github-reusable-workflows/.github/workflows/publish.yml at master · cachuperia/github-reusable-workflows · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
name: publish

on:
  workflow_call:
    inputs:
      aws-region:
        default: us-east-1
        description: AWS default region
        required: false
        type: string
      aws-role:
        description: AWS IAM role to assume
        required: true
        type: string
      asdf:
        default: false
        description: Install asdf and plugins if true
        required: false
        type: boolean
      ecr-registry:
        description: Docker image registry
        required: false
        type: string
      ecr-repo:
        description: Docker image name
        required: false
        type: string
      node-version:
        default: '18.16.0'
        description: Node runtime version
        required: false
        type: string
      s3-bucket:
        description: S3 bucket name
        required: false
        type: string
    secrets:
      aws-access-key:
        description: Machine user AWS access key
        required: true
      aws-secret-key:
        description: Machine user AWS access key
        required: true
      ssh-key:
        description: Machine user GitHub SSH key
        required: false
      token:
        description: Machine user GitHub token
        required: false

jobs:
  publish:
    timeout-minutes: 5
    runs-on: ubuntu-latest
    steps:
      - name: Set up Node ${{ inputs.node-version }}
        uses: actions/setup-node@v3.6.0
        with:
          node-version: ${{ inputs.node-version }}
      - uses: actions/checkout@v3.5.2
      - name: Install asdf
        uses: asdf-vm/actions/setup@v2.1.0
        if: inputs.asdf
      - name: Install asdf plugins
        if: inputs.asdf
        run: make asdf
      - name: Install machine user SSH key
        env:
          SSH_KEY: ${{ secrets.ssh-key }}
        if: env.SSH_KEY != null
        uses: webfactory/ssh-agent@v0.8.0
        with:
          ssh-private-key: |
            ${{ secrets.ssh-key }}
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2.0.0
        with:
          aws-access-key-id: ${{ secrets.aws-access-key }}
          aws-secret-access-key: ${{ secrets.aws-secret-key }}
          aws-region: ${{ inputs.aws-region }}
          role-to-assume: ${{ inputs.aws-role }}
          role-duration-seconds: 900
      - name: Login to Amazon ECR
        env:
          ECR_REGISTRY: ${{ inputs.ecr-registry }}
        if: env.ECR_REGISTRY
        uses: aws-actions/amazon-ecr-login@v1.6.0
      - name: Push to the artifactory
        env:
          ECR_REGISTRY: ${{ inputs.ecr-registry }}
          ECR_REPO: ${{ inputs.ecr-repo }}
          S3_BUCKET: ${{ inputs.s3-bucket }}
          GITHUB_TOKEN: ${{ secrets.token }}
        run: make push-artifacts