mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-02-26 21:31:11 -05:00
595ae759d1
This changeset unpins the egress proxy release now that we have resolved the other issues surrounding the connectivity to S3. It also makes sure the eventlet dependency is up-to-date. Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
59 lines
2.1 KiB
YAML
59 lines
2.1 KiB
YAML
name: Deploy egress proxy
|
|
description: Set egress space security groups and deploy proxy
|
|
inputs:
|
|
cf_org:
|
|
description: The org the target app exists in.
|
|
required: true
|
|
cf_space:
|
|
description: The space the target app exists in.
|
|
required: true
|
|
app:
|
|
description: application name to be proxied.
|
|
required: true
|
|
proxy_repo:
|
|
description: git repo for cg-egress-proxy
|
|
default: https://github.com/GSA-TTS/cg-egress-proxy.git
|
|
proxy_version:
|
|
description: git ref to be deployed
|
|
default: main
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- name: Install cf-cli
|
|
shell: bash
|
|
run: |
|
|
curl -A "cg-deploy-action" -v -L -o cf-cli_amd64.deb 'https://packages.cloudfoundry.org/stable?release=debian64&version=v8&source=github'
|
|
sudo dpkg -i cf-cli_amd64.deb
|
|
- name: Login to cf-cli
|
|
shell: bash
|
|
run: |
|
|
cf api api.fr.cloud.gov
|
|
cf auth
|
|
- name: Target org and space
|
|
shell: bash
|
|
run: cf target -o ${{ inputs.cf_org }} -s ${{ inputs.cf_space }}
|
|
- name: Set restricted space egress
|
|
shell: bash
|
|
run: ./terraform/set_space_egress.sh -t -s ${{ inputs.cf_space }}
|
|
- name: Set public space egress
|
|
shell: bash
|
|
run: ./terraform/set_space_egress.sh -p -s ${{ inputs.cf_space }}-egress
|
|
- name: Create temp directory
|
|
shell: bash
|
|
id: create-temp-dir
|
|
run: echo "path=$(mktemp -d -t egress-XXXXXXXXXX --tmpdir=$RUNNER_TEMP)" >> $GITHUB_OUTPUT
|
|
- name: Clone cg-egress-proxy
|
|
shell: bash
|
|
run: git clone ${{ inputs.proxy_repo }} ${{ steps.create-temp-dir.outputs.path }}
|
|
- name: Switch to deploy ref
|
|
shell: bash
|
|
working-directory: ${{ steps.create-temp-dir.outputs.path }}
|
|
run: git checkout ${{ inputs.proxy_version }}
|
|
- name: Copy config files
|
|
shell: bash
|
|
run: cp ./deploy-config/egress_proxy/${{ inputs.app }}.*.acl ${{ steps.create-temp-dir.outputs.path }}
|
|
- name: Deploy proxy
|
|
shell: bash
|
|
working-directory: ${{ steps.create-temp-dir.outputs.path }}
|
|
run: ./bin/cf-deployproxy -a ${{ inputs.app }} -p egress-proxy -e egress_proxy
|