fix: stop interacting with GHCR, disable scheduled jobs #15738
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Scheduled reap AWS stage and prod accounts | |
env: | |
IMAGE_NAME: ghcr.io/${{ github.repository_owner }}/reaper | |
AWS_DEFAULT_REGION: us-east-1 | |
# Disabling all scheduled jobs for now. | |
# Pulls from GHCR no longer work after 2024-12-09 because the secrets are no longer valid. | |
# on: | |
# schedule: | |
# - cron: '30 * * * *' | |
jobs: | |
docker: | |
uses: ./.github/workflows/docker-build.yml | |
secrets: | |
GHCR_BOT_USERNAME: ${{ secrets.GHCR_BOT_USERNAME }} | |
GHCR_BOT_TOKEN: ${{ secrets.GHCR_BOT_TOKEN }} | |
reap-aws-stage-prod: | |
strategy: | |
fail-fast: false | |
matrix: | |
account: | |
- {id: CUSTOMER_ID, key: CUSTOMER_KEY} | |
- {id: PROD_ID, key: PROD_KEY} | |
- {id: STAGE_ID, key: STAGE_KEY} | |
name: reap AWS stage and prod | |
needs: [docker] | |
runs-on: ubuntu-latest | |
container: | |
image: ghcr.io/quipucords/reaper:latest | |
credentials: | |
username: ${{ secrets.GHCR_BOT_USERNAME }} | |
password: ${{ secrets.GHCR_BOT_TOKEN }} | |
env: | |
AWS_ACCESS_KEY_ID: ${{ secrets[matrix.account.id] }} | |
AWS_SECRET_ACCESS_KEY: ${{ secrets[matrix.account.key] }} | |
WEBHOOK_URL: ${{ secrets.WEBHOOK_URL }} | |
steps: | |
- run: | | |
cd /opt/reaper | |
export AWS_DEFAULT_REGION AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY ECS_CLUSTER_NAME | |
export REAP_AGE_SNAPSHOTS REAP_AGE_VOLUMES REAP_DRYRUN REAP_BYPASS_TAG WEBHOOK_URL | |
poetry run python -m reaper.aws_delete |