-
Notifications
You must be signed in to change notification settings - Fork 13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add code sync up workflow #10
Conversation
- name: Configure AWS Credentials | ||
uses: aws-actions/configure-aws-credentials@v2 | ||
with: | ||
role-to-assume: arn:aws:iam::377429403256:role/github-codesync-role |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't see this role created for the account. What permissions are attached to it and how are we limiting access only to this github action?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nvm found it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This role is created by an internal code commit. You can find it under our code repo. And it has limited to only github can assume it and push code to GitHubServiceConnectAgent
.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
role-session-name: prodrolesession | ||
aws-region: us-west-2 | ||
- name: Sync up to CodeCommit | ||
uses: tsgit18/sync-up-to-codecommit-action@v1.0.6 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we need to watch out for updates of this action?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good point. Currently it's enough for us. If there is a significant change for it, then we can update to a new version. I think we won't need to update it very often.
Summary
Add automatic code sync to CodeCommit repository.
Implementation details
Add two GitHub actions to sync up code to beta and prod CodeCommit repositories.
Testing
Tested in my personal account.
New tests cover the changes: no
Description for the changelog
Add code sync up workflow
Licensing
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.