Skip to content

Bump actions/checkout from 4.1.4 to 4.1.5 #231

Bump actions/checkout from 4.1.4 to 4.1.5

Bump actions/checkout from 4.1.4 to 4.1.5 #231

---
name: modernisation-platform
on:
push:
branches:
- main
- feature/*
paths:
- 'modernisation-platform/**'
- '.github/workflows/modernisation-platform.yml'
pull_request:
branches:
- main
types: [opened, edited, reopened, synchronize]
paths:
- 'modernisation-platform/**'
- '.github/workflows/modernisation-platform.yml'
workflow_dispatch:
env:
AWS_REGION: "eu-west-2"
ENVIRONMENT_MANAGEMENT: ${{ secrets.MODERNISATION_PLATFORM_ENVIRONMENTS }}
TF_IN_AUTOMATION: true
permissions: {}
defaults:
run:
shell: bash
jobs:
plan-modernisation-platform:
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
name: Plan - modernisation-platform pipelines
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- name: Set Account Number
run: echo "ACCOUNT_NUMBER=$(jq -r -e '.modernisation_platform_account_id' <<< $ENVIRONMENT_MANAGEMENT)" >> $GITHUB_ENV
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
with:
role-to-assume: "arn:aws:iam::${{ env.ACCOUNT_NUMBER }}:role/github-actions"
role-session-name: githubactionsrolesession
aws-region: ${{ env.AWS_REGION }}
- name: Load and Configure Terraform
uses: hashicorp/setup-terraform@97f030cf6dc0b4f5e0da352c7bca9cca34579800 # v3.1.0
with:
terraform_version: ~> 1.0
terraform_wrapper: false
- name: Terraform plan - modernisation-platform pipelines
run: |
echo "Terraform plan - ${TF_ENV}"
bash scripts/terraform-init.sh modernisation-platform
terraform -chdir="modernisation-platform" workspace select "core-shared-services-${TF_ENV}"
bash scripts/terraform-plan.sh modernisation-platform
env:
TF_ENV: production
deploy-modernisation-platform:
if: github.event.ref == 'refs/heads/main'
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
name: Deploy - modernisation-platform pipelines
needs: plan-modernisation-platform
runs-on: ubuntu-latest
environment:
name: core-shared-services
steps:
- name: Checkout Repository
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
- name: Set Account Number
run: echo "ACCOUNT_NUMBER=$(jq -r -e '.modernisation_platform_account_id' <<< $ENVIRONMENT_MANAGEMENT)" >> $GITHUB_ENV
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
with:
role-to-assume: "arn:aws:iam::${{ env.ACCOUNT_NUMBER }}:role/github-actions"
role-session-name: githubactionsrolesession
aws-region: ${{ env.AWS_REGION }}
- name: Load and Configure Terraform
uses: hashicorp/setup-terraform@97f030cf6dc0b4f5e0da352c7bca9cca34579800 # v3.1.0
with:
terraform_version: ~> 1.0
terraform_wrapper: false
- name: Terraform apply - modernisation-platform pipelines
run: |
echo "Terraform apply - ${TF_ENV}"
bash scripts/terraform-init.sh modernisation-platform
terraform -chdir="modernisation-platform" workspace select "core-shared-services-${TF_ENV}"
bash scripts/terraform-apply.sh modernisation-platform
env:
TF_ENV: production