feat(aws): Setting up mobile-wallet-connector deploy on merge (#626) #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy NEWM Mobile Wallet to AWS Hosting on merge | |
| on: | |
| push: | |
| branches: | |
| - master | |
| paths: | |
| - .github/workflows/aws-hosting-merge-deploy-newm-mobile-wallet-connector.yml | |
| - apps/mobile-wallet-connector/** | |
| - packages/** | |
| jobs: | |
| build_and_deploy: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write # required to interact with GitHub's OIDC Token endpoint. | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - run: npm install | |
| - run: npx nx build mobile-wallet-connector | |
| env: | |
| NEXT_PUBLIC_APPLE_CLIENT_ID: ${{ secrets.APPLE_CLIENT_ID }} | |
| NEXT_PUBLIC_GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }} | |
| NEXT_PUBLIC_GA_STUDIO_ID: ${{ secrets.GA_STUDIO_ID }} | |
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | |
| NEXT_PUBLIC_ENV: staging | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| role-to-assume: ${{ secrets.AWS_GITHUB_DEPLOY_ROLE_ARN_GARAGE }} | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| - name: Lambda-ify | |
| run: echo "COPY --from=public.ecr.aws/awsguru/aws-lambda-adapter:0.7.1 /lambda-adapter /opt/extensions/lambda-adapter" >> apps/mobile-wallet-connector/Dockerfile | |
| - name: Install AWS CDK | |
| run: npm install -g aws-cdk | |
| - name: Set outputs | |
| id: vars | |
| run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT | |
| - name: Deploy to Lambda Function | |
| run: | | |
| npm install --prefix .github/workflows/cdk | |
| APPNAME=mobile-wallet-connector QUALIFIER=garage npm run --prefix .github/workflows/cdk cdk:deploy deploy -- --require-approval never |