Clear Resource Group #70
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Clear Resource Group | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| # Run every day at 4:30 AM (KST) | |
| - cron: "30 19 * * *" | |
| permissions: | |
| contents: read | |
| id-token: write | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| clear-resource-group: | |
| name: "Clearing Resource Groups" | |
| if: github.repository_owner == 'aliencube' | |
| runs-on: ubuntu-latest | |
| env: | |
| AZURE_CLIENT_ID: ${{ vars.AZM_CLIENT_ID }} | |
| AZURE_TENANT_ID: ${{ vars.AZM_TENANT_ID }} | |
| AZURE_SUBSCRIPTION_ID: ${{ vars.AZM_SUBSCRIPTION_ID }} | |
| AZURE_RESOURCE_GROUPS: ${{ vars.AZM_RESOURCE_GROUPS }} | |
| AZURE_APP_NAME: ${{ vars.AZM_APP_NAME }} | |
| PAU_ON_RESET_RESOURCE_GROUP_REQUEST_URL: ${{ secrets.PAU_ON_RESET_RESOURCE_GROUP_REQUEST_URL }} | |
| PAU_API_KEY: ${{ secrets.PAU_API_KEY }} | |
| steps: | |
| - name: Azure login (Federated Credentials) | |
| if: env.AZURE_CLIENT_ID != '' | |
| uses: azure/login@v2 | |
| with: | |
| client-id: ${{ env.AZURE_CLIENT_ID }} | |
| tenant-id: ${{ env.AZURE_TENANT_ID }} | |
| subscription-id: ${{ env.AZURE_SUBSCRIPTION_ID }} | |
| enable-AzPSSession: true | |
| - name: Delete all resource groups | |
| shell: pwsh | |
| run: | | |
| $excludes = "${{ env.AZURE_RESOURCE_GROUPS }}" -split ',' | |
| $groups = az group list --query "[].name" | ConvertFrom-Json | |
| $groups | ForEach-Object { | |
| $name = $_ | |
| if ($excludes -notcontains $name) { | |
| az group delete -g $name -y --no-wait | |
| } | |
| } | |
| - name: Delete all apps | |
| shell: pwsh | |
| run: | | |
| $apps = az ad app list --query "[?displayName != '${{ env.AZURE_APP_NAME }}'].{id: id, displayName:displayName, appId: appId}" | ConvertFrom-Json | |
| $apps | ForEach-Object { | |
| $id = $_.id | |
| az ad app delete --id $id | |
| } |