build.yaml

name: CI
on:
  release:
    types: [published]
permissions:
  id-token: write
  contents: write
jobs:
  build-us-east-1:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3

    - name: Assume github action role
      uses: aws-actions/configure-aws-credentials@master
      with:
        role-to-assume: "arn:aws:iam::320005014399:role/github-action"
        aws-region: us-east-1

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@master
      with:
        aws-access-key-id: ${{ env.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ env.AWS_SECRET_ACCESS_KEY }}
        aws-session-token: ${{ env.AWS_SESSION_TOKEN }}
        aws-region: ${{ env.AWS_REGION }}
        role-to-assume: arn:aws:iam::320005014399:role/eks-ami-builder
        role-skip-session-tagging: true
        role-duration-seconds: 3600

    - name: Connect to Tailscale
      uses: tailscale/github-action@v2
      with:
        oauth-client-id: ${{ secrets.TAILSCALE_CLIENT_ID }}
        oauth-secret: ${{ secrets.TAILSCALE_SECRET }}
        tags: tag:dmx-prod
        
    - name: Setup `packer`
      uses: hashicorp/setup-packer@main
      id: setup
      with:
        version: "1.8.6" 

    - name: Build us-east-1
      run: |
        VERSION="${GITHUB_REF_NAME:1}"
        make k8s=$VERSION
    
    - name: Disconnect form Tailscale
      run: sudo tailscale down

  build-us-east-1-arm64:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2

    - name: Assume github action role
      uses: aws-actions/configure-aws-credentials@master
      with:
        role-to-assume: "arn:aws:iam::320005014399:role/github-action"
        aws-region: us-east-1

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@master
      with:
        aws-access-key-id: ${{ env.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ env.AWS_SECRET_ACCESS_KEY }}
        aws-session-token: ${{ env.AWS_SESSION_TOKEN }}
        aws-region: ${{ env.AWS_REGION }}
        role-to-assume: arn:aws:iam::320005014399:role/eks-ami-builder
        role-skip-session-tagging: true
        role-duration-seconds: 3600

    - name: Connect to Tailscale
      uses: tailscale/github-action@v2
      with:
        oauth-client-id: ${{ secrets.TAILSCALE_CLIENT_ID }}
        oauth-secret: ${{ secrets.TAILSCALE_SECRET }}
        tags: tag:dmx-prod

    - name: Setup `packer`
      uses: hashicorp/setup-packer@main
      id: setup
      with:
        version: "1.8.6" 

    - name: Build us-east-1 arm64
      run: |
        VERSION="${GITHUB_REF_NAME:1}"
        make k8s=$VERSION arch=arm64
    
    - name: Disconnect form Tailscale
      run: sudo tailscale down