nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-04-05 21:18:13 -05:00
Code

DEVOPS-1901 Fix error: az login again to refresh permissions (#4050)

Browse Source 
* DEVOPS-1901 REFACTOR: Remove the Docker image per registry

* DEVOPS-1901 REFACTOR: Docker image removal process in cleanup-after-pr.yml
This commit is contained in:
Alex Urbina 2024-05-07 13:20:50 -06:00 committed by GitHub
parent 928f94db1f
commit 1ede40d5e1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 17 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
.github/workflows/cleanup-after-pr.yml vendored
View File

@ -5,36 +5,26 @@ on:
pull_request: pull_request:
types: [closed] types: [closed]
env:
_AZ_REGISTRY: "bitwardenprod.azurecr.io"
jobs: jobs:
build-docker: build-docker:
name: Remove branch-specific Docker images name: Remove branch-specific Docker images
runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
steps: steps:
########## ACR ##########
- name: Log in to Azure - QA Subscription
uses: Azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.7
with:
creds: ${{ secrets.AZURE_QA_KV_CREDENTIALS }}
- name: Log in to Azure ACR
run: az acr login -n bitwardenqa
- name: Log in to Azure - production subscription - name: Log in to Azure - production subscription
uses: Azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.7 uses: Azure/login@92a5484dfaf04ca78a94597f4f19fea633851fa2 # v1.4.7
with: with:
creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }} creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }}
- name: Log in to Azure ACR - name: Log in to Azure ACR
run: az acr login -n bitwardenprod run: az acr login -n $_AZ_REGISTRY --only-show-errors
########## Remove Docker images ########## ########## Remove Docker images ##########
- name: Remove the Docker image from ACR - name: Remove the Docker image from ACR
env: env:
REF: ${{ github.event.pull_request.head.ref }} REF: ${{ github.event.pull_request.head.ref }}
REGISTRIES: |
registries:
- bitwardenprod
- bitwardenqa
SERVICES: | SERVICES: |
services: services:
- Admin - Admin
@ -54,24 +44,21 @@ jobs:
run: | run: |
for SERVICE in $(echo "${{ env.SERVICES }}" | yq e ".services[]" - ) for SERVICE in $(echo "${{ env.SERVICES }}" | yq e ".services[]" - )
do do
for REGISTRY in $( echo "${{ env.REGISTRIES }}" | yq e ".registries[]" - ) SERVICE_NAME=$(echo $SERVICE | awk '{print tolower($0)}')
do IMAGE_TAG=$(echo "${REF}" | sed "s#/#-#g") # slash safe branch name
SERVICE_NAME=$(echo $SERVICE | awk '{print tolower($0)}')
IMAGE_TAG=$(echo "${REF}" | sed "s#/#-#g") # slash safe branch name
echo "[*] Checking if remote exists: $REGISTRY.azurecr.io/$SERVICE_NAME:$IMAGE_TAG" echo "[*] Checking if remote exists: $_AZ_REGISTRY/$SERVICE_NAME:$IMAGE_TAG"
TAG_EXISTS=$( TAG_EXISTS=$(
az acr repository show-tags --name $REGISTRY --repository $SERVICE_NAME \ az acr repository show-tags --name $_AZ_REGISTRY --repository $SERVICE_NAME \
| jq --arg $TAG "$IMAGE_TAG" -e '. | any(. == "$TAG")' | jq --arg $TAG "$IMAGE_TAG" -e '. | any(. == "$TAG")'
) )
if [[ "$TAG_EXISTS" == "true" ]]; then if [[ "$TAG_EXISTS" == "true" ]]; then
echo "[*] Tag exists. Removing tag" echo "[*] Tag exists. Removing tag"
az acr repository delete --name $REGISTRY --image $SERVICE_NAME:$IMAGE_TAG --yes az acr repository delete --name $_AZ_REGISTRY --image $SERVICE_NAME:$IMAGE_TAG --yes
else else
echo "[*] Tag does not exist. No action needed" echo "[*] Tag does not exist. No action needed"
fi fi
done
done done
- name: Log out of Docker - name: Log out of Docker