eoapi-cdk 6.1.0 → 7.0.1

package/.github/pull_request_template.md

@@ -0,0 +1,4 @@
+## :warning: Checklist if your PR is changing anything else than documentation
+- [ ] Posted the link to a successful manually triggered deployment workflow (successful including the resources destruction)
+
+## Merge request description

package/.github/workflows/build.yaml

@@ -12,7 +12,7 @@ on:
         required: false
       DS_RELEASE_BOT_PRIVATE_KEY:
         required: false
-
+        
 jobs:
   build_and_package:
     name: Build and package
@@ -22,7 +22,7 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 18
           cache: "npm"
 
       - name: Install Dependencies
@@ -66,7 +66,7 @@ jobs:
           private_key: ${{ secrets.DS_RELEASE_BOT_PRIVATE_KEY }}
 
       - name: Maybe Release 🚀
-        if: ${{ inputs.release }}
+        if: "${{ inputs.release }}"
         run: |
           npm run semantic-release
         env:

package/.github/workflows/{test.yaml → build_and_release.yaml}

@@ -1,4 +1,4 @@
-name: Test & Build
+name: Build & try to release
 
 on:
   push:

package/.github/workflows/deploy.yaml

@@ -0,0 +1,84 @@
+name: Deployment
+
+on:
+  workflow_dispatch:
+    
+jobs:
+  build_package_and_deploy:
+    name: Build, package and deploy
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    env:
+      AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION_DEPLOY }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID_DEPLOY }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY_DEPLOY }}
+      AWS_DEFAULT_ACCOUNT: ${{ secrets.AWS_ACCOUNT_ID }}
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 18
+          cache: "npm"
+
+      - name: Install Dependencies
+        run: npm ci
+
+      - name: Compile project
+        run: npm run build
+
+      - name: Generate distribution packages
+        run: npm run package
+
+      
+      - name: Install deployment environment
+        id: install_deploy_env
+        run: |
+          # install deployment environment with eoapi-cdk from build
+          python -m venv .deployment_venv
+          source .deployment_venv/bin/activate
+          pip install dist/python/*.gz
+          cd integration_tests/cdk
+          pip install -r requirements.txt
+          npm install   
+          deactivate
+          cd -
+
+      # use short commit SHA to name stacks
+      - uses: benjlevesque/short-sha@v3.0
+        id: short-sha
+        with:
+          length: 6
+
+      - name: Deploy test stack
+        id: deploy_step
+        env:
+          PROJECT_ID: ${{ steps.short-sha.outputs.sha }}
+        run: |
+          source .deployment_venv/bin/activate
+          
+          # synthesize the stack
+          cd integration_tests/cdk
+          npx cdk synth --debug --all --require-approval never
+
+          # deploy the stack
+          npx cdk deploy --ci --all --require-approval never
+          deactivate
+          cd -
+          
+      - name: Tear down any infrastructure
+        if: always()
+        env:
+          PROJECT_ID: ${{ steps.short-sha.outputs.sha }}
+        run: |
+          cd integration_tests/cdk
+          # run this only if we find a 'cdk.out' directory, which means there might be things to tear down
+          if [ -d "cdk.out" ]; then
+            cd -
+            source .deployment_venv/bin/activate
+            cd integration_tests/cdk
+            # see https://github.com/aws/aws-cdk/issues/24946
+            # this didn't work : rm -f cdk.out/synth.lock
+            # so we just duplicate the cdk output to cdk-destroy.out
+            npx cdk destroy --output cdk-destroy.out --ci --all --force
+          fi

package/.github/workflows/distribute.yaml

@@ -13,11 +13,12 @@ jobs:
     runs-on: ubuntu-latest
     needs: package
     steps:
+
       - uses: actions/download-artifact@v3
         with:
           name: python
           path: dist
-
+          
       - run: pip install twine
 
       - run: twine upload dist/*