release.yml

name: release workflow

on:
  workflow_dispatch:


permissions: {}

jobs:
  get_config_values:
    uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@889349f9d93e4846a642f7973b7c26b180bec5aa
    with:
      verify_published_from_main_image: true
    permissions:
      attestations: read
      contents: read
      packages: read

  quality_checks:
    uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@889349f9d93e4846a642f7973b7c26b180bec5aa
    needs: [get_config_values]
    permissions:
      contents: read
      id-token: write
      packages: read
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      run_docker_scan: true
      docker_images: fhir-facade,validator
    secrets:
      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

  get_commit_id:
    runs-on: ubuntu-22.04
    outputs:
      commit_id: ${{ steps.commit_id.outputs.commit_id }}
      short_commit_id: ${{ steps.short_commit_id.outputs.short_commit_id }}
    steps:
      - name: Get Commit ID
        id: commit_id
        run: echo "commit_id=${{ github.sha }}" >> "$GITHUB_OUTPUT"
      - name: Get Short Commit ID
        id: short_commit_id
        run: echo "short_commit_id=$(echo ${{ github.sha }} | cut -c1-7)" >>   "$GITHUB_OUTPUT"

  tag_release:
    needs: [quality_checks, get_commit_id, get_config_values]
    uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@889349f9d93e4846a642f7973b7c26b180bec5aa
    permissions:
      id-token: write
      contents: write
      packages: write
    with:
      dry_run: false
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      branch_name: master
      tag_format: ${{ needs.get_config_values.outputs.tag_format }}
      main_branch: master
      update_jira: true
      jira_release_prefix: "fhir-facade"
    secrets:
      EXECUTE_JIRA_LAMBDA_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE }}

  package_code:
    needs: [get_commit_id, tag_release, get_config_values]
    uses: ./.github/workflows/cdk_package_code.yml
    permissions:
      id-token: write
      contents: read
      packages: read
    with:
      VERSION_NUMBER: ${{ needs.tag_release.outputs.version_tag }}
      COMMIT_ID: ${{ needs.get_commit_id.outputs.commit_id }}
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
  
  release_dev:
    needs: [tag_release, package_code, get_commit_id, get_config_values]
    permissions:
      id-token: write
      contents: write
      packages: read
    uses: ./.github/workflows/cdk_release_code.yml
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense
      STATEFUL_STACK_NAME: prescriptions-stateful-resources
      AWS_ENVIRONMENT: dev
      APIGEE_ENVIRONMENT: internal-dev
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: debug
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 30
      DEPLOY_APIGEE: true
      # CREATE_INT_RELEASE_NOTES: true
      # CREATE_PROD_RELEASE_NOTES: true
      TARGET_SPINE_SERVER: msg.veit07.devspineservices.nhs.uk
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: true
      TO_ASID: 567456789789
      TO_PARTY_KEY: YES-0000806
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: true
      SHA1_ENABLED_APPLICATION_IDS: 486a14ea-a0df-4f76-abac-e7d10dab8ae2,aa237a18-24af-421d-a4a8-e82474572a49,babc739d-6a30-4bb1-b4b2-919c6b63c7bc,1122eb42-c783-4748-84b7-47e20446306d
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: false
      SANDBOX_MODE_ENABLED: 0
      DESIRED_FHIR_FACADE_COUNT: 1
      DESIRED_CLAIMS_COUNT: 1
      DESIRED_PEAK_CLAIMS_COUNT: 1
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 1
      SERVICE_CPU: 2048
      SERVICE_MEMORY: 4096
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: false
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_DEPLOY_ROLE }}
      DEV_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      INT_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.INT_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      PROD_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.PROD_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PTL_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      API_CLIENT_ID: ${{ secrets.DEV_API_CLIENT_ID }}
      API_CLIENT_SECRET: ${{ secrets.DEV_API_CLIENT_SECRET }}
      SIGNING_PRIVATE_KEY: ${{ secrets.DEV_SIGNING_PRIVATE_KEY }}
      SIGNING_CERT: ${{ secrets.DEV_SIGNING_CERT }}
      DEFAULT_PTL_ASID: ${{ secrets.DEFAULT_PTL_ASID }}
      DEFAULT_PTL_PARTY_KEY: ${{ secrets.DEFAULT_PTL_PARTY_KEY }}

