mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-09-20 00:06:21 +00:00
a15cf54477
* Use 7zip for creating and processing encrypted archives * Switch to .7z file extension * Fix shell check issues * Fix tfstate update logic --------- Signed-off-by: Daniel Weiße <dw@edgeless.systems>
45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
name: E2E cleanup over timeframe
|
|
description: Clean up old terraform resources of E2E tests
|
|
|
|
inputs:
|
|
ghToken:
|
|
description: 'The github token that is used with the github CLI.'
|
|
required: true
|
|
encryptionSecret:
|
|
description: 'The secret to use for decrypting the artifacts.'
|
|
required: true
|
|
azure_credentials:
|
|
description: "Credentials authorized to create Constellation on Azure."
|
|
required: true
|
|
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
- name: Authenticate AWS
|
|
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
|
|
with:
|
|
role-to-assume: arn:aws:iam::795746500882:role/GithubActionsE2EDestroy
|
|
aws-region: eu-central-1
|
|
|
|
- name: Authenticate Azure
|
|
uses: ./.github/actions/login_azure
|
|
with:
|
|
azure_credentials: ${{ inputs.azure_credentials }}
|
|
|
|
- name: Authenticate GCP
|
|
uses: ./.github/actions/login_gcp
|
|
with:
|
|
service_account: "destroy-e2e@constellation-e2e.iam.gserviceaccount.com"
|
|
|
|
- name: Install 7zip
|
|
uses: ./.github/actions/setup_bazel_nix
|
|
with:
|
|
nixTools: |
|
|
_7zz
|
|
- name: Run cleanup
|
|
run: ./.github/actions/e2e_cleanup_timeframe/e2e-cleanup.sh
|
|
shell: bash
|
|
env:
|
|
GH_TOKEN: ${{ inputs.ghToken }}
|
|
ENCRYPTION_SECRET: ${{ inputs.encryptionSecret }}
|