enh: lambda error handling #40
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Pulumi Up | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - pulumi/** | |
| - .github/workflows/pulumi-up.yml | |
| concurrency: | |
| group: ghas-erfiume-pulumi-up-${{ github.ref }} | |
| jobs: | |
| pulumi-up: | |
| name: Pulumi Up | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| id-token: write | |
| defaults: | |
| run: | |
| working-directory: ./pulumi | |
| steps: | |
| - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 | |
| # v4.2.1 | |
| with: | |
| fetch-depth: 0 | |
| - run: | | |
| echo "PULUMI_HOME=${GITHUB_WORKSPACE}/.pulumi" >> $GITHUB_ENV | |
| echo "POETRY_PATH=$([ -f poetry.lock ] && echo ./pulumi || realpath -s --relative-to=${GITHUB_WORKSPACE} ../)" >> $GITHUB_ENV | |
| working-directory: ./pulumi | |
| - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 | |
| # v5.2.0 | |
| with: | |
| python-version: 3.12 | |
| - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 | |
| # v4.1.1 | |
| with: | |
| path: ~/.local | |
| key: poetry-latest | |
| - uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a | |
| # v1.4.1 | |
| with: | |
| virtualenvs-create: true | |
| virtualenvs-in-project: true | |
| installer-parallel: true | |
| - id: cache-deps | |
| uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 | |
| # v4.1.1 | |
| with: | |
| path: ${{ env.POETRY_PATH }}/.venv | |
| key: python-3.12-poetry-${{ hashFiles('**/poetry.lock') }} | |
| restore-keys: | | |
| python-3.12-poetry | |
| - run: poetry install | |
| if: steps.cache-deps.outputs.cache-hit != 'true' | |
| - uses: pulumi/auth-actions@80dec0d5e009a11565cbf87d9ef9103fc7d24198 | |
| # v1.0.0 | |
| with: | |
| organization: notdodo | |
| requested-token-type: urn:pulumi:token-type:access_token:personal | |
| scope: user:notdodo | |
| - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 | |
| # v4.1.1 | |
| with: | |
| path: ${{ env.PULUMI_HOME }}/plugins | |
| key: python-3.12-pulumi-${{ hashFiles('**/poetry.lock') }} | |
| restore-keys: | | |
| python-3.12-pulumi- | |
| - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 | |
| # v4.0.2 | |
| with: | |
| role-to-assume: arn:aws:iam::841162699174:role/erfiume-oidc-write | |
| aws-region: eu-west-1 | |
| retry-max-attempts: 2 | |
| - uses: aws-actions/aws-secretsmanager-get-secrets@1d6311ab61b4856de027ff508aac818ddc1e141b | |
| # v2.0.7 | |
| with: | |
| secret-ids: CLOUDFLARE_API_TOKEN, erfiume-gha-cloudflare-read-write | |
| - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 | |
| # v6.0.0 | |
| with: | |
| command: up | |
| diff: true | |
| stack-name: notdodo/erfiume/production | |
| work-dir: ./pulumi | |
| color: always | |
| suppress-progress: true |