preview-env-teardown.yml

name: preview-env-teardown
on:
  pull_request:
    types: [unlabeled, closed]

jobs:
  tear-down-preview-env:
    if: github.event.label.name == 'deploy' || (github.event.action == 'closed' && contains( github.event.pull_request.labels.*.name, 'deploy'))
    runs-on: ubuntu-22.04
    timeout-minutes: 20
    name: teardown-preview-env
    steps:
      - uses: actions/checkout@v4

      - name: Import secrets
        id: secrets
        uses: hashicorp/vault-action@d1720f055e0635fd932a1d2a48f87a666a57906c
        with:
          url: ${{ secrets.VAULT_ADDR }}
          method: approle
          roleId: ${{ secrets.VAULT_ROLE_ID }}
          secretId: ${{ secrets.VAULT_SECRET_ID }}
          secrets: |
            secret/data/products/camunda-docs/ci/preview-environment PREVIEW_ENV_BUCKET_NAME;
            secret/data/products/camunda-docs/ci/preview-environment PREVIEW_ENV_GCLOUD_SA_KEY;

      - name: Authenticate with Google Cloud
        uses: google-github-actions/auth@v2
        with:
          credentials_json: ${{ steps.secrets.outputs.PREVIEW_ENV_GCLOUD_SA_KEY }}

      - name: Update comment with tear-down warning
        uses: mshick/add-pr-comment@v2
        with:
          refresh-message-position: true
          message: |
            :warning: Preview environment for commit ${{ github.sha }} is being deleted. This usually takes 2-3 minutes.

      - name: Set up Cloud SDK
        uses: google-github-actions/setup-gcloud@v2

      - name: Remove files from Google bucket
        env:
          BUCKET_NAME: ${{ steps.secrets.outputs.PREVIEW_ENV_BUCKET_NAME }}
        run: |
          gsutil -m rm -r gs://$BUCKET_NAME/pr-${{ github.event.number }}/

      - uses: bobheadxi/deployments@v1
        if: always()
        name: Deactivate GitHub Deployment environment
        with:
          step: deactivate-env
          token: ${{ github.token }}
          env: ${{ github.event.repository.name }}
          ref: ${{ github.event.pull_request.head.sha }}

      - name: Update comment with tear-down status
        uses: mshick/add-pr-comment@v2
        with:
          refresh-message-position: true
          message: |
            :broom: Preview environment for this PR has been torn down.