Update waf-k8s-destroy.yml #4

Workflow file for this run

.github/workflows/waf-k8s-destroy.yml at d818d67

	name: "WAF + K8s Destroy"

	on:
	push:
	branches:
	- destroy-waf-k8s
	pull_request:

	jobs:
	terraform_xc:
	name: "F5XC WAAP"
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: ./workflow-guides/waf/f5-xc-waf-on-k8s/terraform/xc
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
	- name: Setup Terraform Backend
	id: backend
	run: \|
	cat > backend.tf << EOF
	terraform {
	cloud {
	organization = "${{ secrets.TF_CLOUD_ORGANIZATION }}"
	workspaces {
	name = "${{ secrets.TF_CLOUD_WORKSPACE_XC }}"
	}
	}
	}
	EOF
	echo "${{secrets.P12}}" \| base64 -d > api.p12
	- name: Terraform Init
	id: init
	run: terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -input=false
	continue-on-error: true

	- uses: actions/github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	const output = `#### Terraform Format and Style 🖌\`${{ steps.fmt.outcome }}\`
	#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
	<details><summary>Show Plan</summary>
	\`\`\`\n
	${process.env.PLAN}
	\`\`\`
	</details>
	Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\``;
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})
	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Destroy
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform destroy -auto-approve -input=false

	terraform_approve:
	name: "Site Offboarding"
	runs-on: ubuntu-latest
	needs: terraform_xc
	defaults:
	run:
	working-directory: ./workflow-guides/waf/f5-xc-waf-on-k8s/terraform/registration
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

	- name: Setup Terraform Backend
	id: backend
	run: \|
	cat > backend.tf << EOF
	terraform {
	cloud {
	organization = "${{ secrets.TF_CLOUD_ORGANIZATION }}"
	workspaces {
	name = "${{ secrets.TF_CLOUD_WORKSPACE_REG }}"
	}
	}
	}
	EOF
	echo "${{secrets.P12}}" \| base64 -d > api.p12
	- name: Terraform Init
	id: init
	run: terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -input=false
	continue-on-error: true

	- uses: actions/github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	const output = `#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
	<details><summary>Show Plan</summary>
	\`\`\`\n
	${process.env.PLAN}
	\`\`\`
	</details>
	Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\``;
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})
	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Destroy
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform destroy -auto-approve -input=false

	terraform_ce:
	name: "CE Destroy"
	runs-on: ubuntu-latest
	needs: terraform_approve
	defaults:
	run:
	working-directory: ./workflow-guides/waf/f5-xc-waf-on-k8s/terraform/ce-deployment
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

	- name: Setup Terraform Backend
	id: backend
	run: \|
	cat > backend.tf << EOF
	terraform {
	cloud {
	organization = "${{ secrets.TF_CLOUD_ORGANIZATION }}"
	workspaces {
	name = "${{ secrets.TF_CLOUD_WORKSPACE_CE }}"
	}
	}
	}
	EOF

	- name: Setup Configmap
	id: configmap
	run: \|
	cat > configmap.tf << EOF
	resource "kubectl_manifest" "configmap" {
	yaml_body = <<YAML
	apiVersion: v1
	kind: ConfigMap
	metadata:
	name: vpm-cfg
	namespace: ves-system
	data:
	config.yaml: \|
	Vpm:
	# CHANGE ME
	ClusterName: ce-k8s
	ClusterType: ce
	Config: /etc/vpm/config.yaml
	DisableModules: ["recruiter"]
	# CHANGE ME
	Latitude: ${{ secrets.TF_CLOUD_LATITUDE }}
	# CHANGE ME
	Longitude: ${{ secrets.TF_CLOUD_LONGITUDE }}
	MauriceEndpoint: https://register.ves.volterra.io
	MauricePrivateEndpoint: https://register-tls.ves.volterra.io
	PrivateNIC: eth0
	SkipStages: ["osSetup", "etcd", "kubelet", "master", "voucher", "workload", "controlWorkload"]
	# CHANGE ME
	Token: ${{ secrets.TF_CLOUD_TOKEN }}
	CertifiedHardware: k8s-minikube-voltmesh
	YAML
	}
	EOF
	- name: Terraform fmt
	id: format
	run: terraform fmt

