Skip to content

Commit 8ed0cf2

Browse files
james00012james00012
committed
Migrate scheduled nuke jobs from CircleCI to GitHub Actions
1 parent 0ce4f58 commit 8ed0cf2

File tree

3 files changed

+382
-180
lines changed

3 files changed

+382
-180
lines changed

‎.circleci/config.yml‎

Lines changed: 0 additions & 180 deletions
Original file line numberDiff line numberDiff line change
@@ -44,152 +44,6 @@ jobs:
4444
root: .
4545
paths: bin
4646

47-
nuke_phx_devops:
48-
<<: *defaults
49-
steps:
50-
- checkout
51-
- run:
52-
command: |
53-
# We explicitly list the resource types we want to nuke, as we are not ready to nuke some resource types in
54-
# the AWS account we use at Gruntwork for testing (Phx DevOps) (e.g., S3)
55-
go run -ldflags="-X 'main.VERSION=$CIRCLE_SHA1'" main.go aws \
56-
--older-than 2h \
57-
--force \
58-
--config ./.circleci/nuke_config.yml \
59-
--region global \
60-
--region ap-northeast-1 \
61-
--region ap-northeast-2 \
62-
--region ap-northeast-3 \
63-
--region ap-south-1 \
64-
--region ap-southeast-1 \
65-
--region ap-southeast-2 \
66-
--region ca-central-1 \
67-
--region eu-central-1 \
68-
--region eu-north-1 \
69-
--region eu-west-1 \
70-
--region eu-west-2 \
71-
--region eu-west-3 \
72-
--region me-central-1 \
73-
--region sa-east-1 \
74-
--region us-east-1 \
75-
--region us-east-2 \
76-
--region us-west-1 \
77-
--region us-west-2 \
78-
--exclude-resource-type iam \
79-
--exclude-resource-type iam-group \
80-
--exclude-resource-type iam-policy \
81-
--exclude-resource-type iam-role \
82-
--exclude-resource-type iam-service-linked-role \
83-
--exclude-resource-type oidcprovider \
84-
--exclude-resource-type route53-hosted-zone \
85-
--exclude-resource-type route53-cidr-collection \
86-
--exclude-resource-type route53-traffic-policy \
87-
--exclude-resource-type ecr \
88-
--exclude-resource-type config-rules \
89-
--exclude-resource-type nat-gateway \
90-
--exclude-resource-type ec2-subnet \
91-
--delete-unaliased-kms-keys \
92-
--log-level debug
93-
no_output_timeout: 1h
94-
nuke_sandbox:
95-
<<: *defaults
96-
steps:
97-
- checkout
98-
- run:
99-
command: |
100-
export AWS_ACCESS_KEY_ID=$SANDBOX_AWS_ACCESS_KEY_ID
101-
export AWS_SECRET_ACCESS_KEY=$SANDBOX_AWS_SECRET_ACCESS_KEY
102-
# We explicitly list the resource types we want to nuke, as we are not ready to nuke some resource types in
103-
# the AWS account we use at Gruntwork for testing (Sandbox) (e.g., S3)
104-
go run -ldflags="-X 'main.VERSION=$CIRCLE_SHA1'" main.go aws \
105-
--older-than 24h \
106-
--force \
107-
--config ./.circleci/nuke_config.yml \
108-
--region global \
109-
--region ap-northeast-1 \
110-
--region ap-northeast-2 \
111-
--region ap-northeast-3 \
112-
--region ap-south-1 \
113-
--region ap-southeast-1 \
114-
--region ap-southeast-2 \
115-
--region ca-central-1 \
116-
--region eu-central-1 \
117-
--region eu-north-1 \
118-
--region eu-west-1 \
119-
--region eu-west-2 \
120-
--region eu-west-3 \
121-
--region me-central-1 \
122-
--region sa-east-1 \
123-
--region us-east-1 \
124-
--region us-east-2 \
125-
--region us-west-1 \
126-
--region us-west-2 \
127-
--exclude-resource-type iam \
128-
--exclude-resource-type iam-group \
129-
--exclude-resource-type iam-policy \
130-
--exclude-resource-type iam-role \
131-
--exclude-resource-type iam-service-linked-role \
132-
--exclude-resource-type oidcprovider \
133-
--exclude-resource-type route53-hosted-zone \
134-
--exclude-resource-type route53-cidr-collection \
135-
