Add start/stop workflows and move to environment-based config

- Add start.yml and stop.yml workflows for server lifecycle - All workflows now use `type: environment` input for environment selection - Secrets and variables moved from repo-level to environment-level - Enables approval gates per environment (e.g., require approval for production) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-14 11:37:13 +10:00
parent 7076d28de0
commit b1261ad622
5 changed files with 184 additions and 52 deletions
@@ -0,0 +1,72 @@
+name: Start SFP Server
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Target environment'
+        type: environment
+        required: true
+
+jobs:
+  start:
+    name: 'Start server (${{ inputs.environment }})'
+    runs-on: ubuntu-latest
+    environment: ${{ inputs.environment }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup SFP CLI and SSH
+        id: setup
+        uses: ./.github/actions/setup-sfp
+        with:
+          docker-registry: ${{ vars.DOCKER_REGISTRY }}
+          docker-registry-token: ${{ secrets.DOCKER_REGISTRY_TOKEN }}
+          image-fqdn: ${{ vars.IMAGE_FQDN }}
+          image-tag: ${{ vars.IMAGE_TAG || 'latest' }}
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+          ssh-host: ${{ vars.SSH_HOST }}
+
+      - name: Start server
+        env:
+          DOCKER_REGISTRY: ${{ vars.DOCKER_REGISTRY }}
+          DOCKER_REGISTRY_TOKEN: ${{ secrets.DOCKER_REGISTRY_TOKEN }}
+          SFP_IMAGE: ${{ steps.setup.outputs.sfp-image }}
+        run: |
+          TENANT="${{ vars.TENANT_NAME }}"
+          SSH_USER="${{ vars.SSH_USER || 'root' }}"
+          SSH_HOST="${{ vars.SSH_HOST }}"
+          BASE_DIR="${{ vars.BASE_DIR || './sfp-server' }}"
+
+          echo "Starting SFP Server"
+          echo "  Environment: ${{ inputs.environment }}"
+          echo "  Tenant:      $TENANT"
+          echo "  Host:        $SSH_HOST"
+
+          START_CMD="sfp server start"
+          START_CMD="$START_CMD --tenant \"$TENANT\""
+          START_CMD="$START_CMD --base-dir \"$BASE_DIR\""
+          START_CMD="$START_CMD --secrets-provider custom"
+          START_CMD="$START_CMD --ssh-connection \"$SSH_USER@$SSH_HOST\""
+          START_CMD="$START_CMD --identity-file /root/.ssh/deploy_key"
+          START_CMD="$START_CMD --no-browser"
+
+          SSH_DIR=$(mktemp -d)
+          cp ~/.ssh/deploy_key "$SSH_DIR/deploy_key"
+          cp ~/.ssh/known_hosts "$SSH_DIR/known_hosts"
+          chmod 600 "$SSH_DIR/deploy_key"
+          chmod 644 "$SSH_DIR/known_hosts"
+
+          docker run --rm \
+            --user root \
+            -v "$SSH_DIR/deploy_key":/root/.ssh/deploy_key \
+            -v "$SSH_DIR/known_hosts":/root/.ssh/known_hosts \
+            -e DOCKER_REGISTRY \
+            -e DOCKER_REGISTRY_TOKEN \
+            "$SFP_IMAGE" \
+            bash -c "chmod 600 /root/.ssh/deploy_key && $START_CMD"
+
+          rm -rf "$SSH_DIR"
+          echo "Server started successfully"