You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
90 lines
3.5 KiB
90 lines
3.5 KiB
name: "Review App: Teardown" |
|
|
|
concurrency: |
|
group: review-${{ github.event.pull_request.number }} |
|
|
|
on: |
|
pull_request: |
|
types: |
|
- closed |
|
- unlabeled |
|
|
|
env: |
|
app_repo_role: arn:aws:iam::815624722760:role/core-application-repo |
|
aws_account_id: 837698168072 |
|
aws_region: eu-west-2 |
|
aws_role_prefix: core-dev |
|
aws_task_prefix: core-review-${{ github.event.pull_request.number }} |
|
|
|
jobs: |
|
database: |
|
name: Drop database |
|
if: > |
|
(github.event.action == 'closed' && contains(github.event.pull_request.labels.*.name, 'review-app')) |
|
|| (github.event.action == 'unlabeled' && github.event.label.name == 'review-app') |
|
runs-on: ubuntu-latest |
|
permissions: |
|
id-token: write |
|
|
|
steps: |
|
- name: Configure AWS credentials |
|
uses: aws-actions/configure-aws-credentials@v4 |
|
with: |
|
aws-region: ${{ env.aws_region }} |
|
role-to-assume: ${{ env.app_repo_role }} |
|
|
|
- name: Configure AWS credentials for review environment |
|
uses: aws-actions/configure-aws-credentials@v4 |
|
with: |
|
aws-region: ${{ env.aws_region }} |
|
role-to-assume: arn:aws:iam::${{ env.aws_account_id }}:role/${{ env.aws_role_prefix }}-deployment |
|
role-chaining: true |
|
|
|
- name: Drop Database |
|
env: |
|
ad_hoc_task_definition: ${{ env.aws_task_prefix }}-ad-hoc |
|
cluster: ${{ env.aws_task_prefix }}-app |
|
service: ${{ env.aws_task_prefix }}-app |
|
run: | |
|
network=$(aws ecs describe-services --cluster $cluster --services $service --query services[0].networkConfiguration) |
|
overrides='{ "containerOverrides" : [{ "name" : "app", "command" : ["bundle", "exec", "rake", "db:drop"]}]}' |
|
arn=$(aws ecs run-task --cluster $cluster --task-definition $ad_hoc_task_definition --network-configuration "$network" --overrides "$overrides" --group migrations --launch-type FARGATE --query tasks[0].taskArn) |
|
echo "Waiting for db drop task to complete" |
|
temp=${arn##*/} |
|
id=${temp%*\"} |
|
aws ecs wait tasks-stopped --cluster $cluster --tasks $id |
|
succeeded=$(aws ecs describe-tasks --cluster $cluster --tasks $id --query "tasks[0].stopCode == 'EssentialContainerExited' && to_string(tasks[0].containers[0].exitCode) == '0'") |
|
if [ $succeeded == true ]; then exit 0; else exit 1; fi |
|
|
|
infra: |
|
name: Teardown review app |
|
if: > |
|
(github.event.action == 'closed' && contains(github.event.pull_request.labels.*.name, 'review-app')) |
|
|| (github.event.action == 'unlabeled' && github.event.label.name == 'review-app') |
|
needs: [database] |
|
uses: communitiesuk/submit-social-housing-lettings-and-sales-data-infrastructure/.github/workflows/destroy_review_app_infra.yml@main |
|
with: |
|
key: ${{ github.event.pull_request.number }} |
|
app_repo_role: arn:aws:iam::815624722760:role/core-application-repo |
|
permissions: |
|
id-token: write |
|
|
|
comment: |
|
name: Comment on PR |
|
if: github.event.action == 'unlabeled' && github.event.label.name == 'review-app' |
|
needs: [infra] |
|
runs-on: ubuntu-latest |
|
permissions: |
|
pull-requests: write |
|
|
|
steps: |
|
- name: Comment on PR |
|
uses: actions/github-script@v7 |
|
with: |
|
script: | |
|
await github.rest.issues.createComment({ |
|
owner: context.repo.owner, |
|
repo: context.repo.repo, |
|
issue_number: context.issue.number, |
|
body: 'Review app has been torn down. To redeploy, reapply the `review-app` label.', |
|
});
|
|
|