Skip to content

(PC-34065)[API] fix: mark declined ubble checks as ko #486

(PC-34065)[API] fix: mark declined ubble checks as ko

(PC-34065)[API] fix: mark declined ubble checks as ko #486

name: "1 [on_pull_request] Delete PR deployment"
on:
pull_request:
types:
- closed
jobs:
# Delete pcapi preview deployment
delete-pcapi-preview-deployment:
name: "Delete pcapi preview deployment"
runs-on: ubuntu-22.04
permissions:
id-token: write
contents: read
steps:
- uses: actions/[email protected]
- name: "Authentification to Google"
uses: 'google-github-actions/auth@v2'
with:
workload_identity_provider: ${{ secrets.GCP_EHP_WORKLOAD_IDENTITY_PROVIDER }}
service_account: ${{ secrets.GCP_EHP_SERVICE_ACCOUNT }}
- name: "Get secrets"
id: 'secrets'
uses: 'google-github-actions/get-secretmanager-secrets@v2'
with:
secrets: |-
API_TOKEN_GITHUB:passculture-metier-ehp/passculture-main-sa-access-token
FIREBASE_SERVICE_ACCOUNT_TESTING:passculture-metier-ehp/pc_pro_testing_firebase_json
DEPLOYMENT_SA:passculture-metier-ehp/pcapi-testing_deploy-service-account
DEPLOYMENT_WORKLOAD_IDENTITY_PROVIDER:passculture-metier-ehp/gcp_metier_ehp_workload_identity_provider
# Checkout rendered-manifests repository
- uses: actions/[email protected]
with:
repository: pass-culture/rendered-manifests
token: ${{ steps.secrets.outputs.API_TOKEN_GITHUB }}
path: ./rendered-manifests
ref: 'pcapi/pullrequests'
- name: "Delete PR deployment"
run: |
git config --global user.email "[email protected]"
git config --global user.name "PassCulture-SA"
cd ./rendered-manifests
files_modified=false
[[ -d "pcapi-pr-${{ github.event.pull_request.number }}" ]] && { git rm -r pcapi-pr-${{ github.event.pull_request.number }}; files_modified=true; } || echo "path pcapi-pr-${{ github.event.pull_request.number }} does not exist"
[[ -d "postgresql-pr-${{ github.event.pull_request.number }}" ]] && { git rm -r postgresql-pr-${{ github.event.pull_request.number }}; files_modified=true; } || echo "path postgresql-pr-${{ github.event.pull_request.number }} does not exist"
[[ -d "redis-pr-${{ github.event.pull_request.number }}" ]] && { git rm -r redis-pr-${{ github.event.pull_request.number }}; files_modified=true; } || echo "path redis-pr-${{ github.event.pull_request.number }} does not exist"
if [ "$files_modified" = true ]; then
git add .
git commit -m "[PR-${{ github.event.pull_request.number }}] Delete deployment"
git push
fi
- name: "Authentification to Google"
uses: 'google-github-actions/auth@v2'
with:
service_account : ${{ steps.secrets.outputs.DEPLOYMENT_SA }}
workload_identity_provider: ${{ steps.secrets.outputs.DEPLOYMENT_WORKLOAD_IDENTITY_PROVIDER }}
- name: "Connect to cluster"
uses: pass-culture/common-workflows/actions/pc-k8s-connect@pc-k8s-connect/v0.1.0
with:
cluster_scope: metier
cluster_environment: ehp
api_token_github: ${{ steps.secrets.outputs.API_TOKEN_GITHUB }}
- name: "Wait for argocd applications to be deleted; delete namespace"
continue-on-error: true
run: |
set +e
while true; do
kubectl get application -n argocd | grep ${{ github.event.pull_request.number }}
[[ $? -eq 0 ]] && sleep 5 || break
done
# Check for PR namespace and delete it
kubectl get ns pcapi-pr-${{ github.event.pull_request.number }}
[[ $? -eq 0 ]] && kubectl delete ns pcapi-pr-${{ github.event.pull_request.number }} || echo "namespace pcapi-pr-${{ github.event.pull_request.number }} does not exist"
# Delete pro preview deployment
delete-pro-firebase-preview-deployment:
name: "Delete pro preview deployment"
runs-on: ubuntu-22.04
permissions:
id-token: write
contents: read
steps:
- uses: actions/[email protected]
- name: "Authentification to Google"
uses: 'google-github-actions/auth@v2'
with:
workload_identity_provider: ${{ secrets.GCP_EHP_WORKLOAD_IDENTITY_PROVIDER }}
service_account: ${{ secrets.GCP_EHP_SERVICE_ACCOUNT }}
- name: "Get secrets"
id: 'secrets'
uses: 'google-github-actions/get-secretmanager-secrets@v2'
with:
secrets: |-
FIREBASE_SERVICE_ACCOUNT_TESTING:passculture-metier-ehp/pc_pro_testing_firebase_json
- name: "Get pro channel name"
id: pro-channel-name
run: |
shortname=$(echo "${{ github.head_ref }}" | cut -c1-20)
echo "channel-name=pr${{ github.event.pull_request.number }}-$shortname" >> $GITHUB_OUTPUT
# Delete pro firebase deployment
- uses: w9jds/[email protected]
with:
args: hosting:channel:delete ${{ steps.pro-channel-name.outputs.channel-name }} --force
env:
GCP_SA_KEY: ${{ steps.secrets.outputs.FIREBASE_SERVICE_ACCOUNT_TESTING }}
PROJECT_ID: pc-pro-testing
PROJECT_PATH: ./pro