Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GHA to test pre-cluster infrastructure in dev and playground #1565

Merged
merged 1 commit into from
Dec 19, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,21 +1,21 @@
name: AKS POST
name: Terraform - Check pre-cluster
on:
# pull_request:
# paths:
# - terraform/subscriptions/**
workflow_dispatch:
jobs:
terraform-plan:
name: Terraform post
name: Terraform pre-clusters
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
target:
- name: "dev"
subscription: "s941"
# - name: "playground"
# subscription: "s941"
- name: "playground"
subscription: "s941"
# - name: "platform"
# subscription: "s940"
# - name: "c2"
Expand All @@ -33,72 +33,47 @@ jobs:
uses: actions/checkout@v4 #Clone Repo
with:
fetch-depth: '2'
- name: Extract data
id: data
run: |
FILENAME=terraform/subscriptions/${{matrix.target.subscription}}/${{matrix.target.name}}/config.yaml
echo "FILENAME=${FILENAME}" >> $GITHUB_OUTPUT
echo "Checking file: ${FILENAME}"
- name: Check if files changed
id: changes
run: |
echo "Checking file: ${{steps.data.outputs.FILENAME}}"
if (git diff --exit-code --quiet HEAD~1 HEAD -- ${{steps.data.outputs.FILENAME}}) then
echo "changed=false" >> $GITHUB_OUTPUT
else
echo "changed=true" >> $GITHUB_OUTPUT
fi
echo "ignorechanged=true" >> $GITHUB_OUTPUT
- name: 'Az login'
if: steps.changes.outputs.ignorechanged
uses: azure/login@v2
with:
client-id: ${{ env.ARM_CLIENT_ID }}
tenant-id: ${{ env.ARM_TENANT_ID }}
subscription-id: ${{ env.ARM_SUBSCRIPTION_ID }}
- name: Get GitHub Public IP
id: github_public_ip
if: steps.changes.outputs.ignorechanged
run: echo "ipv4=$(curl 'https://ifconfig.me/ip')" >> $GITHUB_OUTPUT
- name: Add GitHub IP to StorageAccount
if: steps.changes.outputs.ignorechanged
run: |
az storage account network-rule add \
--resource-group "${{ matrix.target.subscription }}-tfstate" \
--account-name "${{ matrix.target.subscription }}radixinfra" \
--ip-address ${{ steps.github_public_ip.outputs.ipv4 }} >/dev/null
- name: Add GitHub IP to KeyVault
if: steps.changes.outputs.ignorechanged
run: |
az keyvault network-rule add --name "radix-keyv-${{ matrix.target.name }}" \
--resource-group "common-${{ matrix.target.name }}" \
--ip-address ${{ steps.github_public_ip.outputs.ipv4 }} >/dev/null
- name: Lets sleep for 30 seconds for FW rule to complete
if: steps.changes.outputs.ignorechanged
run: sleep 30s
- name: Setup Terraform
if: steps.changes.outputs.ignorechanged
uses: hashicorp/setup-terraform@v3
with:
terraform_version: 'latest'
- name: Terraform Init & Plan
if: steps.changes.outputs.ignorechanged
id: init
env:
ARM_USE_OIDC: true
ARM_USE_AZUREAD: true
run: |
terraform -chdir="./terraform/subscriptions/${{ matrix.target.subscription }}/${{ matrix.target.name }}/post-clusters" init
terraform -chdir="./terraform/subscriptions/${{ matrix.target.subscription }}/${{ matrix.target.name }}/post-clusters" plan
terraform -chdir="./terraform/subscriptions/${{ matrix.target.subscription }}/${{ matrix.target.name }}/pre-clusters" init
terraform -chdir="./terraform/subscriptions/${{ matrix.target.subscription }}/${{ matrix.target.name }}/pre-clusters" plan
- name: Revoke GitHub IP on StorageAccount
if: steps.changes.outputs.ignorechanged
run: |
az storage account network-rule remove \
--resource-group "${{ matrix.target.subscription }}-tfstate" \
--account-name "${{ matrix.target.subscription }}radixinfra" \
--ip-address ${{ steps.github_public_ip.outputs.ipv4 }} >/dev/null
- name: Revoke GitHub IP on KeyVault
if: steps.changes.outputs.ignorechanged
run: |
az keyvault network-rule remove --name "radix-keyv-${{ matrix.target.name }}" \
--resource-group "common-${{ matrix.target.name }}" \
Expand Down
Loading