launchpad-cluster-template/.github/workflows/delete-instance.yml at main · open-craft/launchpad-cluster-template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
name: Delete Instance

on:
  workflow_call:
    inputs:
      INSTANCE_NAME:
        description: "Instance name to delete"
        required: true
        type: string
      LAUNCHPAD_CLI_VERSION:
        description: "Launchpad CLI version"
        required: false
        default: "main"
        type: string
      LAUNCHPAD_OPENCRAFT_MANIFESTS_VERSION:
        description: "Git ref (branch/tag/SHA) to use for applying OpenCraft manifests"
        required: false
        default: "main"
        type: string
      RUNNER_WORKFLOW_LABEL:
        description: 'The label of the runner workflow to run'
        required: false
        default: "ubuntu-latest"
        type: string
    secrets:
      TERRAFORM_SECRETS:
        required: true
      LAUNCHPAD_MYSQL_HOST:
        required: true
      LAUNCHPAD_MYSQL_PORT:
        required: true
      LAUNCHPAD_MYSQL_ROOT_USER:
        required: true
      LAUNCHPAD_MYSQL_ROOT_PASSWORD:
        required: true
      LAUNCHPAD_MONGODB_HOST:
        required: true
      LAUNCHPAD_MONGODB_PORT:
        required: true
      LAUNCHPAD_MONGODB_PROVIDER:
        required: true
      LAUNCHPAD_MONGODB_CLUSTER_ID:
        required: true
      LAUNCHPAD_DIGITALOCEAN_TOKEN:
        required: true
      LAUNCHPAD_STORAGE_TYPE:
        required: true
      LAUNCHPAD_STORAGE_REGION:
        required: true
      LAUNCHPAD_STORAGE_ACCESS_KEY_ID:
        required: true
      LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY:
        required: true
      SSH_PRIVATE_KEY:
        required: true

jobs:
  delete-instance:
    runs-on: ${{ inputs.RUNNER_WORKFLOW_LABEL }}
    concurrency:
      group: delete-instance-${{ inputs.INSTANCE_NAME }}
      cancel-in-progress: false

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install uv
        uses: astral-sh/setup-uv@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Setup SSH agent for private repositories cloning
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}

      - name: Add GitHub to known hosts
        run: |
          ssh-keyscan github.com >> ~/.ssh/known_hosts

      - name: Configure git user
        run: |
          git config user.name "GitHub Actions"
          git config user.email "actions@github.com"

      - name: Install Launchpad CLI
        env:
          LAUNCHPAD_CLI_VERSION: ${{ inputs.LAUNCHPAD_CLI_VERSION }}
        run: |
          uv tool install git+https://github.com/open-craft/launchpad-cluster-template.git@${{ inputs.LAUNCHPAD_CLI_VERSION }}#subdirectory=tooling

      - name: Set up kubectl
        uses: azure/setup-kubectl@v4

      - name: Set up OpenTofu
        uses: opentofu/setup-opentofu@v1
        with:
          tofu_version: latest

      - name: Create Terraform secrets file
        working-directory: "infrastructure"
        env:
          TERRAFORM_SECRETS: ${{ secrets.TERRAFORM_SECRETS }}
        run: |
          echo "$TERRAFORM_SECRETS" > secrets.auto.tfvars

      - name: Initialize Terraform
        working-directory: "infrastructure"
        env:
          TF_CLI_ARGS: "-no-color"
          AWS_ACCESS_KEY_ID: ${{ secrets.LAUNCHPAD_STORAGE_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY }}
        run: |
          tofu init -input=false
          tofu refresh

      - name: Delete instance
        env:
          LAUNCHPAD_LOG_LEVEL: DEBUG
          LAUNCHPAD_MYSQL_HOST: ${{ secrets.LAUNCHPAD_MYSQL_HOST }}
          LAUNCHPAD_MYSQL_PORT: ${{ secrets.LAUNCHPAD_MYSQL_PORT }}
          LAUNCHPAD_MYSQL_ROOT_USER: ${{ secrets.LAUNCHPAD_MYSQL_ROOT_USER }}
          LAUNCHPAD_MYSQL_ROOT_PASSWORD: ${{ secrets.LAUNCHPAD_MYSQL_ROOT_PASSWORD }}
          LAUNCHPAD_MONGODB_HOST: ${{ secrets.LAUNCHPAD_MONGODB_HOST }}
          LAUNCHPAD_MONGODB_PORT: ${{ secrets.LAUNCHPAD_MONGODB_PORT }}
          LAUNCHPAD_MONGODB_PROVIDER: ${{ secrets.LAUNCHPAD_MONGODB_PROVIDER }}
          LAUNCHPAD_MONGODB_CLUSTER_ID: ${{ secrets.LAUNCHPAD_MONGODB_CLUSTER_ID }}
          LAUNCHPAD_DIGITALOCEAN_TOKEN: ${{ secrets.LAUNCHPAD_DIGITALOCEAN_TOKEN }}
          LAUNCHPAD_STORAGE_TYPE: ${{ secrets.LAUNCHPAD_STORAGE_TYPE }}
          LAUNCHPAD_STORAGE_REGION: ${{ secrets.LAUNCHPAD_STORAGE_REGION }}
          LAUNCHPAD_STORAGE_ACCESS_KEY_ID: ${{ secrets.LAUNCHPAD_STORAGE_ACCESS_KEY_ID }}
          LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY: ${{ secrets.LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY }}
          # OpenCraft manifests version override
          LAUNCHPAD_OPENCRAFT_MANIFESTS_VERSION: ${{ inputs.LAUNCHPAD_OPENCRAFT_MANIFESTS_VERSION }}
          # Backend credentials for Terraform state access
          AWS_ACCESS_KEY_ID: ${{ secrets.LAUNCHPAD_STORAGE_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.LAUNCHPAD_STORAGE_SECRET_ACCESS_KEY }}
        run: |
          launchpad_delete_instance "${{ inputs.INSTANCE_NAME }}" --force

      - name: Push changes to remote repository
        run: |
          git add instances/${{ inputs.INSTANCE_NAME }}

          if git diff --cached --quiet; then
            echo "No changes to commit"
          else
            git commit -m "feat: remove instance ${{ inputs.INSTANCE_NAME }}"
            git pull origin ${{ github.ref_name }} --rebase
            git push
          fi

      - name: Summary
        run: |
          echo "## Instance Deleted Successfully! 🎉" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "**Instance Name:** \`${{ inputs.INSTANCE_NAME }}\`" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "### Next Steps" >> $GITHUB_STEP_SUMMARY
          echo "1. Check ArgoCD for application sync status" >> $GITHUB_STEP_SUMMARY
          echo "2. Monitor Argo Workflows for deprovisioning progress" >> $GITHUB_STEP_SUMMARY
          echo "3. Monitor the instance deletion process" >> $GITHUB_STEP_SUMMARY