Merge branch 'develop' of github.com:NHSDigital/NRLF into feature/eema1-NRL-708-fixValidationExceptionErrors

Author: eesa456

.github/workflows/activate-stack.yml

@@ -0,0 +1,69 @@
+name: Switch Active Stack
+run-name: Switch active stack to ${{ inputs.stack_name }} in ${{ inputs.environment }} by ${{ github.actor }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: "Environment to activate the stack in"
+        required: true
+        default: "dev"
+        type: environment
+
+      stack_name:
+        description: Name of stack to activate
+        required: true
+        type: string
+
+permissions:
+  id-token: write
+  contents: read
+  actions: write
+
+jobs:
+  activate-stack:
+    name: Activate ${{ inputs.stack_name }} for ${{ inputs.environment }}
+    runs-on: [self-hosted, ci]
+    environment: ${{ inputs.environment }}
+
+    steps:
+      - name: Git clone - ${{ github.ref }}
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+
+      - name: Setup asdf cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.asdf
+          key: ${{ runner.os }}-asdf-${{ hashFiles('**/.tool-versions') }}
+          restore-keys: |
+            ${{ runner.os }}-asdf-
+
+      - name: Install asdf
+        uses: asdf-vm/actions/[email protected]
+        with:
+          asdf_branch: v0.13.1
+
+      - name: Configure Management Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: eu-west-2
+          role-to-assume: ${{ secrets.MGMT_ROLE_ARN }}
+          role-session-name: github-actions-ci-${{ inputs.environment }}-${{ github.run_id}}
+
+      - name: Install zip
+        run: sudo apt-get install zip
+
+      - name: Setup Python environment
+        run: |
+          poetry install --no-root
+          source $(poetry env info --path)/bin/activate
+
+      - name: Get current environment config
+        run: |
+          poetry run python ./scripts/get_env_config.py all ${{ inputs.environment }}
+
+      - name: Activate Stack
+        run: |
+          poetry run python ./scripts/activate_stack.py ${{ inputs.stack_name }} ${{ inputs.environment }}

.github/workflows/daily-build.yml

@@ -0,0 +1,85 @@
+name: Build NRL Project on Environment
+run-name: Build NRL Project on ${{ inputs.environment || 'dev' }}
+permissions:
+  id-token: write
+  contents: read
+  actions: write
+
+on:
+  schedule:
+    - cron: "0 1 * * *"
+  workflow_dispatch:
+    inputs:
+      environment:
+        type: environment
+        description: "The environment to deploy changes to"
+        default: "dev"
+        required: true
+
+jobs:
+  build:
+    name: Build - develop
+    runs-on: [self-hosted, ci]
+
+    steps:
+      - name: Git clone - develop
+        uses: actions/checkout@v4
+        with:
+          ref: develop
+
+      - name: Setup asdf cache
+        uses: actions/cache@v4
+        with:
+          path: ~/.asdf
+          key: ${{ runner.os }}-asdf-${{ hashFiles('**/.tool-versions') }}
+          restore-keys: |
+            ${{ runner.os }}-asdf-
+
+      - name: Install asdf
+        uses: asdf-vm/actions/[email protected]
+        with:
+          asdf_branch: v0.13.1
+
+      - name: Install zip
+        run: sudo apt-get install zip
+
+      - name: Setup Python environment
+        run: |
+          poetry install --no-root
+          source $(poetry env info --path)/bin/activate
+
+      - name: Run Linting
+        run: make lint
+
+      - name: Run Unit Tests
+        run: make test
+
+      - name: Build Project
+        run: make build
+
+      - name: Configure Management Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: eu-west-2
+          role-to-assume: ${{ secrets.MGMT_ROLE_ARN }}
+          role-session-name: github-actions-ci-${{ inputs.environment || 'dev' }}-${{ github.run_id }}
+
+      - name: Add S3 Permissions to Lambda
+        run: |
+          account=$(echo '${{ inputs.environment || 'dev' }}' | cut -d '-' -f1)
+          inactive_stack=$(poetry run python ./scripts/get_env_config.py inactive-stack ${{ inputs.environment || 'dev' }})
+          make get-s3-perms ENV=${account} TF_WORKSPACE_NAME=${inactive_stack}
+
+      - name: Save Build Artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-artifacts
+          path: |
+            dist/*.zip
+            !dist/nrlf_permissions.zip
+
+      - name: Save NRLF Permissions cache
+        uses: actions/cache/save@v4
+        with:
+          key: ${{ github.run_id }}-nrlf-permissions
+          path: dist/nrlf_permissions.zip