chore(deps): lock file maintenance #3082
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Tools deployment | |
| on: | |
| pull_request: | |
| concurrency: | |
| # PR open and close use the same group, allowing only one at a time | |
| group: tools-${{ github.event.number }} | |
| cancel-in-progress: true | |
| permissions: {} | |
| jobs: | |
| builds: | |
| name: Builds | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| packages: write | |
| steps: | |
| - name: Build (legacydb) | |
| uses: bcgov/action-builder-ghcr@cb2629351c87dd1c2130073e4ebb7233a9653a63 # v4.4.1 | |
| with: | |
| package: legacydb | |
| tag_fallback: latest | |
| triggers: ('legacydb/') | |
| - name: Build (backend) with Sectigo PEM | |
| uses: bcgov/action-builder-ghcr@cb2629351c87dd1c2130073e4ebb7233a9653a63 # v4.4.1 | |
| with: | |
| package: backend | |
| tag_fallback: latest | |
| triggers: ('backend/') | |
| build_args: | | |
| --build-arg SECTIGO_R46_PEM=${{ secrets.SECTIGO_R46_PEM }} | |
| pre-tools: | |
| name: Pre Deploy Tools | |
| needs: [builds] | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Scale down legacy | |
| continue-on-error: true | |
| uses: bcgov/action-oc-runner@09b5eeae15bdbc7f7a21b406ee2c66a1d5819f8c # v1.6.0 | |
| with: | |
| oc_namespace: ${{ secrets.oc_namespace }} | |
| oc_token: ${{ secrets.oc_token }} | |
| oc_server: ${{ secrets.oc_server }} | |
| commands: | | |
| oc scale deployment/nr-forest-client-${{ github.event.number }}-legacy --replicas=0 -n ${{ secrets.OC_NAMESPACE }} | |
| undesired_replicas=0 | |
| while true; do | |
| available_replicas=$(oc get deployment/nr-forest-client-${{ github.event.number }}-legacy -n ${{ secrets.OC_NAMESPACE }} -o jsonpath='{.status.availableReplicas}') | |
| if [[ "$available_replicas" -ge "$undesired_replicas" ]]; then | |
| echo "DeploymentConfig ${{ secrets.OC_NAMESPACE }}-${{ github.event.number }}-legacy is now available with $available_replicas replicas." | |
| break | |
| fi | |
| echo "Waiting... ($available_replicas pods available)" | |
| sleep 5 | |
| done | |
| deploy-oracle: | |
| name: Deploy Oracle Database | |
| needs: [pre-tools, builds] | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Initializing Deployment | |
| uses: bcgov/action-deployer-openshift@fc51e6a5849eb0fdb9395ceed9c1059aa25b3815 # v4.1.1 | |
| with: | |
| file: legacydb/openshift.deploy.yml | |
| oc_namespace: d2723f-tools | |
| oc_server: ${{ secrets.oc_server }} | |
| oc_token: ${{ secrets.oc_token_tools }} | |
| oc_version: "4.13" | |
| overwrite: false | |
| parameters: | |
| -p ZONE=tools | |
| -p ORACLEDB_PASSWORD=${{ secrets.ORACLEDB_PASSWORD }} | |
| -p TAG=${{ github.event.number }} | |
| remove-tools: | |
| name: Remove database and user | |
| needs: [deploy-oracle] | |
| secrets: inherit | |
| uses: ./.github/workflows/.tools-cleanup.yml | |
| deploy-tools: | |
| name: Deploy Tools | |
| needs: [remove-tools, deploy-oracle] | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Create the PR database | |
| continue-on-error: true | |
| uses: bcgov/action-oc-runner@09b5eeae15bdbc7f7a21b406ee2c66a1d5819f8c # v1.6.0 | |
| with: | |
| oc_namespace: d2723f-tools | |
| oc_server: ${{ secrets.oc_server }} | |
| oc_token: ${{ secrets.oc_token_tools }} | |
| commands: | | |
| # This creates a new pluggable database for the PR | |
| for i in {1..5}; do | |
| POD_NAME=$(oc get pods -l app=nr-forest-client-tools -l deployment=nr-forest-client-tools-legacydb -o jsonpath='{.items[0].metadata.name}' 2>/dev/null) | |
| if [ -n "$POD_NAME" ]; then | |
| echo "Pod found: $POD_NAME" | |
| oc exec $POD_NAME -- /opt/oracle/createDatabase PR_${{ github.event.number }} | |
| break | |
| else | |
| echo "Pod not found, retrying in 10 seconds... ($i/5)" | |
| sleep 10 | |
| fi | |
| done | |
| if [ -z "$POD_NAME" ]; then | |
| echo "Failed to find the pod after 5 attempts." | |
| fi | |
| - name: Create the PR user | |
| continue-on-error: true | |
| uses: bcgov/action-oc-runner@09b5eeae15bdbc7f7a21b406ee2c66a1d5819f8c # v1.6.0 | |
| with: | |
| oc_namespace: d2723f-tools | |
| oc_server: ${{ secrets.oc_server }} | |
| oc_token: ${{ secrets.oc_token_tools }} | |
| commands: | | |
| # This creates a new pluggable database for the PR | |
| for i in {1..5}; do | |
| POD_NAME=$(oc get pods -l app=nr-forest-client-tools -l deployment=nr-forest-client-tools-legacydb -o jsonpath='{.items[0].metadata.name}' 2>/dev/null) | |
| if [ -n "$POD_NAME" ]; then | |
| echo "Pod found: $POD_NAME" | |
| oc exec $POD_NAME -- /opt/oracle/createAppUser "THE" "${{ secrets.ORACLEDB_PASSWORD }}" "PR_${{ github.event.number }}" | |
| break | |
| else | |
| echo "Pod not found, retrying in 10 seconds... ($i/5)" | |
| sleep 10 | |
| fi | |
| done | |
| if [ -z "$POD_NAME" ]; then | |
| echo "Failed to find the pod after 5 attempts." | |
| fi | |
| - name: Migrate the PR database | |
| continue-on-error: true | |
| uses: bcgov/action-oc-runner@09b5eeae15bdbc7f7a21b406ee2c66a1d5819f8c # v1.6.0 | |
| with: | |
| oc_namespace: d2723f-tools | |
| oc_server: ${{ secrets.oc_server }} | |
| oc_token: ${{ secrets.oc_token_tools }} | |
| commands: | | |
| BRANCH_NAME="${{ github.head_ref }}" | |
| ESCAPED_BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/[\/&]/\\&/g') | |
| oc create job --from=cronjob/nr-forest-client-tools-migratedb migrate-pr${{ github.event.number }}-${{ github.run_attempt }}-$(date +%s) --dry-run=client -o yaml | sed "s/value: main/value: ${ESCAPED_BRANCH_NAME}/" | sed "s/value: \"0\"/value: \"${{ github.event.number }}\"/" | oc apply -f - | |
| scale-up-legacy: | |
| name: Scale up legacy | |
| needs: [deploy-tools] | |
| if: always() | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Start the Legacy Service | |
| continue-on-error: true | |
| uses: bcgov/action-oc-runner@09b5eeae15bdbc7f7a21b406ee2c66a1d5819f8c # v1.6.0 | |
| with: | |
| oc_namespace: ${{ secrets.oc_namespace }} | |
| oc_token: ${{ secrets.oc_token }} | |
| oc_server: ${{ secrets.oc_server }} | |
| commands: | | |
| oc scale deployment/nr-forest-client-${{ github.event.number }}-legacy --replicas=1 |