llm-ts-example/.github/workflows/deploy.yml at 573cb3aa70d643a26ef821e4eb6fe7e1b4db3e2f · poad/llm-ts-example · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
name: Deploy

on:
  pull_request:
    branches:
      - main
  push:
    branches:
    - main

  workflow_dispatch:

env:
  OIDC_IAM_ROLE_ARN: ${{ secrets.OIDC_IAM_ROLE_ARN }}
  AWS_REGION: us-west-2

permissions:
  id-token: write
  contents: read

jobs:
  deploy-basic-example:
    # 同時実行すると CREATE_IN_PROGRESS や UPDATE_IN_PROGRESS 状態で cdk deploy を行う可能性があるため抑止する
    concurrency:
      group: "cloudformation-llm-basic"
      cancel-in-progress: false

    runs-on: ubuntu-latest
    steps:
    - name: Configure AWS Credentials
      uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v5.0.0
      with:
        role-to-assume: ${{ env.OIDC_IAM_ROLE_ARN }}
        role-session-name: GitHubActions
        aws-region: ${{ env.AWS_REGION }}

    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

    - name: Use Node.js
      uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
      with:
        node-version: 'lts/*'
        check-latest: true
        package-manager-cache: false

    - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
      name: Install pnpm
      with:
        run_install: |
          - recursive: true
            args: [--no-frozen-lockfile]
          - args: [--global, aws-cdk, esbuild]

    - name: deploy
      working-directory: ./basic/cdk
      run: |
        cdk deploy \
          -c oai-instance-name=${{ secrets.AZURE_OPENAI_API_INSTANCE_NAME }} \
          -c oai-api-key=${{ secrets.AZURE_OPENAI_API_KEY }} \
          -c oai-api-version=${{ vars.AZURE_OPENAI_API_VERSION }} \
          -c langfuse-endpoint=${{ secrets.LANGFUSE_ENDPOINT }} \
          -c langfuse-public-key=${{ secrets.LANGFUSE_PUBLIC_KEY }} \
          -c langfuse-secret-key=${{ secrets.LANGFUSE_SECRET_KEY }} \
          -c langsmith-api-key=${{ secrets.LANGCHAIN_API_KEY }} \
          -c langsmith-project=${{ secrets.LANGCHAIN_PROJECT }} \
          -c anthropic-api-key=${{ secrets.ANTHROPIC_API_KEY }} \
          -c claude-model=${{ vars.CLAUDE_MODEL }}

  deploy-rag:
    # 同時実行すると CREATE_IN_PROGRESS や UPDATE_IN_PROGRESS 状態で cdk deploy を行う可能性があるため抑止する
    concurrency:
      group: "rag-examle-cloudformation"
      cancel-in-progress: false

    runs-on: ubuntu-latest
    steps:
    - name: Configure AWS Credentials
      uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v5.0.0
      with:
        role-to-assume: ${{ env.OIDC_IAM_ROLE_ARN }}
        role-session-name: GitHubActions
        aws-region: ${{ env.AWS_REGION }}

    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

    - name: Use Node.js
      uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
      with:
        node-version: 'lts/*'
        check-latest: true
        package-manager-cache: false

    - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
      name: Install pnpm
      with:
        run_install: |
          - recursive: true
            args: [--no-frozen-lockfile]
          - args: [--global, aws-cdk, esbuild]

    - name: deploy
      working-directory: ./rag/cdk
      run: |
        cdk deploy \
          -c oai-instance-name=${{ secrets.AZURE_OPENAI_API_INSTANCE_NAME }} \
          -c oai-api-key=${{ secrets.AZURE_OPENAI_API_KEY }} \
          -c oai-api-version=${{ vars.AZURE_OPENAI_API_VERSION }} \
          -c langfuse-endpoint=${{ secrets.LANGFUSE_ENDPOINT }} \
          -c langfuse-public-key=${{ secrets.LANGFUSE_PUBLIC_KEY }} \
          -c langfuse-secret-key=${{ secrets.LANGFUSE_SECRET_KEY }} \
          -c langsmith-api-key=${{ secrets.LANGCHAIN_API_KEY }} \
          -c langsmith-project=${{ secrets.LANGCHAIN_PROJECT }} \
          -c pinecone-index=${{ vars.PINECONE_INDEX }} \
          -c pinecone-api-key=${{ secrets.PINECONE_API_KEY }}