	- name: Terraform Init
	id: init
	run: terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -input=false
	continue-on-error: true

	- uses: actions/github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	const output = `#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
	<details><summary>Show Plan</summary>
	\`\`\`\n
	${process.env.PLAN}
	\`\`\`
	</details>
	Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\``;
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})
	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Destroy
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform destroy -auto-approve -input=false


	terraform_eks:
	name: "AWS EKS"
	runs-on: ubuntu-latest
	needs: terraform_ce
	defaults:
	run:
	working-directory: ./eks-cluster
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

	- name: Setup Terraform Backend
	id: backend
	run: \|
	cat > backend.tf << EOF
	terraform {
	cloud {
	organization = "${{ secrets.TF_CLOUD_ORGANIZATION }}"
	workspaces {
	name = "${{ secrets.TF_CLOUD_WORKSPACE_EKS }}"
	}
	}
	}
	EOF

	- name: Terraform Init
	id: init
	run: terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -input=false
	continue-on-error: true

	- uses: actions/github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	const output = `#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
	<details><summary>Show Plan</summary>
	\`\`\`\n
	${process.env.PLAN}
	\`\`\`
	</details>
	Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\``;
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})
	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Destroy
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform destroy -auto-approve -input=false

	terraform_infra:
	name: "AWS Infra"
	runs-on: ubuntu-latest
	needs: terraform_eks
	defaults:
	run:
	working-directory: ./infra
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

	- name: Setup Terraform Backend
	id: backend
	run: \|
	cat > backend.tf << EOF
	terraform {
	cloud {
	organization = "${{ secrets.TF_CLOUD_ORGANIZATION }}"
	workspaces {
	name = "${{ secrets.TF_CLOUD_WORKSPACE_INFRA }}"
	}
	}
	}
	EOF

	- name: Terraform Init
	id: init
	run: terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -input=false
	continue-on-error: true

	- uses: actions/github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	const output = `#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
	<details><summary>Show Plan</summary>
	\`\`\`\n
	${process.env.PLAN}
	\`\`\`
	</details>
	Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\``;
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})
	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Destroy
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform destroy -auto-approve -input=false

	terraform_site:
	name: "Site Cleanup"
	runs-on: ubuntu-latest
	needs: terraform_infra
	defaults:
	run:
	working-directory: ./workflow-guides/waf/f5-xc-waf-on-k8s/terraform/registration
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v2
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

	- name: Setup Terraform Backend
	id: backend
	run: \|
	cat > backend.tf << EOF
	terraform {
	cloud {
	organization = "${{ secrets.TF_CLOUD_ORGANIZATION }}"
	workspaces {
	name = "${{ secrets.TF_CLOUD_WORKSPACE_REG }}"
	}
	}
	}
	EOF
	echo "${{secrets.P12}}" \| base64 -d > api.p12
	- name: Terraform Init
	id: init
	run: \|
	mv site.tmp site.tf
	mv registration.tf registration.tff
	terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -input=false
	continue-on-error: true


	- uses: actions/github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	script: \|
	const output = `#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
	<details><summary>Show Plan</summary>
	\`\`\`\n
	${process.env.PLAN}
	\`\`\`
	</details>
	Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\``;
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})
	- name: Terraform Plan Status
	if: steps.plan.outcome == 'failure'
	run: exit 1

	- name: Terraform Apply
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform apply -auto-approve -input=false

	- name: Terraform Destroy
	if: github.ref == 'refs/heads/destroy-waf-k8s' && github.event_name == 'push'
	run: terraform destroy -auto-approve -input=false

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update waf-k8s-destroy.yml #4

Workflow file

Update waf-k8s-destroy.yml #4

Jobs

Run details

Workflow file for this run