ci: automatic deployments of standalone nodes

.github/workflows/deploy-preview.yml

@@ -74,3 +74,43 @@ jobs:
 
       - name: bounce grpcui
         run: kubectl rollout restart deployment grpcui-preview
+
+  # Deploys a standalone instance of pd,
+  # specifically to exercise the auto-https direct-serve logic.
+  standalone:
+    name: deploy standalone pd node, preview
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    needs:
+      - deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+
+      - name: configure ssh identity
+        run: |-
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo "$SSH_PRIVKEY" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          echo "$SSH_HOSTKEYS" > ~/.ssh/known_hosts
+        env:
+          # In order to generate the hostkey material:
+          #
+          #   echo > hostkeys.txt
+          #   ssh-keyscan -H solo-pd.testnet-preview.plinfra.net | tee -a hostkeys.txt
+          #   ssh-keyscan -H solo-pd.testnet.plinfra.net | tee -a hostkeys.txt
+          #
+          # Then paste the contents of that file into `secrets.CI_RUNNER_SSH_HOSTKEYS`,
+          # so it's consumable via this step.
+          SSH_PRIVKEY: ${{ secrets.CI_RUNNER_SSH_PRIVKEY }}
+          SSH_HOSTKEYS: ${{ secrets.CI_RUNNER_SSH_HOSTKEYS }}
+
+      - name: deploy
+        shell: bash
+        run: |-
+          export PENUMBRA_VERSION="main"
+          export PENUMBRA_ENVIRONMENT="penumbra-preview"
+          ./deployments/scripts/redeploy-ci-fullnode-via-runner

.github/workflows/deploy-testnet.yml

@@ -75,3 +75,35 @@ jobs:
           # Wait for rollout to complete. Will block until pods are marked Ready.
           kubectl rollout status deployment \
               -l "app.kubernetes.io/instance=galileo"
+
+  # Deploys a standalone instance of pd,
+  # specifically to exercise the auto-https direct-serve logic.
+  standalone:
+    name: deploy standalone pd node, preview
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    needs:
+      - deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+
+      - name: configure ssh identity
+        run: |-
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          echo "$SSH_PRIVKEY" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          echo "$SSH_HOSTKEYS" > ~/.ssh/known_hosts
+        env:
+          SSH_PRIVKEY: ${{ secrets.CI_RUNNER_SSH_PRIVKEY }}
+          SSH_HOSTKEYS: ${{ secrets.CI_RUNNER_SSH_HOSTKEYS }}
+
+      - name: deploy
+        shell: bash
+        run: |-
+          export PENUMBRA_VERSION='${{ github.event.inputs.image_tag || github.ref_name }}'
+          export PENUMBRA_ENVIRONMENT="penumbra-testnet"
+          ./deployments/scripts/redeploy-ci-fullnode-via-runner