this repo is now only concerned with building the image and the lambd…

…a function. No longer creating other infrastructure
SCT-Engineering · Apr 23, 2025 · 8f1c9a3 · 8f1c9a3
1 parent b738c3f
commit 8f1c9a3
Show file tree

Hide file tree

Showing 12 changed files with 32 additions and 376 deletions.
diff --git a/.github/workflows/build-lambda.yml b/.github/workflows/build-lambda.yml
@@ -23,12 +23,39 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: CSVD/aws-auth@main
+        id: aws_auth
         with:
-          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
-          aws-region: ${{ vars.AWS_REGION }}
+          ecs: true
+
+      - name: Terraform Init and Apply
+        env:
+          AWS_ACCESS_KEY_ID: ${{ steps.aws_auth.outputs.aws_access_key_id }}
+          AWS_SECRET_ACCESS_KEY: ${{ steps.aws_auth.outputs.aws_secret_access_key }}
+          AWS_SESSION_TOKEN: ${{ steps.aws_auth.outputs.aws_session_token }}
+        working-directory: ./infrastructure
+        run: |
+          terraform init
+          terraform apply -auto-approve
+
+      - name: Package Source Code
+        run: |
+          zip -r source.zip . -x ".git/*" ".github/*" "infrastructure/*"
+
+      - name: Upload to S3
+        env:
+          AWS_ACCESS_KEY_ID: ${{ steps.aws_auth.outputs.aws_access_key_id }}
+          AWS_SECRET_ACCESS_KEY: ${{ steps.aws_auth.outputs.aws_secret_access_key }}
+          AWS_SESSION_TOKEN: ${{ steps.aws_auth.outputs.aws_session_token }}
+        run: |
+          BUCKET_NAME=$(cd infrastructure && terraform output -raw codebuild_source_bucket)
+          aws s3 cp source.zip s3://${BUCKET_NAME}/source.zip
 
       - name: Start CodeBuild Project
+        env:
+          AWS_ACCESS_KEY_ID: ${{ steps.aws_auth.outputs.aws_access_key_id }}
+          AWS_SECRET_ACCESS_KEY: ${{ steps.aws_auth.outputs.aws_secret_access_key }}
+          AWS_SESSION_TOKEN: ${{ steps.aws_auth.outputs.aws_session_token }}
         run: |
           BUILD_ID=$(aws codebuild start-build --project-name eks-automation-lambda-builder --output text --query 'build.id')
           echo "Started build with ID: $BUILD_ID"

diff --git a/backend.tf b/backend.tf
diff --git a/buildspec.yml b/buildspec.yml
diff --git a/errors.txt b/errors.txt
diff --git a/infrastructure/github-actions-trust-policy.json b/infrastructure/github-actions-trust-policy.json
diff --git a/infrastructure/main.tf b/infrastructure/main.tf
diff --git a/infrastructure/outputs.tf b/infrastructure/outputs.tf
diff --git a/infrastructure/providers.tf b/infrastructure/providers.tf
diff --git a/infrastructure/variables.tf b/infrastructure/variables.tf
diff --git a/main.tf b/main.tf