get sha256sum from github

Author: Scott Miller

.github/workflows/lambda_zip.yaml

@@ -1,4 +1,4 @@
-name: Create a zipped lambda func for deployment
+name: release
 
 on:
   release:
@@ -16,13 +16,36 @@ jobs:
       - name: Build Lambda Function
         run: |
           zip lambda.zip rolling-restart.py
+          ls
 
-      - name: Upload lambda to assets
-        uses: actions/upload-release-asset@v1.0.2
+      - name: upload artifact
+        uses: actions/upload-artifact@v2
+        with:
+          name: lambda.zip
+          path: ${{ github.workspace }}/lambda.zip
+          if-no-files-found: error
+
+      - name: get checksum
+        run: cat lambda.zip | openssl dgst -binary -sha256 | base64 > lambda.sha256sum.base64
+
+      - name: Upload Release Asset
+        id: upload-release-asset
+        uses: actions/upload-release-asset@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           upload_url: ${{ github.event.release.upload_url }}
           asset_path: ./lambda.zip
           asset_name: lambda.zip
           asset_content_type: application/zip
+
+      - name: Upload Release Asset
+        id: upload-release-asset
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ github.event.release.upload_url }}
+          asset_path: ./lambda.sha256sum.base64
+          asset_name: lambda.sha256sum.base64
+          asset_content_type: text/plain

main.tf

@@ -15,7 +15,7 @@ module "lambda_version" {
 
   repo_name          = local.repo_name
   repo_owner         = local.repo_owner
-  version_constraint = "~1.0.1-rc5"
+  version_constraint = "~1.0.1-rc6"
 }
 
 locals {
@@ -29,10 +29,14 @@ resource "null_resource" "lambda_zip" {
   }
 
   provisioner "local-exec" {
-    command = "curl -Lso ${path.module}/lambda.zip https://github.com/${local.repo_full_name}/releases/download/${local.lambda_version_tag}/lambda.zip"
+    command = "curl -Lso lambda-${local.lambda_version}.zip https://github.com/${local.repo_full_name}/releases/download/${local.lambda_version_tag}/lambda.zip"
   }
 }
 
+data "http_http" "shasum" {
+  url = "https://github.com/${local.repo_full_name}/releases/download/${local.lambda_version_tag}/lambda.sha256sum.base64"
+}
+
 data "aws_iam_policy_document" "lambda_assume_role_policy" {
   statement {
     actions = [
@@ -97,26 +101,28 @@ resource "aws_iam_role_policy_attachment" "lambda-execution-role-attach" {
 
 resource "random_uuid" "lambda_uuid" {}
 
-
 resource "aws_lambda_function" "this" {
-  filename         = "${path.module}/lambda.zip"
+  filename         = "lambda-${local.lambda_version}.zip"
   function_name    = "${module.tags.name32}_${substr(random_uuid.lambda_uuid.result, 0, 31)}"
   role             = aws_iam_role.this.arn
   handler          = "rolling-restart.handler"
   runtime          = "python3.6"
   timeout          = 600
-  source_code_hash = data.archive_file.this.output_base64sha256
+  source_code_hash = filebase64sha256("lambda-${local.lambda_version}.zip")
   tags             = module.tags.tags
+
   environment {
     variables = {
       ASG_NAME = var.asg_name
       LOGLEVEL = var.loglevel
     }
   }
+
   lifecycle {
     ignore_changes = [
-      filename,
-      last_modified,
+      last_modified
     ]
   }
+
+  depends_on = [null_resource.lambda_zip]
 }