WIP: github commit status integration

Author: daurnimator

argocd/argocd-notifications/cm-patch.yaml

@@ -1,4 +1,4 @@
-# https://argoproj-labs.github.io/argocd-notifications/services/webhook/#set-github-commit-status
+# https://argoproj-labs.github.io/argocd-notifications/services/webhook/
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -27,3 +27,17 @@ data:
               if eq .app.status.operationState.phase \"Error\"    }}has \x0304errored: {{.app.status.operationState.message}}\x03{{end}}{{
               if eq .app.status.operationState.phase \"Failed\"   }}has \x0304failed: {{.app.status.operationState.message}}\x03{{end
             }} (blame \x0315{{.app.status.operationState.operation.initiatedBy.username}}\x03)"
+
+          github:
+            method: POST
+            path: /repos/{{call .repo.FullNameByRepoURL .app.spec.source.repoURL}}/statuses/{{.app.status.operationState.operation.sync.revision}}
+            body: |
+              {
+                {{if eq .app.status.operationState.phase "Running"}} "state": "pending"{{end}}
+                {{if eq .app.status.operationState.phase "Succeeded"}} "state": "success"{{end}}
+                {{if eq .app.status.operationState.phase "Error"}} "state": "error"{{end}}
+                {{if eq .app.status.operationState.phase "Failed"}} "state": "error"{{end}},
+                "description": "ArgoCD",
+                "target_url": "{{.context.argocdUrl}}/applications/{{.app.metadata.name}}",
+                "context": "continuous-delivery/{{.app.metadata.name}}"
+              }

argocd/argocd-notifications/secret.enc.yaml

@@ -6,13 +6,14 @@ metadata:
         kustomize.config.k8s.io/behavior: merge
 type: Opaque
 stringData:
-    notifiers.yaml: ENC[AES256_GCM,data:Ots4ChIx6PmbR4TVIfH/Doeh/U0UlvghABhZQhwA2kCI78puVch5znibz3CekJ0vzZqWlE35J0rtds0f+mPlQT8Ov4KI9ctu+wUAiAeSJHuihD0E3rmDjQR7GDrLv7TgySFdxUG3JgVzs/MheIuwGLtAsQSf+L9xpUToYT1WxJAdfENg8Sljl6d5H9vWfsTtA+PbB182LcP+3R5sEkOOKiSIEY0fxCd5J9DqQs/0sDrAnqf9eTOSeMTIYAfBjC7GUlA0nVFysqFZtzg38zr71AG5vLghYIjxQWZ3b/NPuRGYiZYtmWG3aeWV85qxPlN/8q8JHmW0gLkMLKa2TtpfD78D3Kp+IIhNFbr+ibV5X4i9emyVpnmBs/c=,iv:SOD/sZ/2MoS7IPTENrh3VQBpPz33DXU+8MOzGOqF2Do=,tag:1QQ7L+Vr191wxOE605gzXA==,type:str]
+    notifiers.yaml: ENC[AES256_GCM,data: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,iv:XnTPNOJijBpEaXCGJBNq/cYXGD/2Dq0cBhirJOIJXSM=,tag:8ru3Pxj0it2sv4pmR05skQ==,type:str]
+    'hashbang-argocd.2020-05-31.private-key.pem': ENC[AES256_GCM,data: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,iv:ehKHcVm9x9VCVcf5cKxdEPSntEFGP1JTo4IzF1n1HlM=,tag:WumaX5gUX7vtBNGLZH4G3g==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
-    lastmodified: '2020-06-13T13:33:34Z'
-    mac: ENC[AES256_GCM,data:ij4HjVpnB8r67jsnVilXIIqutFMhsUG3tzuypEO9/JjtnpTtGxWgRD/LjMDRe8s4dx7E6e+U9m9CEtk+0kF8R3v16uq+JDxh/GPBMNI+AfuV6GIQvphDOpdMAnsHNDpFK2/M023L6cqWjhT12KONifyF+ezUKqzzHEfCpmuIF4k=,iv:vla5VknPn92ZZy2RejUQdwS+xlY8AsAV9Rtk13GgGXs=,tag:tAuvs0pokRTD6qxq6UXbpg==,type:str]
+    lastmodified: '2020-06-13T15:24:11Z'
+    mac: ENC[AES256_GCM,data:yIBXJL1oHchXp2Pg+ssWd07h6FVQJDSAGrHL5h6eqPdrJnhfzvg8P9L3efCciJlCOZzSHT9YGt+Vw2HRyKr5dKxO9mLkw0pamjVKY4KuywUYkBX3Q5ZXdsN9AnkWOax2YublAgTXVRYFNRGp8VEc2vgbWT3eUwW0uvnk5wYj81Q=,iv:h/xOdl577X7kBkhL/4YcvESyEKqwzlakA1ezFIqoN6o=,tag:d1I59jqLyitzWOiRTaWr0A==,type:str]
     pgp:
     -   created_at: '2020-05-31T15:16:18Z'
         enc: |

argocd/projects/default.yaml

@@ -3,7 +3,7 @@ kind: AppProject
 metadata:
   name: default
   annotations:
-    recipients.argocd-notifications.argoproj.io: webhook:bitbot, grafana:argocd
+    recipients.argocd-notifications.argoproj.io: grafana:argocd, webhook:bitbot, webhook:github
 spec:
   sourceRepos:
   - '*'

github-token.rb

@@ -0,0 +1,19 @@
+require 'openssl'
+require 'jwt'  # https://rubygems.org/gems/jwt
+
+# Private key contents
+private_pem = File.read("hashbang-argocd.2020-05-31.private-key.pem")
+private_key = OpenSSL::PKey::RSA.new(private_pem)
+
+# Generate the JWT
+payload = {
+  # issued at time
+  iat: Time.now.to_i,
+  # JWT expiration time (10 minute maximum)
+  exp: Time.now.to_i + (10 * 60),
+  # GitHub App's identifier
+  iss: 67056
+}
+
+jwt = JWT.encode(payload, private_key, "RS256")
+puts jwt