forked from eksctl-io/eksctl
-
Notifications
You must be signed in to change notification settings - Fork 0
82 lines (79 loc) · 2.8 KB
/
update-generated.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
name: Update generated files
on:
workflow_dispatch: {}
schedule:
- cron: "0 5 * * Thu"
permissions:
id-token: write
env:
DEFAULT_BRANCH: main
jobs:
update_generated_file:
strategy:
fail-fast: false
matrix:
resource: ["coredns", "aws-node", "nvidia-device-plugin"]
name: Update ${{ matrix.resource }} and open PR
runs-on: ubuntu-latest
container: public.ecr.aws/eksctl/eksctl-build:833f4464e865a6398788bf6cbc5447967b8974b7
env:
GOPRIVATE: ""
steps:
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #v4.1.7
with:
token: ${{ secrets.EKSCTLBOT_TOKEN }}
fetch-depth: 0
- name: Configure AWS credentials for coredns update
if: ${{ matrix.resource == 'coredns' }}
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
with:
aws-region: us-west-2
role-duration-seconds: 900
role-session-name: eksctl-update-coredns-assets
role-to-assume: ${{ secrets.UPDATE_COREDNS_ROLE_ARN }}
- name: Setup identity as eksctl-bot
uses: ./.github/actions/setup-identity
with:
token: "${{ secrets.EKSCTLBOT_TOKEN }}"
- name: Cache go-build and mod
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 #v4.0.2
with:
path: |
~/.cache/go-build/
~/go/pkg/mod/
key: go-${{ hashFiles('go.sum') }}
restore-keys: |
go-
- name: Update ${{ matrix.resource }}
run: make update-${{ matrix.resource }}
- name: Commit changes
id: commit
run: |
git checkout $DEFAULT_BRANCH
git checkout -B update-${{ matrix.resource }}
git add -u
if ! EDITOR=true git commit -m "Update ${{ matrix.resource }}"; then
echo "changes=false" >> $GITHUB_OUTPUT
exit 0
fi
echo "changes=true" >> $GITHUB_OUTPUT
! git diff --exit-code $DEFAULT_BRANCH HEAD
git push --force-with-lease origin HEAD
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea #v7.0.1
name: Open PR to ${{env.DEFAULT_BRANCH}}
if: steps.commit.outputs.changes == 'true'
with:
github-token: ${{ secrets.EKSCTLBOT_TOKEN }}
script: |
const { data: pr } = await github.rest.pulls.create({
...context.repo,
title: "Update ${{ matrix.resource }}",
head: "update-${{ matrix.resource }}",
base: "${{ env.DEFAULT_BRANCH }}",
});
await github.rest.issues.addLabels({
...context.repo,
issue_number: pr.number,
labels: ["kind/improvement"],
});