  release_dev_sandbox:
    needs: [tag_release, package_code, get_commit_id, get_config_values]
    uses: ./.github/workflows/cdk_release_code.yml
    permissions:
      id-token: write
      contents: write
      packages: read
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense-sandbox
      STATEFUL_STACK_NAME: prescriptions-stateful-resources-sandbox
      AWS_ENVIRONMENT: dev
      APIGEE_ENVIRONMENT: internal-dev-sandbox
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-sandbox-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: debug
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 30
      DEPLOY_APIGEE: true
      TARGET_SPINE_SERVER: unused
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: false
      TO_ASID: unused
      TO_PARTY_KEY: unused
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: true
      SHA1_ENABLED_APPLICATION_IDS: 486a14ea-a0df-4f76-abac-e7d10dab8ae2,aa237a18-24af-421d-a4a8-e82474572a49,babc739d-6a30-4bb1-b4b2-919c6b63c7bc,1122eb42-c783-4748-84b7-47e20446306d
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: false
      SANDBOX_MODE_ENABLED: 1
      DESIRED_FHIR_FACADE_COUNT: 1
      DESIRED_CLAIMS_COUNT: 1
      DESIRED_PEAK_CLAIMS_COUNT: 1
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 1
      SERVICE_CPU: 2048
      SERVICE_MEMORY: 4096
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: false
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_DEPLOY_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PTL_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      API_CLIENT_ID: ${{ secrets.DEV_API_CLIENT_ID }}
      API_CLIENT_SECRET: ${{ secrets.DEV_API_CLIENT_SECRET }}
      SIGNING_PRIVATE_KEY: ${{ secrets.DEV_SIGNING_PRIVATE_KEY }}
      SIGNING_CERT: ${{ secrets.DEV_SIGNING_CERT }}
      DEFAULT_PTL_ASID: unused
      DEFAULT_PTL_PARTY_KEY: unused

  release_ref:
    needs:
      [
        tag_release,
        release_dev,
        release_dev_sandbox,
        package_code,
        get_commit_id,
        get_config_values,
      ]
    permissions:
      id-token: write
      contents: write
      packages: read
    uses: ./.github/workflows/cdk_release_code.yml
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense
      STATEFUL_STACK_NAME: prescriptions-stateful-resources
      AWS_ENVIRONMENT: ref
      APIGEE_ENVIRONMENT: ref
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: debug
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 30
      DEPLOY_APIGEE: true
      TARGET_SPINE_SERVER: prescriptions.refspineservices.nhs.uk
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: false
      TO_ASID: 567456789789
      TO_PARTY_KEY: YES-0000806
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: true
      SHA1_ENABLED_APPLICATION_IDS: 4515047f-fdbf-486f-bafe-dfae62482526,d3984d64-c463-4bb1-adec-ba303a8a123b
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: true
      SANDBOX_MODE_ENABLED: 0
      DESIRED_FHIR_FACADE_COUNT: 2
      DESIRED_CLAIMS_COUNT: 2
      DESIRED_PEAK_CLAIMS_COUNT: 2
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 2
      SERVICE_CPU: 4096
      SERVICE_MEMORY: 8192
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: false
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.REF_CLOUD_FORMATION_DEPLOY_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PTL_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      DEFAULT_PTL_ASID: ${{ secrets.DEFAULT_PTL_ASID }}
      DEFAULT_PTL_PARTY_KEY: ${{ secrets.DEFAULT_PTL_PARTY_KEY }}

