Skip to content

GitHub action to remove an environment and it's deployments

Notifications You must be signed in to change notification settings

GHCICD/delete-deployment-environment

This branch is up to date with strumwolf/delete-deployment-environment:main.

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Feb 5, 2024
a4825dd Β· Feb 5, 2024
Jan 30, 2024
Oct 13, 2022
Feb 5, 2024
Jan 30, 2023
Jan 30, 2023
Mar 6, 2021
Oct 12, 2022
Mar 18, 2021
Jan 30, 2024
Jul 31, 2020
Jan 30, 2024
Oct 13, 2022
Jan 30, 2024
Jan 30, 2024
Feb 5, 2024
Feb 5, 2024
Mar 6, 2021
Jan 30, 2024

Repository files navigation

delete-deployment-environment

GitHub action that will find and delete all deployments by deployment name as well as the GitHub environment they are deployed to. It will first find and mark all deployments as inactive and then delete all deployments and then the environment.

If you want to only delete deployments and the not environment, add onlyRemoveDeployments: true.

If you want to keep deployments but inactivate all deployments, add onlyDeactivateDeployments: true

If you want to only delete a deployment ref and not all deployments of a given environment, add ref: my-branch

Note if you pass onlyDeactivateDeployments: true and onlyRemoveDeployments: true, onlyRemoveDeployments will override onlyDeactivateDeployments and all deployments will be removed.

Also note that if you are planning on deleting a created environment, your GITHUB_TOKEN must have permissions with repo scope. The token provided by the workflow, github.token does not have the permissions to delete created environments. (See Delete an environment REST API docs)

If you see a Resource not accessible by integration error, you'll likely need to follow the instructions below to obtain the proper token.

How to obtain the proper token

For certain operations (like deleting an environment), your GitHub Action will need additional permissions that your github.token simply doesn't have.

In this case, a GitHub App can be created to assume the required permissions, and ultimately your own Actions will use a Private Key to later exchange for a JWT token, which this Action can use to execute operations.

  1. Create a GitHub app.

  2. Generate a Private Key

  3. Add your GitHub App's "App ID" to your repo's Actions Secrets (ex: GH_APP_ID)

  4. Add your Private Key to your repo's Actions Secrets (ex: GH_APP_PRIVATE_KEY)

  5. Use navikt/github-app-token-generator before using this action to generate a JWT

    Example

    cleanup-pr.yml

    #
    # Cleans up a GitHub PR
    #
    name: 🧼 Clean up environment
    on:
    pull_request:
      types:
        - closed
    
    jobs:
      cleanup:
        runs-on: ubuntu-latest
        permissions: write-all
    
        steps:
          - uses: actions/checkout@v3
    
          # Points to a recent commit instead of `main` to avoid supply chain attacks. (The latest tag is very old.)
          - name: 🎟 Get GitHub App token
            uses: navikt/github-app-token-generator@a3831f44404199df32d8f39f7c0ad9bb8fa18b1c
            id: get-token
            with:
              app-id: ${{ secrets.GH_APP_ID }}
              private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
    
          - name: πŸ—‘ Delete deployment environment
            uses: strumwolf/[email protected]
            with:
              # Use a JWT created with your GitHub App's private key
              token: ${{ steps.get-token.outputs.token }}
              environment: pr-${{ github.event.number }}
              ref: ${{ github.ref_name }}

Inputs

name description
token GitHub token like ${{ github.token }} or ${{ secrets.GITHUB_TOKEN }}
environment The Name of the environment to delete
onlyRemoveDeployments Delete deployments and not the environment. Default false
onlyDeactivateDeployments Deactivate the deployments but don't remove deployments or environment. Default false
ref The name of the deployment ref to delete

Usage

Deactives and removes deployment environment (also from settings)

The example below will be triggered on a delete event.

  • βœ”οΈ Deactivates deployment
  • βœ”οΈ Removes from deployments tab
  • βœ”οΈ Removes from environment tab in settings
name: Delete Environment (default settings)

on:
  delete:
    branches-ignore:
      - main

jobs:
  delete:
    runs-on: ubuntu-latest
    steps:
      - uses: strumwolf/delete-deployment-environment@v2
        with:
          # ⚠️ The provided token needs permission for admin write:org
          token: ${{ secrets.GITHUB_TOKEN }}
          environment: my-environment-name

Deactivates and removes deployment environment

The example below will be triggered on a delete event.

  • βœ”οΈ Deactivates deployment
  • βœ”οΈ Removes from deployments tab
  • ❌ Removes from environment tab in settings
name: Delete Deployments

on:
  delete:
    branches-ignore:
      - main

jobs:
  delete:
    runs-on: ubuntu-latest
    steps:
      - uses: strumwolf/delete-deployment-environment@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          environment: my-environment-name
          onlyRemoveDeployments: true

Deactivates and removes a deployment ref of a given environment

The example below will be triggered on a delete event.

  • βœ”οΈ Deactivates deployment
  • βœ”οΈ Removes from deployments tab
  • βœ”οΈ Removes only a deployment ref
  • ❌ Removes from environment tab in settings
name: Delete Deployments Ref

on:
  delete:
    branches-ignore:
      - main

jobs:
  delete:
    runs-on: ubuntu-latest
    steps:
      - uses: strumwolf/delete-deployment-environment@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          environment: my-environment-name
          ref: my-branch
          onlyRemoveDeployments: true

Deactivates deployment environment

The example below will be triggered on a delete event.

  • βœ”οΈ Deactivates deployment
  • ❌ Removes from deployments tab
  • ❌ Removes from environment tab in settings
name: Set deployements to inactive

on:
  delete:
    branches-ignore:
      - main

jobs:
  delete:
    runs-on: ubuntu-latest
    steps:
      - uses: strumwolf/delete-deployment-environment@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          environment: my-environment-name
          onlyDeactivateDeployments: true

About

GitHub action to remove an environment and it's deployments

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • TypeScript 100.0%