create argocd echo app #11
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: create argocd echo app | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| repo_name: | |
| description: 'Copied Repo Name' | |
| type: string | |
| default: 'echo-app' | |
| cluster-name: | |
| description: 'Name of GKE cluster to create app on' | |
| default: "demo-cluster" | |
| gcp-region: | |
| type: choice | |
| description: 'GCP region of cluster' | |
| default: "us-east5" | |
| options: | |
| - us-east5 | |
| - us-central1 | |
| - us-east4 | |
| gcp-zone: | |
| type: choice | |
| description: 'GCP zone of cluster' | |
| default: "a" | |
| options: | |
| - a | |
| - b | |
| - c | |
| env: | |
| REPO_NAME: ${{ github.event.inputs.repo_name || 'echo-app' }} | |
| CLUSTER_NAME: ${{ github.event.inputs.cluster-name || 'demo-cluster' }} | |
| GCP_REGION: ${{ github.event.inputs.gcp-region || 'us-east5' }} | |
| GCP_ZONE: ${{ github.event.inputs.gcp-region || 'us-east5' }}-${{ github.event.inputs.gcp-zone || 'a' }} | |
| GCP_PROJECT_ID: ${{ secrets.GCP_PROJECT }} | |
| GCP_DNS_ZONE: examples-kurtmadel | |
| jobs: | |
| create-argocd-echo-app: | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v3 | |
| - name: Generate km-demos GitHub App token | |
| id: generate_token | |
| uses: tibdex/[email protected] | |
| with: | |
| app_id: ${{ secrets.KM_DEMOS_GITHUB_APP_ID }} | |
| private_key: ${{ secrets.KM_DEMOS_GITHUB_APP_KEY }} | |
| - name: create-echo-repo-from-template | |
| shell: bash | |
| env: | |
| GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} | |
| run: | | |
| gh api \ | |
| --method POST \ | |
| -H "Accept: application/vnd.github+json" \ | |
| -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| /repos/km-demos/echo-app-template/generate \ | |
| -f owner='km-demos' \ | |
| -f name="$REPO_NAME" \ | |
| -f description='Simple ehco app to use with ArgoCD demo.' \ | |
| -F include_all_branches=false \ | |
| -F private=false | |
| echo '{"name":"web","active":true,"events":["push","pull_request","release"],"config":{"url":"https://argocd.examples.kurtmadel.com/api/webhook","secret":"'"${{ secrets.ARGOCD_GITHUB_WEBHOOK_SECRET }}"'","content_type":"json","insecure_ssl":"0"}}' | gh api repos/km-demos/$REPO_NAME/hooks --input - -X POST | |
| - id: 'gcp-auth' | |
| name: 'Authenticate to Google Cloud' | |
| uses: google-github-actions/[email protected] | |
| with: | |
| workload_identity_provider: ${{ secrets.WIF_POOL }} | |
| service_account: ${{ secrets.SA_EMAIL }} | |
| - id: get-credentials | |
| uses: google-github-actions/[email protected] | |
| with: | |
| cluster_name: ${{ env.CLUSTER_NAME }} | |
| location: ${{ env.GCP_ZONE }} | |
| - id: create-dns-entry | |
| run: | | |
| INGRESS_IP=$(kubectl get services -n ingress-nginx | grep LoadBalancer | awk '{print $4}') | |
| gcloud dns --project=$GCP_PROJECT_ID record-sets transaction start --zone=$GCP_DNS_ZONE | |
| gcloud dns --project=$GCP_PROJECT_ID record-sets transaction add $INGRESS_IP --name=$REPO_NAME.examples.kurtmadel.com. --ttl=300 --type=A --zone=$GCP_DNS_ZONE | |
| gcloud dns --project=$GCP_PROJECT_ID record-sets transaction execute --zone=$GCP_DNS_ZONE | |
| - id: create-argocd-app | |
| run: | | |
| kubectl create ns $REPO_NAME | |
| kubectl create secret docker-registry ghcr-login-secret -n $REPO_NAME --docker-server=https://ghcr.io \ | |
| --docker-username=km-demos --docker-password=${{ secrets.KM_MANAGE_PACKAGES_TOKEN }} [email protected] | |
| yq e -i ".metadata.name = \"$REPO_NAME\"" argo-cd/argocd-app.yaml | |
| yq e -i ".spec.source.repoURL = \"https://github.com/km-demos/$REPO_NAME.git\"" argo-cd/argocd-app.yaml | |
| yq e -i ".spec.destination.namespace = \"$REPO_NAME\"" argo-cd/argocd-app.yaml | |
| kubectl apply -f argo-cd/argocd-app.yaml | |
| - id: branch-protection | |
| shell: bash | |
| env: | |
| GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} | |
| run: | | |
| curl -X PUT \ | |
| -H "Accept: application/vnd.github+json" \ | |
| -H "Authorization: Bearer $GITHUB_TOKEN"\ | |
| -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| https://api.github.com/repos/km-demos/$REPO_NAME/branches/main/protection \ | |
| -d '{"required_status_checks":null,"enforce_admins":false,"required_pull_request_reviews":{"required_approving_review_count": 0},"restrictions":null}' | |
| - id: branches-prs | |
| shell: bash | |
| env: | |
| GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} | |
| run: | | |
| mkdir -p $REPO_NAME | |
| cd $REPO_NAME | |
| git config --global init.defaultBranch main | |
| git config user.name 'github-actions[bot]' | |
| git config user.email 'github-actions[bot]@users.noreply.github.com' | |
| git config pull.rebase false | |
| git clone https://github.com/kmd-demos/$REPO_NAME.git . | |
| git checkout -b fix-err-image-pull | |
| curl https://raw.githubusercontent.com/km-demos/helm-chart/values.yaml > helm-chart/values.yaml | |
| git add * | |
| git commit -am "udpating values.yaml to fix ImagePullBackOff" | |
| git push origin fix-err-image-pull | |
| git checkout -b fix-crash-loop-backoff | |
| curl https://raw.githubusercontent.com/km-demos/helm-chart/values.yaml > helm-chart/values.yaml | |
| curl https://raw.githubusercontent.com/km-demos/helm-chart/templates/deployments.yaml > helm-chart/templates/deployments.yaml | |
| git add * | |
| git commit -am "udpates to fix CrashLoopBackOff" | |
| git push origin fix-crash-loop-backoff | |
| curl -H 'Accept: application/vnd.github.antiope-preview+json' \ | |
| -H "authorization: Bearer $GITHUB_TOKEN" \ | |
| --data '{"title":"Fix ImagePullBackOff ","head":"fix-err-image-pull","base":"main"}' \ | |
| https://api.github.com/repos/km-demos/$REPO_NAME/pulls | |
| curl -H 'Accept: application/vnd.github.antiope-preview+json' \ | |
| -H "authorization: Bearer $GITHUB_TOKEN" \ | |
| --data '{"title":"Fix CrashLoopBackOff ","head":"fix-crash-loop-backoff","base":"fix-err-image-pull"}' \ | |
| https://api.github.com/repos/km-demos/$REPO_NAME/pulls |