  release_qa:
    needs:
      [
        tag_release,
        release_dev,
        release_dev_sandbox,
        package_code,
        get_commit_id,
        get_config_values,
      ]
    uses: ./.github/workflows/cdk_release_code.yml
    permissions:
      id-token: write
      contents: write
      packages: read
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense
      STATEFUL_STACK_NAME: prescriptions-stateful-resources
      AWS_ENVIRONMENT: qa
      APIGEE_ENVIRONMENT: internal-qa
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: debug
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 30
      DEPLOY_APIGEE: true
      TARGET_SPINE_SERVER: msg.intspineservices.nhs.uk
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: true
      TO_ASID: 567456789789
      TO_PARTY_KEY: YES-0000806
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: true
      SHA1_ENABLED_APPLICATION_IDS: 5ad18b73-df45-4d41-9a1e-764d5a2b8671,8082cea1-1016-4ebf-9d80-5057c8275074
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: true
      SANDBOX_MODE_ENABLED: 0
      DESIRED_FHIR_FACADE_COUNT: 1
      DESIRED_CLAIMS_COUNT: 1
      DESIRED_PEAK_CLAIMS_COUNT: 1
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 1
      SERVICE_CPU: 2048
      SERVICE_MEMORY: 4096
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: false
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.QA_CLOUD_FORMATION_DEPLOY_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PTL_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      API_CLIENT_ID: ${{ secrets.QA_API_CLIENT_ID }}
      API_CLIENT_SECRET: ${{ secrets.QA_API_CLIENT_SECRET }}
      SIGNING_PRIVATE_KEY: ${{ secrets.QA_SIGNING_PRIVATE_KEY }}
      SIGNING_CERT: ${{ secrets.QA_SIGNING_CERT }}
      DEFAULT_PTL_ASID: ${{ secrets.DEFAULT_PTL_ASID }}
      DEFAULT_PTL_PARTY_KEY: ${{ secrets.DEFAULT_PTL_PARTY_KEY }}

  release_int:
    needs: [tag_release, release_qa, package_code, get_commit_id, get_config_values]
    permissions:
      id-token: write
      contents: write
      packages: read
    uses: ./.github/workflows/cdk_release_code.yml
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense
      STATEFUL_STACK_NAME: prescriptions-stateful-resources
      AWS_ENVIRONMENT: int
      APIGEE_ENVIRONMENT: int
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: debug
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 30
      DEPLOY_APIGEE: true
      TARGET_SPINE_SERVER: msg.intspineservices.nhs.uk
      # CREATE_INT_RELEASE_NOTES: true
      # CREATE_INT_RC_RELEASE_NOTES: false
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: true
      TO_ASID: 567456789789
      TO_PARTY_KEY: YES-0000806
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: true
      SHA1_ENABLED_APPLICATION_IDS: 5a5e8a3d-8272-4d59-985e-5b2df5c08176,b09efcba-4fa0-4cb9-8ee0-d49b43a4cc1d
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: true
      SANDBOX_MODE_ENABLED: 0
      DESIRED_FHIR_FACADE_COUNT: 1
      DESIRED_CLAIMS_COUNT: 1
      DESIRED_PEAK_CLAIMS_COUNT: 1
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 1
      SERVICE_CPU: 2048
      SERVICE_MEMORY: 4096
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: false
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.INT_CLOUD_FORMATION_DEPLOY_ROLE }}
      DEV_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      INT_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.INT_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      PROD_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.PROD_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PROD_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      API_CLIENT_ID: ${{ secrets.INT_API_CLIENT_ID }}
      API_CLIENT_SECRET: ${{ secrets.INT_API_CLIENT_SECRET }}
      SIGNING_PRIVATE_KEY: ${{ secrets.INT_SIGNING_PRIVATE_KEY }}
      SIGNING_CERT: ${{ secrets.INT_SIGNING_CERT }}
      DEFAULT_PTL_ASID: ${{ secrets.DEFAULT_PTL_ASID }}
      DEFAULT_PTL_PARTY_KEY: ${{ secrets.DEFAULT_PTL_PARTY_KEY }}

