Add clearing cache to workflow

.github/workflows/clear-notify-cache.yaml

@@ -0,0 +1,37 @@
+name: Reusable Clear Cache Workflow
+
+on:
+  workflow_call:
+    inputs:
+      environment:
+        required: true
+        type: string
+    secrets:
+      CACHE_CLEAR_USER_NAME:
+        required: true
+      CACHE_CLEAR_CLIENT_SECRET:
+        required: true
+      API_URL:
+        required: true
+
+jobs:
+  clear-cache:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v2
+        with:
+          node-version: "14"
+
+      - name: Install dependencies
+        run: npm install jsonwebtoken axios
+
+      - name: Call API to clear cache
+        env:
+          CACHE_CLEAR_USER_NAME: ${{ secrets.CACHE_CLEAR_USER_NAME }}
+          CACHE_CLEAR_CLIENT_SECRET: ${{ secrets.CACHE_CLEAR_CLIENT_SECRET }}
+          API_URL: ${{ secrets.API_URL }}
+        run: node scripts/clear-cache.js

.github/workflows/merge_to_main_staging.yaml

@@ -60,7 +60,7 @@ jobs:
         with:
           config_file: /var/tmp/staging.ovpn
           client_key: ${{ secrets.STAGING_OVPN_CLIENT_KEY }}
-          echo_config: false                
+          echo_config: false
 
       - name: Decrypt staging env
         run: |
@@ -128,4 +128,12 @@ jobs:
         if: ${{ failure() }}
         run: |
           json="{'text':'<!here> Manifests Merge To Staging CI is failing in <https://github.com/cds-snc/notification-manifests/|notification-manifests> !'}"
-          curl -X POST -H 'Content-type: application/json' --data "$json"  ${{ secrets.SLACK_WEBHOOK }}
+          curl -X POST -H 'Content-type: application/json' --data "$json"  ${{ secrets.SLACK_WEBHOOK }}
+
+  clear-cache:
+    needs: kubectl-apply
+    uses: ./.github/workflows/clear-notify-cache.yaml
+    secrets:
+      CACHE_CLEAR_USER_NAME: ${{ secrets.STAGING_CACHE_CLEAR_USER_NAME }}
+      CACHE_CLEAR_CLIENT_SECRET: ${{ secrets.STAGING_CACHE_CLEAR_CLIENT_SECRET }}
+      API_URL: ${{ secrets.STAGING_API_URL }}

scripts/clear-cache.js

@@ -0,0 +1,38 @@
+const jwt = require('jsonwebtoken');
+const axios = require('axios');
+
+const payload = {
+    iss: process.env.CACHE_CLEAR_USER_NAME,
+    iat: Math.floor(Date.now() / 1000),
+    exp: Math.floor(Date.now() / 1000) + (60 * 60), // 1 hour from now
+};
+const options = {
+    algorithm: 'HS256',
+    header: {
+        alg: 'HS256',
+        typ: 'JWT'
+    }
+};
+
+const token = jwt.sign(payload, process.env.CACHE_CLEAR_CLIENT_SECRET, options);
+
+try {
+    const decoded = jwt.verify(token, process.env.CACHE_CLEAR_CLIENT_SECRET, { algorithms: ['HS256'] });
+    console.log('Token verified successfully. Payload:', decoded);
+} catch (err) {
+    console.error('Token verification failed:', err.message);
+}
+
+axios.post(process.env.API_URL + '/cache-clear', null, {
+    headers: {
+        'Authorization': `Bearer ${token}`,
+        'Content-Type': 'application/json'
+    }
+})
+    .then(response => {
+        console.log('API call successful:', response.data);
+    })
+    .catch(error => {
+        console.error('Error calling API:', error.response ? error.response.data : error.message);
+        process.exit(1);
+    });