eksctl/.github/workflows/update-generated.yaml at d9b10e86d9169e58c50bdc87f21c422fe44b969d · eksctl-io/eksctl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
name: Update generated files
on:
  workflow_dispatch: {}
  schedule:
    - cron: "0 5 * * Thu"

permissions:
  id-token: write

env:
  DEFAULT_BRANCH: main

jobs:
  update_generated_file:
    strategy:
      fail-fast: false
      matrix:
        resource: ["coredns", "aws-node"]
    name: Update ${{ matrix.resource }} and open PR
    runs-on: ubuntu-latest
    container: public.ecr.aws/eksctl/eksctl-build:833f4464e865a6398788bf6cbc5447967b8974b7
    env:
      GOPRIVATE: ""
    steps:
      - name: Checkout
        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 #v4.1.6
        with:
          token: ${{ secrets.EKSCTLBOT_TOKEN }}
          fetch-depth: 0
      - name: Configure AWS credentials for coredns update
        if: ${{ matrix.resource == 'coredns' }}
        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
        with:
          aws-region: us-west-2
          role-duration-seconds: 900
          role-session-name: eksctl-update-coredns-assets
          role-to-assume: ${{ secrets.UPDATE_COREDNS_ROLE_ARN }}
      - name: Setup identity as eksctl-bot
        uses: ./.github/actions/setup-identity
        with:
          token: "${{ secrets.EKSCTLBOT_TOKEN }}"
      - name: Cache go-build and mod
        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 #v4.0.2
        with:
          path: |
            ~/.cache/go-build/
            ~/go/pkg/mod/
          key: go-${{ hashFiles('go.sum') }}
          restore-keys: |
            go-
      - name: Update ${{ matrix.resource }}
        run: make update-${{ matrix.resource }}
      - name: Upsert pull request
        uses: peter-evans/create-pull-request@70a41aba780001da0a30141984ae2a0c95d8704e #v6.0.2
        with:
          token: ${{ secrets.EKSCTLBOT_TOKEN }}
          commit-message: update ${{ matrix.resource }}
          committer: eksctl-bot <[email protected]>
          title: 'Update ${{ matrix.resource }}'
          branch: update-${{ matrix.resource }}
          labels: area/tech-debt