Skip to content

Commit

Permalink
Use assume-role with OIDC authenticate docs push to S3 (#1721)
Browse files Browse the repository at this point in the history
  • Loading branch information
patrickod authored Jul 24, 2023
1 parent 0506537 commit c2db7e6
Showing 1 changed file with 13 additions and 2 deletions.
15 changes: 13 additions & 2 deletions .github/workflows/publish-docs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,19 +16,30 @@ on:
sqlalchemy_oso_version:
description: "sqlalchemy oso release to build docs for"
default: "0.27.0" # sqlalchemy_oso_version

# Needed to get an AWS token
permissions:
contents: read # (default) needed for the actions/checkout task
id-token: write # Retrieve ID token for AWS OIDC authentication

jobs:
publish:
name: Publish docs
runs-on: ubuntu-latest
env:
AWS_ACCESS_KEY_ID: ${{ secrets.DOCS_AWS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.DOCS_AWS_SECRET }}
AWS_REGION: "us-east-1"
PUBLISH_DOCS: 1
ALGOLIA_ADMIN_API_KEY: ${{ secrets.ALGOLIA_ADMIN_API_KEY }}
steps:
- uses: actions/checkout@v2

- name: configure AWS credentials
uses: aws-actions/configure-aws-credentials@v1-node16
with:
role-to-assume: arn:aws:iam::145452666862:role/oso-docs-github-actions-role
role-duration-seconds: 900
aws-region: us-east-1

### Setup dependencies
- uses: actions/setup-python@v2
name: Install Python
Expand Down

2 comments on commit c2db7e6

@github-actions
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Rust Benchmark

Benchmark suite Current: c2db7e6 Previous: 0506537 Ratio
rust_get_attribute 57323 ns/iter (± 5058) 44497 ns/iter (± 2175) 1.29
n_plus_one/100 2631810 ns/iter (± 73846) 2183135 ns/iter (± 38764) 1.21
n_plus_one/500 11965474 ns/iter (± 563699) 10502336 ns/iter (± 16298) 1.14
n_plus_one/1000 24055373 ns/iter (± 1422146) 20976179 ns/iter (± 45237) 1.15
unify_once 1041 ns/iter (± 98) 903 ns/iter (± 528) 1.15
unify_twice 2771 ns/iter (± 164) 2474 ns/iter (± 65) 1.12
many_rules 65550 ns/iter (± 3916) 57577 ns/iter (± 1361) 1.14
fib/5 612818 ns/iter (± 37374) 527578 ns/iter (± 7017) 1.16
prime/3 20796 ns/iter (± 1717) 17207 ns/iter (± 688) 1.21
prime/23 20032 ns/iter (± 2672) 17152 ns/iter (± 729) 1.17
prime/43 20219 ns/iter (± 2056) 17157 ns/iter (± 674) 1.18
prime/83 20194 ns/iter (± 2030) 17219 ns/iter (± 656) 1.17
prime/255 18499 ns/iter (± 2712) 15506 ns/iter (± 566) 1.19
indexed/100 6737 ns/iter (± 1963) 5766 ns/iter (± 561) 1.17
indexed/500 8512 ns/iter (± 2164) 7786 ns/iter (± 1619) 1.09
indexed/1000 10890 ns/iter (± 6260) 9175 ns/iter (± 563) 1.19
indexed/10000 27800 ns/iter (± 3928) 27725 ns/iter (± 1787) 1.00
not 6685 ns/iter (± 1099) 5698 ns/iter (± 110) 1.17
double_not 13567 ns/iter (± 734) 11884 ns/iter (± 238) 1.14
De_Morgan_not 8709 ns/iter (± 591) 7703 ns/iter (± 151) 1.13
load_policy 1033542 ns/iter (± 35879) 945567 ns/iter (± 2084) 1.09
partial_and/1 38903 ns/iter (± 7388) 31845 ns/iter (± 1310) 1.22
partial_and/5 134046 ns/iter (± 11232) 110354 ns/iter (± 3422) 1.21
partial_and/10 254283 ns/iter (± 14726) 210315 ns/iter (± 4803) 1.21
partial_and/20 508018 ns/iter (± 22493) 433291 ns/iter (± 9311) 1.17
partial_and/40 1096817 ns/iter (± 58806) 939963 ns/iter (± 9018) 1.17
partial_and/80 2526924 ns/iter (± 199761) 2109634 ns/iter (± 7826) 1.20
partial_and/100 3474494 ns/iter (± 218315) 2791979 ns/iter (± 52396) 1.24
partial_rule_depth/1 125380 ns/iter (± 7215) 102036 ns/iter (± 4051) 1.23
partial_rule_depth/5 415336 ns/iter (± 32806) 337752 ns/iter (± 7028) 1.23
partial_rule_depth/10 933282 ns/iter (± 50029) 737007 ns/iter (± 10585) 1.27
partial_rule_depth/20 2709255 ns/iter (± 104547) 2072603 ns/iter (± 5092) 1.31
partial_rule_depth/40 10651977 ns/iter (± 813375) 7719338 ns/iter (± 106159) 1.38
partial_rule_depth/80 66451256 ns/iter (± 3070164) 43131330 ns/iter (± 299242) 1.54
partial_rule_depth/100 122329701 ns/iter (± 6298265) 79419808 ns/iter (± 414477) 1.54

This comment was automatically generated by workflow using github-action-benchmark.

@github-actions
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Rust Benchmark'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.50.

Benchmark suite Current: c2db7e6 Previous: 0506537 Ratio
partial_rule_depth/80 66451256 ns/iter (± 3070164) 43131330 ns/iter (± 299242) 1.54
partial_rule_depth/100 122329701 ns/iter (± 6298265) 79419808 ns/iter (± 414477) 1.54

This comment was automatically generated by workflow using github-action-benchmark.

CC: @osohq/eng

Please sign in to comment.