Scheduled jobs: Bucket cleanup #2083

	name: "Scheduled jobs: Bucket cleanup"
	on:
	schedule:
	# * is a special character in YAML so you have to quote this string.
	# Run every day at 3:00PM UTC.
	- cron: '0 15 * * *'
	permissions:
	id-token: write # This is required for requesting the JWT
	contents: read # This is required for actions/checkout
	jobs:
	all:
	env:
	GOPATH: ${{ github.workspace }}/go
	name: Bucket cleanup
	environment: production
	runs-on: ubuntu-latest
	steps:
	- name: Fetch secrets from ESC
	id: esc-secrets
	uses: pulumi/esc-action@v1
	- uses: actions/checkout@v6

	- uses: actions/setup-node@v6
	with:
	node-version: '24.x'

	- uses: actions/setup-go@v6
	with:
	go-version: 1.26.x

	- name: Configure AWS Credentials
	uses: aws-actions/configure-aws-credentials@v6
	with:
	role-to-assume: arn:aws:iam::388588623842:role/ContinuousDelivery
	role-session-name: docs-cleanup
	role-duration-seconds: 7200
	aws-region: us-west-2

	- name: Run make ci_bucket_cleanup
	run: make ci_bucket_cleanup
	env:
	PULUMI_ACCESS_TOKEN: ${{ steps.esc-secrets.outputs.PULUMI_ACCESS_TOKEN }}
	PULUMI_STACK_NAME: ${{ vars.PULUMI_STACK_NAME }}
	SLACK_ACCESS_TOKEN: ${{ steps.esc-secrets.outputs.SLACK_ACCESS_TOKEN }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	DEPLOYMENT_ENVIRONMENT: ${{ vars.DEPLOYMENT_ENVIRONMENT }}
	WEBSITE_URL: ${{ vars.WEBSITE_URL }}
	env:
	ESC_ACTION_OIDC_AUTH: true
	ESC_ACTION_OIDC_ORGANIZATION: pulumi
	ESC_ACTION_OIDC_REQUESTED_TOKEN_TYPE: urn:pulumi:token-type:access_token:organization
	ESC_ACTION_ENVIRONMENT: github-secrets/pulumi-docs
	ESC_ACTION_EXPORT_ENVIRONMENT_VARIABLES: false

Navigation Menu