unused aws instace and vpcs cleanup #71
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Daily AWS Cleanup Bot | |
| on: | |
| pull_request: | |
| types: | |
| - opened | |
| - synchronize | |
| branches: | |
| - test-awsresourcecleanup | |
| push: | |
| branches: | |
| - test-awsresourcecleanup | |
| jobs: | |
| cleanup: | |
| runs-on: linux-amd64-cpu4 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Set up AWS CLI | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: us-west-1 | |
| - name: Identify resources for deletion | |
| id: identify-resources | |
| run: | | |
| # Find vpcs with names ci* | |
| vpcs=$(aws ec2 describe-vpcs \ | |
| --filters "Name=tag:Name,Values=ci*" \ | |
| --query "Vpcs[].VpcId" \ | |
| --output text | tr -d '\r' | tr '\n' ' ') | |
| echo "Found VPCs: $vpcs" | |
| echo "vpcs=$vpcs" >> $GITHUB_ENV | |
| - name: Clean up VPCs | |
| if: env.vpcs != '' | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| get_tag_value(){ | |
| local vpc_id=$1 | |
| local key=$2 | |
| aws ec2 describe-tags --filters "Name=resource-id,Values=$vpc_id" "Name=key,Values=$key" \ | |
| --query "Tags[0].Value" --output text | |
| } | |
| for vpc in $vpcs; do | |
| github_repository=$(get_tag_value $vpc "GitHubRepository") | |
| run_id=$(get_tag_value $vpc "GitHubRunId") | |
| job_name=$(get_tag_value $vpc "GitHubJob") | |
| response=$(curl -s -H "Authorization: Bearer $GITHUB_TOKEN" \ | |
| "https://api.github.com/repos/${github_repository}/actions/runs/${run_id}/jobs") | |
| if [[ -z "$response" || "$response" == "null" ]]; then | |
| continue | |
| fi | |
| status=$(echo "$response" | jq -r ".jobs? // [] | map(select(.name | test(\"^$job_name\"))) | .[0]?.status // \"null\"" 2>/dev/null || echo "null") | |
| if [[ "$status" != "null" && ! -z "$status" && $(echo "$status" | grep -qvE '^(queued|in_progress)$'; echo $?) -eq 0 ]]; then | |
| echo "Holodeck e2e Job status is not in running stage , Delete the dependent resources" | |
| scripts/awscleanup.sh $vpc | |
| fi | |
| done | |
| - name: Post cleanup | |
| run: | | |
| echo "Cleanup completed." |