Update actions/checkout action to v4 - autoclosed #47
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: remove-staging-after-pull-request | |
| on: | |
| pull_request: | |
| types: [closed] | |
| paths-ignore: | |
| - 'Gemfile.lock' | |
| - 'Gemfile' | |
| - 'CHANGELOG.md' | |
| - 'README.md' | |
| - 'yarn.lock' | |
| jobs: | |
| delete-deployment: | |
| if: github.event.pull_request.draft == false | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Get pull request reference number | |
| run: | | |
| echo "$GITHUB_REF" | |
| echo "PR_REF=$(cat /home/runner/work/_temp/_github_workflow/event.json | jq -r '.number')" >> $GITHUB_ENV | |
| echo $(cat /home/runner/work/_temp/_github_workflow/event.json | jq -r '.number') | |
| - name: Get repo name | |
| run: | | |
| OIFS=$IFS | |
| IFS='/' | |
| read -a parts <<< "$GITHUB_REPOSITORY" | |
| IFS=OIFS | |
| echo "REPO=${parts[1]}" >> $GITHUB_ENV | |
| - name: Set vpn config | |
| env: | |
| OVPN: ${{ secrets.OVPN }} | |
| VPN_PWD: ${{ secrets.VPN_PWD }} | |
| P12: ${{ secrets.P12 }} | |
| K_CONFIG: ${{ secrets.KUBE_CONFIG }} | |
| SSH_KEY: ${{ secrets.EISBOT_SSH_KEY }} | |
| run: | | |
| echo $VPN_PWD | base64 -di > client.pwd | |
| chmod 0600 client.pwd | |
| echo $OVPN | base64 -di > config.ovpn | |
| echo $P12 | base64 -di > cert.p12 | |
| mkdir -p ~/.ssh | |
| echo $SSH_KEY | base64 -di > ~/.ssh/key | |
| chmod 0600 ~/.ssh/key | |
| mkdir -p $REPO/$PR_REF | |
| cd $REPO/$PR_REF | |
| echo "$SHORT_SHA" > TAG | |
| echo $K_CONFIG | base64 -di > kubeconfig | |
| chmod 0600 kubeconfig | |
| - name: Install Open VPN | |
| run: sudo apt-get install openvpn | |
| - name: Delete deployment | |
| timeout-minutes: 2 | |
| run: | | |
| sudo openvpn --config config.ovpn --askpass client.pwd --auth-nocache --daemon& | |
| sleep 20 | |
| ping -c 1 192.168.99.12 | |
| eval `ssh-agent` | |
| touch ~/.ssh/known_hosts | |
| ssh-add ~/.ssh/key | |
| ssh-keyscan 192.168.99.12 > ~/.ssh/known_hosts | |
| rsync -av "$REPO" [email protected]:/home/runner/ | |
| ssh -T [email protected] << EOSSH | |
| bash | |
| cd "$REPO"/"$PR_REF" | |
| export KUBECONFIG=./kubeconfig | |
| helm delete rwhois-st-"$PR_REF" -n rwhois-st | |
| cd .. | |
| rm -rf "$PR_REF" | |
| echo "server obs.tld.ee | |
| zone pilv.tld.ee | |
| update delete rwhois-"$PR_REF".pilv.tld.ee. | |
| send | |
| " | nsupdate -k ~/Kgh-runner.infra.tld.ee.+165+27011.key | |
| if [ "$?" -eq "0" ]; then | |
| echo "CNAME update success" | |
| else | |
| echo "CNAME update failed" | |
| fi | |
| EOSSH | |
| - name: Notify developers | |
| timeout-minutes: 1 | |
| env: | |
| NOTIFICATION_URL: ${{ secrets.NOTIFICATION_URL}} | |
| run: | | |
| curl -i -X POST --data-urlencode 'payload={ | |
| "text": "##### Pull request was succesful, it has been merged :bowtie:\n | |
| | Project | Branch | :net: | | |
| |:-----------|:----------------------:|:------------------------------------------:| | |
| | **'$REPO'**|'${{ github.head_ref }}'| ~~https://rwhois-'$PR_REF'.pilv.tld.ee~~ | | |
| " | |
| }' $NOTIFICATION_URL |