.gitlab-ci.yml

image: quay.io/element84/e84-build-python:3.12-main

stages:
  - lint
  - deploy

lint:
  stage: lint
  script:
    - pip3.12 install uv
    - uv sync --all-extras
    - source .venv/bin/activate
    - scripts/lint.sh

deploy:
  stage: deploy
  image: python:3.12-slim-bookworm
  before_script: scripts/gitlab_before_script.sh
  script:
    - uv sync --all-extras
    - source .venv/bin/activate
    - CREDS=$(aws sts assume-role --role-arn $DEPLOY_ROLE_ARN --role-session-name "git-lab-pipeline-deploy")
    - export AWS_ACCESS_KEY_ID=$(echo $CREDS | jq -r '.Credentials.AccessKeyId')
    - export AWS_SECRET_ACCESS_KEY=$(echo $CREDS | jq -r '.Credentials.SecretAccessKey')
    - export AWS_SESSION_TOKEN=$(echo $CREDS | jq -r '.Credentials.SessionToken')
    - scripts/deploy.sh --auto-approve
  rules:
    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH # run if commit on main branch
    - if: $CI_PIPELINE_SOURCE == "pipeline" #  or run if triggered by another pipeline