ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update GCP bootstrap destroy to use CLI

Browse Source
This commit is contained in:
cloudneutral 2025-12-09 17:14:54 +08:00
parent b5372e0018
commit 87b99350ba
1 changed files with 23 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
.github/workflows/terraform-standard-iac-pipeline-gcp-global-bootstrap.yaml vendored
View File

@ -93,6 +93,7 @@ jobs:
project_id: ${{ env.BOOTSTRAP_PROJECT_ID }}
- name: Render Terraform variables
if: env.DEPLOY_ACTION != 'destroy'
working-directory: ${{ env.TF_WORKDIR }}/${{ matrix.target }}
run: |
cat > bootstrap.auto.tfvars <<EOF
@ -112,6 +113,7 @@ jobs:
fi
- name: Init
if: env.DEPLOY_ACTION != 'destroy'
working-directory: ${{ env.TF_WORKDIR }}/${{ matrix.target }}
run: terraform init -upgrade
@ -125,10 +127,28 @@ jobs:
working-directory: ${{ env.TF_WORKDIR }}/${{ matrix.target }}
run: terraform apply -auto-approve
- name: Destroy
- name: Destroy (gcloud)
if: env.DEPLOY_ACTION == 'destroy'
working-directory: ${{ env.TF_WORKDIR }}/${{ matrix.target }}
run: terraform destroy -auto-approve
env:
TARGET: ${{ matrix.target }}
run: |
set -euo pipefail
if [ "$TARGET" = "bootstrap-gcs" ]; then
if gcloud storage buckets describe gs://${BOOTSTRAP_BUCKET_NAME} >/dev/null 2>&1; then
gcloud storage rm --recursive gs://${BOOTSTRAP_BUCKET_NAME} || true
gcloud storage buckets delete gs://${BOOTSTRAP_BUCKET_NAME} --quiet || true
else
echo "Bucket gs://${BOOTSTRAP_BUCKET_NAME} does not exist; skipping deletion."
fi
elif [ "$TARGET" = "bootstrap-iam" ]; then
SA_EMAIL="${BOOTSTRAP_SA_ID}@${BOOTSTRAP_PROJECT_ID}.iam.gserviceaccount.com"
if gcloud iam service-accounts describe "$SA_EMAIL" >/dev/null 2>&1; then
gcloud iam service-accounts delete "$SA_EMAIL" --quiet || true
else
echo "Service account $SA_EMAIL does not exist; skipping deletion."
fi
fi
- name: Save Outputs
if: env.DEPLOY_ACTION == 'apply'