sha }} | |
| PROJECT_NAME: ${{ env.PROJECT_NAME }} |