.github/workflows: add action to monitor schema changes agentless (#263)

ariga · Nov 28, 2024 · f457a28 · f457a28
1 parent 17ae170
commit f457a28
Showing 1 changed file with 37 additions and 0 deletions.
diff --git a/.github/workflows/monitor-ecommerce.yaml b/.github/workflows/monitor-ecommerce.yaml
@@ -0,0 +1,37 @@
+name: Monitor Ecommerce DB
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 9,16 * * 0-4' # Runs at 9 AM and 4 PM (UTC) on Sunday to Thursday
+jobs:
+  monitor:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Add AWS Profile
+        run: |
+          aws configure set aws_access_key_id ${{ secrets.AWS_SANDBOX_DEPLOYER_KEY_ID }} --profile sandbox
+          aws configure set aws_secret_access_key ${{ secrets.AWS_SANDBOX_SECRET_SECRET_KEY }} --profile sandbox
+          aws configure set region us-east-1 --profile sandbox
+      - name: Read AWS Secret
+        id: secrets
+        run: |
+          SECRET_STRING=$(aws secretsmanager get-secret-value --secret-id aurora-mysql --profile sandbox | jq -rc '.SecretString')
+          for key in $(echo $SECRET_STRING | jq -r 'keys[]'); do
+            SECRET=$(echo $SECRET_STRING | jq -r ".$key")
+            echo "::add-mask::$SECRET"
+            echo "$key=$SECRET" >> $GITHUB_OUTPUT
+          done
+      - name: Install socat
+        run: sudo apt-get install -y socat
+      - name: Port Forward to Aurora
+        run: |
+          socat tcp-l:3306,fork,reuseaddr tcp:${{ steps.secrets.outputs.host }}:${{ steps.secrets.outputs.port }} &
+          echo "127.0.0.1 ecommerce.atlas.ariga" | sudo tee -a /etc/hosts
+      - name: Setup Atlas
+        uses: ariga/setup-atlas@master
+        with:
+          cloud-token: ${{ secrets.ATLAS_CLOUD_TOKEN }}
+      - uses: ariga/atlas-action/monitor/schema@master
+        with:
+          cloud-token: ${{ secrets.ATLAS_CLOUD_TOKEN }}
+          url: mysql://${{ steps.secrets.outputs.username }}:${{ steps.secrets.outputs.password }}@ecommerce.atlas.ariga:3306/${{ steps.secrets.outputs.schema }}