use action directly, not run_task

newrelic · Nov 28, 2023 · 1dfddc0 · 1dfddc0
1 parent f56b8f1
commit 1dfddc0
Showing 1 changed file with 36 additions and 10 deletions.
diff --git a/.github/workflows/merge-to-master.yml b/.github/workflows/merge-to-master.yml
@@ -65,14 +65,40 @@ jobs:
 #          gpg_private_key_base64: ${{ env.GPG_PRIVATE_KEY_BASE64 }}
 
   publish-windows:
-    name: Publish windows packages to production bucket
+    name: Publish windows packages to logging's production bucket
     needs: get-release-tag
-    uses: ./.github/workflows/run_task.yml
-    with:
-      container_make_target: "upload-win-packages"
-      task_environment:
-        - name: TAG
-          value: ${{ needs.get-release-tag.outputs.tag }}
-        - name: AWS_S3_BUCKET_NAME
-          value: "logging-fb-windows-packages"
-    secrets: inherit
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v2
+        with:
+          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+          role-duration-seconds: 10800 # default to 1 hour, which might not suffice https://github.com/aws-actions/configure-aws-credentials#credential-lifetime
+          aws-region: us-east-2
+
+      - name: Launch Fargate task
+        uses: newrelic/fargate-runner-action@main
+        with:
+          aws_region: us-east-2
+          container_make_target: "upload-win-packages"
+          ecs_cluster_name: infra-agent-fb-e2e-testing
+          task_definition_name: infra-agent-fb-e2e-testing
+          cloud_watch_logs_group_name: infra-agent-fb-e2e-testing
+          # The log stream name must follow the {cloudwatch_log_prefix}/{container_name}
+          # that was used to create the ECS infrastructure. "ecs" is the default cloudwatch_log_prefix
+          # when not specified, and our container_name is infra-agent-fb-e2e-testing
+          cloud_watch_logs_stream_name: ecs/infra-agent-fb-e2e-testing
+          aws_vpc_subnet: subnet-06240c469195932cf
+          aws_vpc_security_groups: |
+            sg-0c4318be91bbe3cba
+          repo_name: "newrelic/fluent-bit-package"
+          ref: ${{ needs.get-release-tag.outputs.tag }}
+          task_environment:
+            - name: TAG
+              value: ${{ needs.get-release-tag.outputs.tag }}
+            - name: AWS_S3_BUCKET_NAME
+              value: "logging-fb-windows-packages"