runtime-interface-client_merge_to_main.yml

# This workflow will be triggered on merge to the main branch if
# aws-lambda-java-runtime-interface-client package was changed
#
# It will publish artifacts to CodeArtifact repository, specified by properties defined in GitHub repo secrets:
# CODE_ARTIFACT_REPO_ACCOUNT, AWS_REGION, CODE_ARTIFACT_REPO_NAME, CODE_ARTIFACT_DOMAIN
# and will assume role specified by AWS_ROLE
#
# Prerequisite setup:
# https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services

name: Publish artifact for aws-lambda-java-runtime-interface-client

on:
  push:
    branches: [ main ]
    paths:
    - 'aws-lambda-java-runtime-interface-client/**'
    - '.github/workflows/runtime-interface-client_*.yml'
  workflow_dispatch:

jobs:

  publish:
    runs-on: ubuntu-latest

    permissions:
      id-token: write
      contents: read

    steps:
    - uses: actions/checkout@v4

    - name: Set up JDK 1.8
      uses: actions/setup-java@v4
      with:
        java-version: 8
        distribution: corretto

    - name: Set up QEMU
      uses: docker/setup-qemu-action@v3

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v3
      with:
        install: true

    - name: Available buildx platforms
      run: echo ${{ steps.buildx.outputs.platforms }}
          
    - name: Test Runtime Interface Client xplatform build - Run 'build' target
      working-directory: ./aws-lambda-java-runtime-interface-client
      run: make build
      env:
        IS_JAVA_8: true

    - name: Issue AWS credentials
      if: env.ENABLE_SNAPSHOT != null
      env:
        ENABLE_SNAPSHOT: ${{ secrets.ENABLE_SNAPSHOT }}
      uses: aws-actions/configure-aws-credentials@v4
      with:
        aws-region: ${{ secrets.AWS_REGION }}
        role-to-assume: ${{ secrets.AWS_ROLE }}
        role-session-name: GitHubActionsPublishPackage
        role-duration-seconds: 900

    - name: Prepare codeartifact properties
      if: env.ENABLE_SNAPSHOT != null
      env:
        ENABLE_SNAPSHOT: ${{ secrets.ENABLE_SNAPSHOT }}
      working-directory: ./aws-lambda-java-runtime-interface-client/ric-dev-environment
      run: |
        cat <<EOF > codeartifact-properties.mk
        CODE_ARTIFACT_REPO_ACCOUNT=${{ secrets.AWS_ACCOUNT }}
        CODE_ARTIFACT_REPO_REGION=${{ env.AWS_REGION }}
        CODE_ARTIFACT_REPO_NAME=${{ secrets.CODE_ARTIFACT_REPO_NAME }}
        CODE_ARTIFACT_DOMAIN=${{ secrets.AWS_CODEARTIFACT_DOMAIN }}
        EOF

    - name: Publish
      if: env.ENABLE_SNAPSHOT != null
      working-directory: ./aws-lambda-java-runtime-interface-client
      env:
        ENABLE_SNAPSHOT: ${{ secrets.ENABLE_SNAPSHOT }}
      run: make publish

    - name: Upload coverage to Codecov
      if: env.CODECOV_TOKEN != null
      uses: codecov/codecov-action@v4
      env:
        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}