diff --git a/.github/workflows/auto-test.yml b/.github/workflows/auto-test.yml index db703caac..5cfcd9351 100644 --- a/.github/workflows/auto-test.yml +++ b/.github/workflows/auto-test.yml @@ -27,7 +27,7 @@ env: default_resource_priority_list: "['account', 'app-flow', 'cfn', 'cloudtrail', 'distribution', 'dynamodb-table', 'ebs', 'ec2', 'ecs', 'network', 'sqs']" #'[ "account", "acm", "airflow", "ami", "apigwv2", "app-elb", "app-flow", "asg", "backup", "cfn", "cloudtrail", "codebuild", "codedeploy", "codepipeline", "dax", "directory", "distribution", "dlm", "dms", "dynamodb", "ebs", "ec2", "ecr", "ecs", "efs", "eip", "eks", "elasticache", "elasticbeanstalk", "elasticsearch", "elb", "emr", "eni", "event", "firehose", "fsx", "glacier", "glue", "graphql", "hostedzone", "iam", "internet", "kafka", "key", "kinesis", "kms", "lambda", "launch", "lightsail", "log", "message", "nat", "network", "peering", "r53domain", "rds", "redshift", "rest", "route", "rrset", "s3", "sagemaker", "secrets", "security-group", "sns", "sqs", "step", "subnet", "transit", "vpc", "vpn", "waf"]' RED: '\033[0;31m' - ACTIONS_REPO_BRANCH: "upd_aws_autotests" + ACTIONS_REPO_BRANCH: "main" permissions: contents: "read" @@ -300,3 +300,24 @@ jobs: SERVICE_ACCOUNT: ${{ secrets.SERVICE_ACCOUNT }} WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.WORKLOAD_IDENTITY_PROVIDER }} COMPLIANCE: ${{ matrix.compliance }} + + check_resources: + name: Check left-over resources + runs-on: ubuntu-22.04 + needs: [destroy_common_resources] + if: ${{ always() }} + steps: + - name: Git clone the repository + uses: actions/checkout@v4 + - name: Checkout ecc-actions + run: git clone -b $ACTIONS_REPO_BRANCH "https://git:$PROJECT_TOKEN@git.epam.com/epmc-sec/cloudlab/cloud_custodian/ecc-actions.git" ecc-actions + env: + PROJECT_TOKEN: ${{ secrets.ECC_CHANGELOG_ACTION }} + ACTIONS_REPO_BRANCH: ${{ env.ACTIONS_REPO_BRANCH }} + - name: Check left-over resources + uses: ./ecc-actions/auto-test-actions/check-resources + with: + CI_ASSUME_ROLE: ${{ secrets.CI_ASSUME_ROLE }} + SERVICE_ACCOUNT: ${{ secrets.SERVICE_ACCOUNT }} + WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.WORKLOAD_IDENTITY_PROVIDER }} + COMPLIANCE: ${{ matrix.compliance }}