aws-encryption-sdk-go/.github/workflows/go-e2e.yml at main · chainifynet/aws-encryption-sdk-go · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
name: Go E2E

on:
  push:
    branches:
      - 'main'
  workflow_dispatch:

jobs:
  integration:
    name: Integration Tests
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Go
        uses: actions/setup-go@v5
        with:
          cache: false
          go-version: 1.23.x

      - name: Load cached dependencies
        uses: actions/cache@v4
        with:
          path: |
            ~/.cache/go-build
            ~/go/pkg/mod
          key: ${{ runner.os }}-go-e2e-${{ hashFiles('**/go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-e2e-

      - name: Install dependencies
        run: make deps

      - name: Unit tests
        run: make unit

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.11'

      - name: Install E2E dependencies
        run: make e2e-deps

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ secrets.OIDC_AWS_ROLE_TO_ASSUME }}
          aws-region: us-east-1
          mask-aws-account-id: true
          output-credentials: true
          role-duration-seconds: 900
          role-session-name: GithubOidcIntegAssumeRole
          role-external-id: ${{ secrets.OIDC_AWS_ROLE_EXTERNAL_ID }}

      - name: E2E tests
        run: make e2e-test
        env:
          KEY_1_ARN: ${{ secrets.KEY_1_ARN }}
          KEY_2_ARN: ${{ secrets.KEY_2_ARN }}
          KEY_3_ARN: ${{ secrets.KEY_3_ARN }}
          MRK_KEY_1_ARN: ${{ secrets.MRK_KEY_1_ARN }}
          MRK_KEY_2_ARN: ${{ secrets.MRK_KEY_2_ARN }}