Fetch Docker secrets from AWS Secrets Manager #1411
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| permissions: | |
| contents: read | |
| id-token: write | |
| jobs: | |
| openapi-spec-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - &configure-aws | |
| name: Configure AWS credentials for Docker Hub secrets (OIDC) | |
| if: github.event_name != 'pull_request' | |
| uses: aws-actions/configure-aws-credentials@v6 | |
| with: | |
| role-to-assume: arn:aws:iam::301904545275:role/oidc-github-hellosign-hellosign-openapi-branch-main | |
| aws-region: us-west-2 | |
| - &get-docker-secrets | |
| name: Get Docker Hub secrets from AWS Secrets Manager | |
| if: github.event_name != 'pull_request' | |
| uses: aws-actions/aws-secretsmanager-get-secrets@v3 | |
| with: | |
| secret-ids: | | |
| DOCKER_USERNAME,github-actions/hellosign/shared/docker-username | |
| DOCKER_TOKEN,github-actions/hellosign/shared/docker-token | |
| parse-json-secrets: false | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status oas | |
| php-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build PHP SDK | |
| run: ./generate-sdks -t php | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status php | |
| python-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build Python SDK | |
| run: ./generate-sdks -t python | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status python | |
| ruby-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build Ruby SDK | |
| run: ./generate-sdks -t ruby | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status ruby | |
| nodejs-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build NodeJs SDK | |
| run: ./generate-sdks -t node | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status node | |
| java-v1-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build Java SDK | |
| run: ./generate-sdks -t java-v1 | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status java-v1 | |
| java-v2-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build Java SDK | |
| run: ./generate-sdks -t java-v2 | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status java-v2 | |
| dotnet-sdk-build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| - *configure-aws | |
| - *get-docker-secrets | |
| - name: Build OpenAPI Spec | |
| run: ./build | |
| - name: Build DotNet SDK | |
| run: ./generate-sdks -t dotnet | |
| - name: Ensure no changes in Generated Code | |
| run: ./bin/check-clean-git-status dotnet |