-
Notifications
You must be signed in to change notification settings - Fork 69
chore: add ADC publishing workflow #94
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
The configuration lives in the 'releasing' environment, and the bucket names are masked away from the logs.
projenrc/publish-to-adc.task.ts
Outdated
|
|
||
| const root = 'dist/standalone'; | ||
|
|
||
| const standaloneFiles = await glob('**/*', { cwd: root }); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There is a risk here of accidentally publishing something we don't intend to. Normally this wouldn't be an issue, but ADC regions have such stringent policies and processes, that I can see someone paging us over this. Should we have an allowlist?
.github/workflows/release.yml
Outdated
| permissions: | ||
| contents: write | ||
| environment: releasing | ||
| if: ${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cloud-assembly-schema == 'true' }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why this one?
projenrc/adc-publishing.ts
Outdated
| permissions: { | ||
| contents: JobPermission.WRITE, | ||
| }, | ||
| if: `\${{ needs.release.outputs.latest_commit == github.sha && needs.release.outputs.publish-aws-cdk-cloud-assembly-schema == 'true' }}`, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
why check publish-aws-cdk-cloud-assembly-schema?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah, copy/paste-o. Thanks.
The configuration lives in the 'releasing' environment, and the bucket names are masked away from the logs.
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license