Allow no ca during db upgrades (#5096) #15443
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
on: | |
push: | |
branches: | |
- '*' | |
- '**/*' | |
name: Precompile any assets that have changed and push them to S3 | |
concurrency: | |
group: ${{ github.ref }}-asset-compilation | |
cancel-in-progress: true | |
jobs: | |
compile: | |
name: Compile | |
strategy: | |
matrix: | |
client_group: | |
- gha_staging_load_1 | |
- gha_staging_load_2 | |
- gha_staging_load_3 | |
- gha_staging_load_4 | |
- gha_staging_load_5 | |
- gha_staging_load_6 | |
- gha_staging_load_7 | |
- gha_staging_load_8 | |
- gha_staging_load_9 | |
- gha_staging_load_10 | |
- gha_staging_load_11 | |
- gha_staging_load_12 | |
- gha_staging_load_13 | |
- gha_staging_load_14 | |
- gha_staging_load_15 | |
- gha_staging_load_16 | |
- gha_staging_load_17 | |
- gha_staging_load_18 | |
- gha_staging_load_19 | |
- gha_staging_load_20 | |
- gha_staging_load_21 | |
- gha_production_load_1 | |
- gha_production_load_2 | |
# client removed - gha_production_load_3 | |
- gha_production_load_4 | |
# client removed - gha_production_load_5 | |
- gha_production_load_6 | |
- gha_production_load_7 | |
- gha_production_load_8 | |
- gha_production_load_9 | |
- gha_production_load_10 | |
- gha_production_load_11 | |
- gha_production_load_12 | |
- gha_production_load_13 | |
- gha_production_load_14 | |
- gha_production_load_15 | |
- gha_production_load_16 | |
- gha_production_load_17 | |
- gha_production_load_18 | |
runs-on: ubuntu-20.04 | |
container: ruby:3.1.6-alpine3.20 | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
- name: Configure AWS credentials | |
uses: aws-actions/configure-aws-credentials@v1-node16 | |
with: | |
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
aws-region: us-east-1 | |
- name: 'Container Setup' | |
id: container-setup | |
uses: ./.github/workflows/container_setup | |
- name: Generate checksum and compile | |
shell: bash | |
env: | |
SECRETS_YML_SECRET_ARN: ${{ secrets.SECRETS_YML_SECRET_ARN }} | |
DATABASE_ADAPTER: postgresql | |
DATABASE_HOST: postgres | |
DATABASE_PASS: postgres | |
DATABASE_USER: postgres | |
DEFAULT_FROM: [email protected] | |
ENCRYPTION_KEY: strongEncryptionstrongEncryptionstrongEncryption | |
HEALTH_DATABASE_ADAPTER: postgresql | |
HEALTH_DATABASE_HOST: postgres | |
HEALTH_DATABASE_PASS: postgres | |
HEALTH_DATABASE_USER: postgres | |
HEALTH_FROM: [email protected] | |
REPORTING_DATABASE_ADAPTER: postgresql | |
REPORTING_DATABASE_HOST: postgres | |
REPORTING_DATABASE_PASS: postgres | |
REPORTING_DATABASE_USER: postgres | |
WAREHOUSE_DATABASE_ADAPTER: postgis | |
WAREHOUSE_DATABASE_HOST: postgres | |
WAREHOUSE_DATABASE_PASS: postgres | |
WAREHOUSE_DATABASE_USER: postgres | |
WAREHOUSE_DATABASE_DB: warehouse_db | |
HEALTH_DATABASE_DB: health_db | |
REPORTING_DATABASE_DB: reporting_db | |
DEBUG: "false" | |
run: | | |
DEPLOY_PROTECT_SECRETS=true EXCEPTION_WEBHOOK_CHANNEL_OVERRIDE=gr-op-gha-except bundle exec bin/compile_assets.rb ${{ matrix.client_group }} | |
if [[ "$DEBUG" = "true" ]]; then | |
echo "asset.checksum.log" | |
cat asset.checksum.log | |
fi |