sweeper.yaml

name: Sweeper
on:
  schedule:
    - cron: '0 */12 * * *'
  workflow_dispatch:
permissions:
  id-token: write # This is required for requesting the JWT
  contents: read  # This is required for actions/checkout
jobs:
  sweeper:
    if: github.repository == 'aws/karpenter' || github.event_name == 'workflow_dispatch'
    strategy:
      fail-fast: false
      matrix:
        region: [us-east-2, us-west-2, eu-west-1]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: arn:aws:iam::${{ vars.ACCOUNT_ID }}:role/${{ vars.ROLE_NAME }}
          aws-region: ${{ matrix.region }}
      - uses: actions/setup-go@v4
        with:
          go-version-file: test/hack/cleanup/go.mod
          check-latest: true
          cache-dependency-path: "test/hack/cleanup/go.sum"
      - run: go run main.go
        working-directory: ./test/hack/cleanup
        name: "Run cleanup script"