glaze/.github/workflows/cluster-setup.yml at main · shaoster/glaze · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
name: Cluster Setup

on:
  push:
    branches: [main]
    paths:
      - "infra/**"
      - "tools/ensure_cluster.sh"
  workflow_dispatch:

jobs:
  setup:
    name: Converge cluster infrastructure
    runs-on: ubuntu-latest
    environment: glaze-droplet
    concurrency:
      group: cluster-setup
      cancel-in-progress: false
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v5

      - name: Connect to Tailscale
        uses: tailscale/github-action@6cae46e2d796f265265cfcf628b72a32b4d7cade  # v3
        with:
          authkey: ${{ secrets.TAILSCALE_AUTH_KEY }}
          tags: tag:ci

      - name: Ensure cluster
        env:
          DEPLOY_HOST: ${{ vars.DEPLOY_HOST_TAILSCALE }}
          INFISICAL_CLIENT_ID: ${{ secrets.INFISICAL_CLIENT_ID }}
          INFISICAL_CLIENT_SECRET: ${{ secrets.INFISICAL_CLIENT_SECRET }}
          INFISICAL_PROJECT_SLUG: ${{ vars.INFISICAL_PROJECT_SLUG }}
        run: tools/ensure_cluster.sh "${DEPLOY_HOST}"