11version : 2.1
2+ orbs :
3+ aws-cli : circleci/aws-cli@4.1.1
4+
25commands :
36 deploy :
47 description : " Deployment of rules server"
@@ -62,6 +65,24 @@ commands:
6265 VAULT_PASSWORD_FILE=~/.vault-pass.txt app_zip_path=~/artifacts/ make rules-server-<< parameters.env >>
6366
6467 - run : rm ~/.vault-pass.txt
68+ setup_server_access :
69+ description : Generate and copy temporary keys to server
70+ parameters :
71+ instance-id :
72+ type : string
73+ os-user :
74+ type : string
75+ default : ubuntu
76+ availability-zone :
77+ type : string
78+ default : ap-south-1a
79+ steps :
80+ - run : rm -rf /tmp/temp_rsa_key*
81+ - run : ssh-keygen -b 2048 -t rsa -f /tmp/temp_rsa_key -q -N ""
82+ - run : eval `ssh-agent -s`
83+ - run : ssh-add /tmp/temp_rsa_key
84+ - run : |
85+ aws ec2-instance-connect send-ssh-public-key --instance-id << parameters.instance-id >> --availability-zone << parameters.availability-zone >> --instance-os-user << parameters.os-user >> --no-paginate --ssh-public-key file:///tmp/temp_rsa_key.pub --output text | head -1
6586
6687jobs :
6788 app_test :
@@ -110,7 +131,7 @@ jobs:
110131 paths :
111132 - ./node_modules
112133
113- # https://serverfault.com/questions/265675/how-can-i-zip-compress-a-symlink
134+ # https://serverfault.com/questions/265675/how-can-i-zip-compress-a-symlink
114135 - run : zip --symlinks -r ~/rules-server.zip ../rules-server
115136
116137 - run : tar -czvf ~/rules-server.tgz -C ../rules-server .
@@ -132,7 +153,7 @@ jobs:
132153
133154 - store_artifacts :
134155 path : ~/artifacts
135-
156+
136157 build_docker_image :
137158 docker :
138159 - image : docker:git
@@ -198,20 +219,13 @@ jobs:
198219 steps :
199220 - deploy :
200221 hostname : " ssh.perf.openchs.org"
201- NEW_PRODUCTION_deploy :
222+ PRODUCTION_deploy :
202223 docker :
203224 - image : cimg/deploy:2023.09-node
204225 working_directory : ~/
205226 steps :
206227 - deploy_ansible :
207228 env : " prod"
208- PRODUCTION_deploy :
209- docker :
210- - image : cimg/node:10.24.1
211- working_directory : ~/
212- steps :
213- - deploy :
214- hostname : " ssh.server.openchs.org"
215229 RWB_STAGING_deploy :
216230 docker :
217231 - image : cimg/deploy:2023.09-node
@@ -226,7 +240,7 @@ jobs:
226240 - deploy_ansible :
227241 env : " rwb-staging"
228242
229- RWB_PROD_deploy :
243+ RWB_PRODUCTION_deploy :
230244 docker :
231245 - image : cimg/deploy:2023.09-node
232246 working_directory : ~/
@@ -239,7 +253,7 @@ jobs:
239253 availability-zone : " ap-south-1a"
240254 - deploy_ansible :
241255 env : " rwb-prod"
242-
256+
243257tags_filter : &tags_filter
244258 filters :
245259 tags :
@@ -285,14 +299,6 @@ workflows:
285299 context : prod-deploy
286300 requires :
287301 - PRODUCTION_approve
288- - NEW_PRODUCTION_approve :
289- type : approval
290- requires :
291- - app_build
292- - NEW_PRODUCTION_deploy :
293- context : prod-deploy
294- requires :
295- - NEW_PRODUCTION_approve
296302 - PRERELEASE_approve :
297303 type : approval
298304 requires :
@@ -319,16 +325,17 @@ workflows:
319325 - non-prod-deploy
320326 requires :
321327 - RWB_STAGING_approve
322- - RWB_PROD_approve :
328+ - RWB_PRODUCTION_approve :
323329 type : approval
324330 requires :
325331 - app_build
326- - RWB_PROD_deploy :
332+ - RWB_PRODUCTION_deploy :
327333 context :
328334 - RWB_AWS_OIDC
329335 - prod-deploy
330336 requires :
331- - RWB_PROD_approve
337+ - RWB_PRODUCTION_approve
338+
332339notify :
333340 webhooks :
334341 - url : https://webhooks.gitter.im/e/0fdffde721194986f2a0
0 commit comments