actions-openshift

Consolidated repo for bcgov-specific openshift actions. Please feel free to contribute!

Workflows and Actions

1. PR Cleanup (Composite Action)

Cleans up Helm releases, labeled resources, and PVCs in a target OpenShift namespace on pull request close or merge.

• See cleanup-pr/README.md for detailed inputs and usage.

2. Route TLS (Composite Action)

GitHub Action that applies an OpenShift Route with a custom TLS certificate (openssl checks and archival backups).

• See route-tls/README.md for secrets, inputs, and usage.

3. oc-runner (Composite Action)

Login and run oc commands (and optional cronjobs) on OpenShift.

• See oc-runner/README.md for inputs and usage.

- uses: bcgov/actions-openshift/oc-runner@vX.Y.Z
  with:
    oc_namespace: ${{ vars.oc_namespace }}
    oc_server: ${{ vars.oc_server }}
    oc_token: ${{ secrets.OC_TOKEN }}
    commands: oc whoami

4. crunchy (Composite Action)

Deploy Crunchy Postgres on OpenShift (PR pipelines and cleanup).

• See crunchy/README.md.

- uses: bcgov/actions-openshift/crunchy@vX.Y.Z

5. deployer (Composite Action)

Deploy to OpenShift using templates. Verification or penetration tests.

• See deployer/README.md.

- uses: bcgov/actions-openshift/deployer@vX.Y.Z

6. SchemaSpy (.github/workflows/.schema-spy.yml)

A reusable workflow that spins up a Postgres/PostGIS service, runs migrations using Flyway, generates interactive database documentation with SchemaSpy, and automatically publishes the results to GitHub Pages.

Example Usage:

jobs:
  document-db:
    uses: bcgov/actions-openshift/.github/workflows/.schema-spy.yml@vX.Y.Z
    permissions:
      contents: write
    with:
      db_name: app_database
      deploy_dir: docs/schema

Operational Scripts

Standalone CLI utilities that a person runs with their own login (certificate management, deployment renames, Postgres transfers and comparisons, rights reports) now live in bcgov/devops-scripts:

• Certificate management: cert/
• OpenShift & database operations, including the Postgres migration walkthrough: oc/