Manual Action to build goldenimage to Amazon EC2 #18
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Manual Action to build goldenimage to Amazon EC2 | |
| # on: | |
| # push: | |
| # paths: | |
| # - 'envs/amazon/*.pkr.hcl' | |
| # - 'envs/amazon/*.pkrvars.hcl' | |
| # - 'envs/amazon/*.yaml' | |
| ########################## | |
| ### Run Manually ### | |
| ########################## | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| target: | |
| type: choice | |
| description: create target | |
| options: | |
| - dev | |
| - prod | |
| region: | |
| type: choice | |
| description: create at region | |
| options: | |
| - us-east-1 | |
| - us-east-2 | |
| - us-west-1 | |
| - us-west-2 | |
| windowsversion: | |
| type: choice | |
| description: which version you want to create | |
| options: | |
| - "2019" | |
| - "2022" | |
| env: | |
| # set with your preferred AWS region, e.g. us-west-1 | |
| AWS_REGION: ${{ github.event.inputs.region }} | |
| # set with GitHub Actions role name | |
| AWS_ROLE_ARN: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GithubActionsRole | |
| ROLLE_SESSION_NAME: GithubAction-PackerBuild | |
| PACKER_VERSION: 1.9.5 | |
| PYTHON_VERSION: 3.9 | |
| ANSIBLE_VERSION: 5.9.0 | |
| EGIHS_TARGET: ${{ github.event.inputs.target }} | |
| EGIHS_WINDOW_VERSION: ${{ github.event.inputs.windowsversion }} | |
| defaults: | |
| run: | |
| working-directory: ./packer/ | |
| jobs: | |
| packer: | |
| if: ${{ github.ref == 'refs/heads/working' }} | |
| runs-on: self-hosted | |
| # These permissions are needed to interact with GitHub's OIDC Token endpoint. | |
| permissions: | |
| id-token: write | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| steps: | |
| - uses: actions/checkout@v2 | |
| id: checkout | |
| # if manual-run, please comment out the following | |
| # if: contains(toJSON(github.event.commits.*.message), '@builddev-aws') | |
| with: | |
| submodules: true # Fetch submodules | |
| fetch-depth: 0 # Fetch all history for .GitInfo and .Lastmod | |
| - name: Configure AWS credentials from IAM Role for Github Action | |
| if: ${{ !env.ACT }} | |
| id: configure_aws_credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-region: ${{ env.AWS_REGION }} | |
| role-session-name: ${{ env.ROLLE_SESSION_NAME }}-${{ github.run_id }} | |
| role-to-assume: ${{ env.AWS_ROLE_ARN }} | |
| - name: Configure AWS credentials from IAM Role for Local | |
| if: ${{ env.ACT }} | |
| id: configure_aws_credentials_local | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-region: ${{ env.AWS_REGION }} | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| - name: Set up Packer | |
| uses: hashicorp-contrib/setup-packer@v1 | |
| with: | |
| packer-version: ${{ env.PACKER_VERSION }} | |
| - name: Set up Python | |
| uses: actions/setup-python@v2 | |
| with: | |
| python-version: ${{ env.PYTHON_VERSION }} | |
| - name: Set up Ansible dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install botocore boto3 pywinrm | |
| - name: Set up Ansible | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install ansible ansible-lint | |
| - name: install awscli | |
| id: install-aws-cli | |
| uses: unfor19/[email protected] | |
| with: | |
| version: 2 | |
| - name: Download privatekey ssm | |
| run: aws ssm get-parameter --name "/key/github-action" --with-decryption | jq -r .Parameter.Value > ./privatekey | |
| working-directory: ./ansible/ | |
| # - name: Packer validate | |
| # id: packer_validate | |
| # run: 'packer validate -syntax-only -var-file aws-${{ env.EGIHS_TARGET }}.pkrvars.hcl -var region=${{ env.AWS_REGION }} aws.pkr.hcl' | |
| # working-directory: ./packer/ | |
| # - name: Packer build | |
| # continue-on-error: true | |
| # id: packer_build | |
| # if: ${{ steps.packer_validate.outcome == 'success' }} | |
| # run: 'packer build -color=false -on-error=abort -var-file aws-${{ env.EGIHS_TARGET }}.pkrvars.hcl -var region=${{ env.AWS_REGION }} aws.pkr.hcl' | |
| # Development Job | |
| - name: Packer validate for dev | |
| id: packer_validate_dev | |
| run: 'packer validate -syntax-only -var-file aws-${{ env.EGIHS_TARGET }}.pkrvars.hcl -var region=${{ env.AWS_REGION }} -only ${{ env.EGIHS_TARGET }}-windowsserver${{ env.EGIHS_WINDOW_VERSION }}.* aws.pkr.hcl' | |
| working-directory: ./packer/ | |
| if: ${{ env.EGIHS_TARGET == 'dev'}} | |
| - name: Packer build for dev | |
| continue-on-error: true | |
| id: packer_build_dev | |
| run: 'packer build -color=false -on-error=abort -var-file aws-${{ env.EGIHS_TARGET }}.pkrvars.hcl -var region=${{ env.AWS_REGION }} -only ${{ env.EGIHS_TARGET }}-windowsserver${{ env.EGIHS_WINDOW_VERSION }}.* aws.pkr.hcl' | |
| if: steps.packer_validate_dev.outcome == 'success' | |
| # if: ${{ steps.packer_validate_dev.outcome == 'success' }} | |
| # Production Job | |
| - name: Packer validate for prod | |
| id: packer_validate | |
| run: 'packer validate -syntax-only -var-file aws.pkrvars.hcl -var region=${{ env.AWS_REGION }} -only windowsserver${{ env.EGIHS_WINDOW_VERSION }}.* aws.pkr.hcl' | |
| working-directory: ./packer/ | |
| if: ${{ env.EGIHS_TARGET == 'prod'}} | |
| - name: Packer build for prod | |
| continue-on-error: true | |
| id: packer_build | |
| run: 'packer build -color=false -on-error=abort -var-file aws.pkrvars.hcl -var region=${{ env.AWS_REGION }} -only windowsserver${{ env.EGIHS_WINDOW_VERSION }}.* aws.pkr.hcl' | |
| if: steps.packer_validate.outcome == 'success' | |
| # if: ${{ steps.packer_validate.outcome == 'success' }} | |
| - name: check if there is a crash log with unexcepted error | |
| id: file_check | |
| run: | | |
| $existing = Test-Path -Path ./crash.log | |
| Write-Host "::set-output name=existing::$existing" | |
| shell: pwsh | |
| - name: Error handling | |
| if: ${{ steps.file_check.outputs.existing == 'True' }} | |
| run: aws s3 cp ./crash.log s3://egihs-packer-log/ |