NASA-PDS / devops

Parent repo for PDS DevOps activities
Apache License 2.0
0 stars 0 forks source link

Use Github Actions Github-Hosted Runner to deploy to NGAP #45

Closed tloubrieu-jpl closed 1 year ago

tloubrieu-jpl commented 1 year ago

💡 Description

@nutjob4life knows how to do that, @sjoshi-jpl has access to NGAP.

sjoshi-jpl commented 1 year ago

@tloubrieu-jpl since @nutjob4life is out of office until 29th, I'll start going through the steps provided on GitHub Docs. Will reach out incase of roadblocks.

tloubrieu-jpl commented 1 year ago

There are security concerns in having a self-hosted runner on public gihub repository.

@sjoshi-jpl will keep on exploring the self hosted solution until next breakout, so that we can decide if we have an easy enough / secured enough solution with the self hosted runners.

sjoshi-jpl commented 1 year ago

@tloubrieu-jpl @jordanpadams I am able to successfully execute Terraform plan using GitActions in NGAP. Currently I am using the github-hosted runner with OIDC setup we discussed over the call yesterday.

Successful run - https://github.com/NASA-PDS/monitoring/actions/runs/5072130455/jobs/9109653549

jordanpadams commented 1 year ago

@sjoshi-jpl noticed issue with OICD auth timeout issue. working at Jenkins to do this as well to have 2 ways to deploy

tloubrieu-jpl commented 1 year ago

Hi @sjoshi-jpl , before I close this ticket can you create some documentation and link it here.

I think the best place would be on our internal wiki.

Thanks

tloubrieu-jpl commented 1 year ago

The documentation would mostly point to how the NGAP configuration (OICD ?) has been made and pointing to the workflows developed in this repository.

sjoshi-jpl commented 1 year ago

@tloubrieu-jpl I've created a document on internal wiki as requested. Please review and let me know if additional info is needed.

https://wiki.jpl.nasa.gov/pages/viewpage.action?pageId=779056783

tloubrieu-jpl commented 1 year ago

Ok, that looks good @sjoshi-jpl . I added a context section. We are good for this ticket.