[INFOPLAT-1427] Action to deploy Protobuf/AVRO schemas to Confluent Schema Registry

actions/beholder-pulumi-deploy-schema/README.md

@@ -0,0 +1,3 @@
+# beholder-pulumi-deploy-schema
+
+> Validates and deploys a Protobuf or AVRO schema to Confluent Schema Registry

actions/beholder-pulumi-deploy-schema/action.yml

@@ -0,0 +1,62 @@
+name: beholder-pulumi-deploy-schema
+description:
+  "Validates and deploys a Protobuf or AVRO schema to Confluent Schema Registry"
+
+inputs:
+  pulumi_s3_bucket:
+    description: "S3 bucket name to use as Pulumi backend"
+    required: true
+  aws_account_id:
+    description: "AWS Account ID"
+    required: false
+    default: "654654554896" # this is info platform sandbox. TBD: change to prod account once ready
+  aws_region:
+    description: "AWS region"
+    required: false
+    default: "us-west-2"
+
+runs:
+  using: "composite"
+  steps:
+    - uses: actions/[email protected]
+
+    - name: Install Pulumi
+      shell: bash
+      run: |
+        curl -fsSL https://get.pulumi.com | sh
+        echo "$HOME/.pulumi/bin" >> $GITHUB_PATH
+
+    - name: Pulumi Login
+      shell: bash
+      run: pulumi login s3://${{ inputs.pulumi_s3_bucket }}
+      env:
+        PULUMI_CONFIG_PASSPHRASE: ${{ env.PULUMI_CONFIG_PASSPHRASE }}
+
+    - name: Docker login to ECR
+      shell: bash
+      run: |
+        aws ecr get-login-password --region ${{ inputs.aws_region }} \
+        | docker login --username AWS --password-stdin \
+          ${{ inputs.aws_account_id }}.dkr.ecr.${{ inputs.aws_region }}.amazonaws.com
+
+    - name: Pull container image
+      shell: bash
+      run: |
+        docker pull ${{ inputs.aws_account_id }}.dkr.ecr.${{ inputs.aws_region }}.amazonaws.com/atlas-beholder-pulumi:latest
+
+    - name: Deploy schema
+      shell: bash
+      run: |
+        docker run \
+          -e CONFLUENT_CLOUD_API_KEY="${{ env.CONFLUENT_CLOUD_API_KEY }}" \
+          -e CONFLUENT_CLOUD_API_SECRET="${{ env.CONFLUENT_CLOUD_API_SECRET }}" \
+          -e SCHEMA_REGISTRY_KEY="${{ env.SCHEMA_REGISTRY_KEY }}" \
+          -e SCHEMA_REGISTRY_SECRET="${{ env.SCHEMA_REGISTRY_SECRET }}" \
+          -e PULUMI_CONFIG_PASSPHRASE="${{ env.PULUMI_CONFIG_PASSPHRASE }}" \
+          ${{ inputs.aws_account_id }}.dkr.ecr.${{ inputs.aws_region }}.amazonaws.com/atlas-beholder-pulumi deploy-schemas --preview
+      env:
+        CONFLUENT_CLOUD_API_KEY: ${{ env.CONFLUENT_CLOUD_API_KEY }}
+        CONFLUENT_CLOUD_API_SECRET: ${{ env.CONFLUENT_CLOUD_API_SECRET }}
+        SCHEMA_REGISTRY_KEY: ${{ env.SCHEMA_REGISTRY_KEY }}
+        SCHEMA_REGISTRY_SECRET: ${{ env.SCHEMA_REGISTRY_SECRET }}
+        PULUMI_CONFIG_PASSPHRASE: ${{ env.PULUMI_CONFIG_PASSPHRASE }}

actions/beholder-pulumi-deploy-schema/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "beholder-pulumi-deploy-schema",
+  "version": "0.0.0",
+  "description": "",
+  "private": true,
+  "scripts": {},
+  "author": "@smartcontractkit",
+  "license": "MIT",
+  "dependencies": {},
+  "repository": "https://github.com/smartcontractkit/.github"
+}

actions/beholder-pulumi-deploy-schema/project.json

@@ -0,0 +1,7 @@
+{
+  "name": "beholder-pulumi-deploy-schema",
+  "$schema": "../../node_modules/nx/schemas/project-schema.json",
+  "projectType": "application",
+  "sourceRoot": "actions/beholder-pulumi-deploy-schema",
+  "targets": {}
+}