44 push :
55 tags :
66 - ' *'
7+
78permissions :
89 id-token : write
910 contents : read
@@ -13,30 +14,53 @@ jobs:
1314 runs-on : ubuntu-latest
1415 if : github.event.pull_request.draft == false
1516 steps :
16- - uses : actions/checkout@v3
17+ - uses : actions/checkout@v6
1718 with :
1819 ref : ${{github.event.pull_request.head.sha || github.sha}}
1920
20- - name : Configure AWS Credentials
21- uses : aws-actions/configure-aws-credentials@v1
22- with :
23- role-to-assume : arn:aws-us-gov:iam::${{secrets.AWS_ACCOUNT_ID}}:role/Github-ECR-Builder
24- role-session-name : GithubECRBuilder
25- aws-region : ${{secrets.AWS_REGION}}
26-
2721 - name : Docker Build ETL
2822 run : docker build -t etl .
2923
3024 - name : Get tag
3125 id : tag
3226 uses : dawidd6/action-get-tag@v1
3327
28+ - name : Configure AWS Credentials
29+ uses : aws-actions/configure-aws-credentials@v5
30+ with :
31+ role-to-assume : arn:aws-us-gov:iam::${{secrets.AWS_ACCOUNT_ID}}:role/Github-ECR-Builder
32+ role-session-name : GithubECRBuilder
33+ aws-region : ${{secrets.AWS_REGION}}
34+
3435 - name : Login to Amazon ECR
3536 id : login-ecr
36- uses : aws-actions/amazon-ecr-login@v1
37+ uses : aws-actions/amazon-ecr-login@v2
38+
39+ - name : Push ETL to Prod (COTAK & WFTAK)
40+ run : |
41+ TAG="${{github.event.repository.name}}-${{steps.tag.outputs.tag}}"
42+ for env in cotak-prod wftak-prod; do
43+ REPO="${{secrets.AWS_ACCOUNT_ID}}.dkr.ecr.${{secrets.AWS_REGION}}.amazonaws.com/tak-vpc-${env}-cloudtak-tasks"
44+ docker tag etl $REPO:$TAG
45+ docker push $REPO:$TAG
46+ done
47+
48+ - name : Configure AWS Credentials (Staging)
49+ uses : aws-actions/configure-aws-credentials@v5
50+ with :
51+ role-to-assume : arn:aws:iam::${{secrets.AWS_STAGING_ACCOUNT_ID}}:role/Github-ECR-Builder
52+ role-session-name : GithubECRBuilder
53+ aws-region : ${{secrets.AWS_STAGING_REGION}}
3754
38- - name : Docker Tag ETL
39- run : docker tag etl ${{secrets.AWS_ACCOUNT_ID}}.dkr.ecr.${{secrets.AWS_REGION}}.amazonaws.com/coe-ecr-etl-tasks:${{github.event.repository.name}}-${{steps.tag.outputs.tag}}
55+ - name : Login to Amazon ECR (Staging)
56+ id : login-ecr-staging
57+ uses : aws-actions/amazon-ecr-login@v2
4058
41- - name : Docker Push ETL
42- run : docker push ${{secrets.AWS_ACCOUNT_ID}}.dkr.ecr.${{secrets.AWS_REGION}}.amazonaws.com/coe-ecr-etl-tasks:${{github.event.repository.name}}-${{steps.tag.outputs.tag}}
59+ - name : Push ETL to Staging (COTAK & WFTAK)
60+ run : |
61+ TAG="${{github.event.repository.name}}-${{steps.tag.outputs.tag}}"
62+ for env in cotak-staging wftak-staging; do
63+ REPO="${{secrets.AWS_STAGING_ACCOUNT_ID}}.dkr.ecr.${{secrets.AWS_STAGING_REGION}}.amazonaws.com/tak-vpc-${env}-cloudtak-tasks"
64+ docker tag etl $REPO:$TAG
65+ docker push $REPO:$TAG
66+ done
0 commit comments