--exclude-resource-type route53-traffic-policy \
136-
--exclude-resource-type ecr \
137-
--exclude-resource-type config-rules \
138-
--exclude-resource-type nat-gateway \
139-
--exclude-resource-type ec2-subnet \
140-
--exclude-resource-type eip \
141-
--delete-unaliased-kms-keys \
142-
--log-level debug
143-
no_output_timeout: 1h
144-
nuke_configtests:
145-
resource_class: large
146-
docker:
147-
- image: 677276116620.dkr.ecr.us-east-1.amazonaws.com/circle-ci-test-image-base:go1.22.6-tf1.5-tg58.8-pck1.8-ci56.0
148-
steps:
149-
- checkout
150-
- run:
151-
command: |
152-
# We explicitly list the resource types we want to nuke, as we are not ready to nuke some resource types in
153-
# the AWS account we use at Gruntwork for testing (Phx DevOps) (e.g., S3)
154-
go run -ldflags="-X 'main.VERSION=$CIRCLE_SHA1'" main.go aws \
155-
--older-than 2h \
156-
--force \
157-
--config ./.circleci/nuke_config.yml \
158-
--region global \
159-
--region ap-northeast-1 \
160-
--region ap-northeast-2 \
161-
--region ap-northeast-3 \
162-
--region ap-south-1 \
163-
--region ap-southeast-1 \
164-
--region ap-southeast-2 \
165-
--region ca-central-1 \
166-
--region eu-central-1 \
167-
--region eu-north-1 \
168-
--region eu-west-1 \
169-
--region eu-west-2 \
170-
--region eu-west-3 \
171-
--region sa-east-1 \
172-
--region us-east-1 \
173-
--region us-east-2 \
174-
--region us-west-1 \
175-
--region us-west-2 \
176-
--exclude-resource-type iam \
177-
--exclude-resource-type iam-group \
178-
--exclude-resource-type iam-policy \
179-
--exclude-resource-type iam-role \
180-
--exclude-resource-type iam-service-linked-role \
181-
--exclude-resource-type oidcprovider \
182-
--exclude-resource-type route53-hosted-zone \
183-
--exclude-resource-type route53-cidr-collection \
184-
--exclude-resource-type route53-traffic-policy \
185-
--exclude-resource-type ecr \
186-
--exclude-resource-type config-rules \
187-
--exclude-resource-type nat-gateway \
188-
--exclude-resource-type internet-gateway \
189-
--exclude-resource-type ec2-subnet \
190-
--delete-unaliased-kms-keys \
191-
--log-level debug
192-
no_output_timeout: 1h
19347
deploy:
19448
<<: *env
19549
macos:
@@ -233,9 +87,6 @@ workflows:
23387
version: 2
23488
# Release workflow - build and deploy on tags only
23589
release:
236-
when:
237-
not:
238-
equal: [ scheduled_pipeline, << pipeline.trigger_source >> ]
23990
jobs:
24091
- build:
24192
matrix:
@@ -262,34 +113,3 @@ workflows:
262113
- AWS__PHXDEVOPS__circle-ci-test
263114
- GITHUB__PAT__gruntwork-ci
264115
- APPLE__OSX__code-signing
265-
nuke_phxdevops:
266-
when:
267-
and:
268-
- equal: [ scheduled_pipeline, << pipeline.trigger_source >> ]
269-
- equal: [ "every 3 hours", << pipeline.schedule.name >> ]
270-
jobs:
271-
- nuke_phx_devops:
272-
context:
273-
- AWS__PHXDEVOPS__circle-ci-test
274-
- GITHUB__PAT__gruntwork-ci
275-
nuke_configtests:
276-
when:
277-
and:
278-
- equal: [ scheduled_pipeline, << pipeline.trigger_source >> ]
279-
- equal: [ "every 3 hours", << pipeline.schedule.name >> ]
280-
jobs:
281-
- nuke_configtests:
282-
context:
283-
- AWS__CONFIGTESTS__circle-ci-test
284-
- GITHUB__PAT__gruntwork-ci
285-
nuke_sandbox:
286-
when:
287-
and:
288-
- equal: [ scheduled_pipeline, << pipeline.trigger_source >> ]
289-
- equal: [ "nightly", << pipeline.schedule.name >> ]
290-
jobs:
291-
- nuke_sandbox:
292-
context:
293-
- AWS__PHXDEVOPS__circle-ci-test
294-
- GITHUB__PAT__gruntwork-ci
295-
- AWS__SANDBOX__circle-ci

0 commit comments

Comments
 (0)