Skip to content

Commit 20ba078

Browse files
committed
eli-445 adding bootstrap deploy to base deploy workflow
1 parent f3cc535 commit 20ba078

1 file changed

Lines changed: 16 additions & 1 deletion

File tree

.github/workflows/base-deploy.yml

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,22 @@ jobs:
187187
name: lambda-${{ needs.metadata.outputs.tag }}
188188
path: ./dist
189189

190-
- name: "Configure AWS Credentials"
190+
- name: "Configure AWS Credentials (IAM Bootstrap Role)"
191+
uses: aws-actions/configure-aws-credentials@v6
192+
with:
193+
role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/service-roles/github-actions-iam-bootstrap-role
194+
aws-region: eu-west-2
195+
196+
- name: "Deploy IAM roles (iams-developer-roles stack)"
197+
env:
198+
ENVIRONMENT: ${{ needs.metadata.outputs.environment }}
199+
working-directory: ./infrastructure
200+
run: |
201+
make terraform-init env=$ENVIRONMENT stack=iams-developer-roles
202+
terraform -chdir=./stacks/iams-developer-roles plan -var="environment=$ENVIRONMENT" -out=tfplan
203+
terraform -chdir=./stacks/iams-developer-roles apply -auto-approve tfplan
204+
205+
- name: "Configure AWS Credentials (Main Deployment Role)"
191206
uses: aws-actions/configure-aws-credentials@v6
192207
with:
193208
role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/service-roles/github-actions-api-deployment-role

0 commit comments

Comments
 (0)