bootstrapping popeye-scanner action #4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Popeye Scanner | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| HELMFILE_FILE_PATH: ${{ github.workspace }}/helmfile | |
| STAGING_AWS_ACCOUNT: ${{ secrets.STAGING_AWS_ACCOUNT }} | |
| jobs: | |
| Popeye-Scanner: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@5fd3084fc36e372ff1fff382a39b10d03659f355 # v2.2.0 | |
| id: awsconfig | |
| with: | |
| aws-access-key-id: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ca-central-1 | |
| - name: Checkout | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
| with: | |
| # Fetches entire history, so we can analyze commits since last tag | |
| fetch-depth: 0 | |
| - name: Install OpenVPN | |
| run: | | |
| sudo apt update | |
| sudo apt install -y openvpn openvpn-systemd-resolved | |
| - name: Setup Terraform tools | |
| uses: cds-snc/terraform-tools-setup@v1 | |
| env: # In case you want to override default versions | |
| CONFTEST_VERSION: 0.30.0 | |
| TERRAFORM_VERSION: 1.6.2 | |
| TERRAGRUNT_VERSION: 0.44.4 | |
| TF_SUMMARIZE_VERSION: 0.2.3 | |
| - name: Retrieve VPN Config | |
| run: | | |
| scripts/createVPNConfig.sh staging 2> /dev/null | |
| - name: Connect to VPN | |
| uses: "kota65535/github-openvpn-connect-action@cd2ed8a90cc7b060dc4e001143e811b5f7ea0af5" # v3.1.0 | |
| with: | |
| config_file: /var/tmp/staging.ovpn | |
| echo_config: false | |
| - name: Configure kubeconfig | |
| run: | | |
| aws eks update-kubeconfig --name notification-canada-ca-staging-eks-cluster | |
| kubectl config rename-context arn:aws:eks:ca-central-1:$STAGING_AWS_ACCOUNT:cluster/notification-canada-ca-staging-eks-cluster staging | |
| - name: Popeye Report | |
| run: | | |
| brew install derailed/popeye/popeye | |
| popeye -n notification-canada-ca |