nodejs-docs-samples/.github/workflows/iam-deny.yaml at ffcfa93fad2750e7d9fb66724b4cb3621ffd5bf6 · GoogleCloudPlatform/nodejs-docs-samples · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
# Copyright 2023 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


name: iam-deny
on:
  push:
    branches:
    - main
    paths:
    - 'iam/deny/**'
    - '.github/workflows/iam-deny.yaml'
  pull_request:
    types:
    - opened
    - reopened
    - synchronize
    - labeled
    paths:
    - 'iam/deny/**'
    - '.github/workflows/iam-deny.yaml'
  schedule:
  - cron: '0 0 * * 0'
jobs:
  test:
    permissions:
      contents: 'read'
      id-token: 'write'
    if: github.event.action != 'labeled' || github.event.label.name == 'actions:force-run'
    runs-on: ubuntu-latest
    timeout-minutes: 120
    defaults:
      run:
        working-directory: 'iam/deny'
    steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
         ref: ${{github.event.pull_request.head.sha}}
       - uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3.0.0
         with:
         workload_identity_provider: 'projects/949737848314/locations/global/workloadIdentityPools/iam-deny-test-pool/providers/iam-deny-test-provider'
         service_account: 'kokoro-ca@isakovf-iam-deny-samples.iam.gserviceaccount.com'
         create_credentials_file: 'true'
         access_token_lifetime: 600s
       - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
          node-version: 16
       - name: Get npm cache directory
         id: npm-cache-dir
         shell: bash
         run: echo "dir=$(npm config get cache)" >> ${GITHUB_OUTPUT}
       - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
         id: npm-cache
         with:
          path: ${{ steps.npm-cache-dir.outputs.dir }}
          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
          restore-keys: "${{ runner.os }}-node-   \n"
       - name: install repo dependencies
         run: npm install
         working-directory: .
       - name: install directory dependencies
         run: npm install
       - run: npm run build --if-present
       - name: set env vars for scheduled run
         if: github.event.action == 'schedule'
         run: |
          echo "MOCHA_REPORTER_SUITENAME=iam-deny" >> $GITHUB_ENV
          echo "MOCHA_REPORTER_OUTPUT=${{github.run_id}}_sponge_log.xml" >> $GITHUB_ENV
          echo "MOCHA_REPORTER=xunit" >> $GITHUB_ENV
       - run: npm test