  release_sandbox:
    needs: [tag_release, release_qa, package_code, get_commit_id, get_config_values]
    permissions:
      id-token: write
      contents: write
      packages: read
    uses: ./.github/workflows/cdk_release_code.yml
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense-sandox
      STATEFUL_STACK_NAME: prescriptions-stateful-resources-sandbox
      AWS_ENVIRONMENT: int
      APIGEE_ENVIRONMENT: sandbox
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-sandbox-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: debug
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 30
      DEPLOY_APIGEE: true
      TARGET_SPINE_SERVER: unused
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: false
      TO_ASID: unused
      TO_PARTY_KEY: unused
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: true
      SHA1_ENABLED_APPLICATION_IDS: unused
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: false
      SANDBOX_MODE_ENABLED: 1
      DESIRED_FHIR_FACADE_COUNT: 1
      DESIRED_CLAIMS_COUNT: 1
      DESIRED_PEAK_CLAIMS_COUNT: 1
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 1
      SERVICE_CPU: 2048
      SERVICE_MEMORY: 4096
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: false
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.INT_CLOUD_FORMATION_DEPLOY_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PROD_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      DEFAULT_PTL_ASID: unused
      DEFAULT_PTL_PARTY_KEY: unused

  release_prod:
    needs:
      [tag_release, release_int, release_sandbox, package_code, get_commit_id, get_config_values]
    permissions:
      id-token: write
      contents: write
      packages: read
    uses: ./.github/workflows/cdk_release_code.yml
    with:
      pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
      STACK_NAME: prescribe-dispense
      STATEFUL_STACK_NAME: prescriptions-stateful-resources
      AWS_ENVIRONMENT: prod
      APIGEE_ENVIRONMENT: prod
      ENABLE_MUTUAL_TLS: true
      TRUSTSTORE_FILE: fhirfacade-truststore.pem
      VERSION_NUMBER: ${{needs.tag_release.outputs.version_tag}}
      COMMIT_ID: ${{needs.get_commit_id.outputs.commit_id}}
      LOG_LEVEL: info
      VALIDATOR_LOG_LEVEL: INFO
      LOG_RETENTION_DAYS: 731
      # MARK_JIRA_RELEASED: true
      # CREATE_PROD_RELEASE_NOTES: true
      DEPLOY_APIGEE: true
      TARGET_SPINE_SERVER: prescriptions.spineservices.nhs.uk
      DOCKER_IMAGE_TAG: ${{needs.tag_release.outputs.version_tag}}
      RUN_REGRESSION_TEST: false
      TO_ASID: 338068513039
      TO_PARTY_KEY: YEA-0000806
      IS_PULL_REQUEST: false
      ENABLE_DEFAULT_ASID_PARTY_KEY: false
      SHA1_ENABLED_APPLICATION_IDS: dbc8b146-7cb1-4a72-a4b3-767a118bdc36,875e2505-6ad5-442a-9e6c-69a299561e33,da32c882-52d4-41f7-86c2-959b15673aca
      ENABLE_PRESCRIBING_SIGNATURE_VALIDATION: false
      SANDBOX_MODE_ENABLED: 0
      DESIRED_FHIR_FACADE_COUNT: 2
      DESIRED_CLAIMS_COUNT: 2
      DESIRED_PEAK_CLAIMS_COUNT: 6
      DESIRED_OFF_PEAK_CLAIMS_COUNT: 2
      SERVICE_CPU: 4096
      SERVICE_MEMORY: 8192
      MTLS_KEY: fhir-facade-mtls-1
      FORWARD_CSOC_LOGS: true
    secrets:
      CLOUD_FORMATION_DEPLOY_ROLE: ${{ secrets.PROD_CLOUD_FORMATION_DEPLOY_ROLE }}
      DEV_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      INT_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.INT_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      PROD_CLOUD_FORMATION_CHECK_VERSION_ROLE: ${{ secrets.PROD_CLOUD_FORMATION_CHECK_VERSION_ROLE }}
      DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE: ${{ secrets.DEV_CLOUD_FORMATION_EXECUTE_LAMBDA_ROLE }}
      PROXYGEN_ROLE: ${{ secrets.PROXYGEN_PROD_ROLE }}
      REGRESSION_TESTS_PEM: ${{ secrets.REGRESSION_TESTS_PEM }}
      DEFAULT_PTL_ASID: unused
      DEFAULT_PTL_PARTY_KEY: unused