Merge pull request #17 from rrigato/dev

obtain short term credentials using cloudshell
rrigato · Jul 21, 2024 · a805ff6 · a805ff6
2 parents d51d40a + 03e44c1
commit a805ff6
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 1 deletion.
diff --git a/.github/workflows/burnday_pipeline.yml b/.github/workflows/burnday_pipeline.yml
@@ -3,6 +3,7 @@ on:
   push:
     branches:
       - master
+      - dev
 jobs:
   run-build-test:
     runs-on: ubuntu-latest

diff --git a/scripts/app_deployment.sh b/scripts/app_deployment.sh
@@ -28,6 +28,8 @@ python -m unittest
 
 deactivate
 
+git push origin dev
+
 echo "pushed to remote"
 
 gh pr create --title "$1" \

diff --git a/scripts/burnday_build_test.sh b/scripts/burnday_build_test.sh
@@ -34,7 +34,7 @@ zip $DEPLOYMENT_PACKAGE -r $PROJECT_NAME  \
 zip -u $DEPLOYMENT_PACKAGE -j handlers/${PROJECT_NAME}_skill.py  \
     -x *__pycache__* --quiet
 
-zip -u $DEPLOYMENT_PACKAGE -j externals  \
+zip -u $DEPLOYMENT_PACKAGE -r externals  \
     -x *__pycache__* --quiet
 
 echo "--------deployment package created--------"

diff --git a/scripts/cloudshell_assume_role.sh b/scripts/cloudshell_assume_role.sh
@@ -0,0 +1,9 @@
+#assume sts role and export the credentials to be used from aws cloudshell
+CREDENTIALS=$(
+    aws sts assume-role --role-arn $ROLE_ARN \
+    --role-session-name local_debug_session \
+)
+
+echo -e "export AWS_ACCESS_KEY_ID=$(echo $CREDENTIALS | jq -r '.Credentials.AccessKeyId')\n\
+export AWS_SECRET_ACCESS_KEY=$(echo $CREDENTIALS | jq -r '.Credentials.SecretAccessKey')\n\
+export AWS_SESSION_TOKEN=$(echo $CREDENTIALS | jq -r '.Credentials.SessionToken')"
-Original file line number
+Diff line change
@@ Expand Up / @@ -3,6 +3,7 @@ on: @@
       push:
         branches:
           - master
+          - dev
     jobs:
       run-build-test:
         runs-on: ubuntu-latest
@@ Expand Down @@