build-k3s-atlan.yaml

name: Build K3s

on:
  push:
    branches:
      - test-branch

permissions:
  id-token: write   # This is required for requesting the JWT
  contents: read    # This is required for actions/checkout

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - name: Checkout K3s
        uses: actions/checkout@v4

      - name: Build K3s binary
        run: |
          DOCKER_BUILDKIT=1 SKIP_IMAGE=1 SKIP_AIRGAP=1 SKIP_VALIDATE=1 GOCOVER=1 make
          sha256sum dist/artifacts/k3s | sed 's|dist/artifacts/||' > dist/artifacts/k3s.sha256sum

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1.7.0
        with:
          role-to-assume: arn:aws:iam::024630551114:role/gh-action-role
          role-session-name: GitHub_to_AWS_via_FederatedOIDC
          aws-region: us-east-1

      - name: Upload K3s binary to S3
        run: |
          aws s3 cp dist/artifacts/k3s s3://atlan-public/workflow-offline-agent/container/k3s --region eu-west-1 --acl public-read
          aws s3 cp dist/artifacts/k3s.sha256sum s3://atlan-public/workflow-offline-agent/container/k3s.sha256sum --region eu-west-1 --acl public-read

      - name: "Upload K3s binary as artifact"
        uses: actions/upload-artifact@v4
        with:
          name: k3s
          path: dist/artifacts/k3s*