Add CI deployment workflow for Snowflake warehouses (#70)

infinityworks · Dec 22, 2020 · 68637ff · 68637ff
1 parent 4de1ab8
commit 68637ff
Showing 1 changed file with 41 additions and 0 deletions.
diff --git a/.github/workflows/deploy-snowflake-warehouses.yml b/.github/workflows/deploy-snowflake-warehouses.yml
@@ -0,0 +1,41 @@
+name: 'deploy snowflake warehouses'
+
+on:
+  push:
+    paths:
+      - 'snowflake/infra/warehouses/**'
+
+jobs:
+  deploy-snowflake-warehouses:
+    runs-on: ubuntu-latest
+    container: infinityworks/awscli-terraform-snowflake:1.0.0
+    env:
+      ENV: dev
+      SNOWFLAKE_ACCOUNT: ${{ secrets.SNOWFLAKE_ACCOUNT }}
+      SNOWFLAKE_REGION: ${{ secrets.SNOWFLAKE_REGION }}
+      SNOWFLAKE_USER: ${{ secrets.SNOWFLAKE_USER }}
+      SNOWFLAKE_PASSWORD: ${{ secrets.SNOWFLAKE_PASSWORD }}
+      SNOWSQL_PWD: ${{ secrets.SNOWFLAKE_PASSWORD }}
+      SNOWFLAKE_ROLENAME: SYSADMIN
+
+    steps:
+    - name: checkout-code
+      uses: actions/checkout@v2
+
+    - name: configure-AWS-credentials
+      uses: aws-actions/configure-aws-credentials@v1
+      with:
+        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        aws-region: eu-west-2
+        role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
+        role-duration-seconds: 900
+        role-session-name: CI-deployment
+
+    - name: deploy-warehouses
+      run: |
+        cd snowflake/infra/warehouses
+        terraform init
+        terraform workspace new $ENV || terraform workspace select $ENV
+        terraform plan
+        terraform apply -input=false -auto-approve