Add Rollback for Github Action

.github/workflows/cicd.yml

@@ -20,7 +20,7 @@ jobs:
     uses: ./.github/workflows/terraform-deploy_reusable.yml
     with:
       ENVIRONMENT: stg
-      TERRAFORM_DIRECTORY: operations/environments/staging
+      TERRAFORM_DIRECTORY: operations/environments/stg
     secrets:
       AZURE_CLIENT_ID: ${{ secrets.AZURE_CDC_CLIENT_ID }}
       AZURE_TENANT_ID: ${{ secrets.AZURE_CDC_TENANT_ID }}

.github/workflows/db_rollback.yml

@@ -0,0 +1,74 @@
+name: Rollback DB
+
+on:
+  workflow_dispatch:
+    inputs:
+      rollbackCount:
+        description: 'Number of migrations to rollback'
+        required: true
+        default: # of rollback you require in the file input
+      rollbackFile:
+        description: "File with migrations you want to rollback"
+        required: true
+        default: Filepath to yml
+      environment:
+        type: choice
+        description: "Azure environment to rollback on"
+        options:
+          - dev
+          - internal
+          - stg
+          - prd
+        required: true
+
+
+jobs:
+  database-rollback:
+    name: Database Rollback
+    environment:
+      name: ${{ github.event.inputs.environment }}
+    runs-on: ubuntu-latest
+    env:
+      ARM_CLIENT_ID: ${{ github.event.inputs.environment == 'internal' && secrets.AZURE_CLIENT_ID || secrets.AZURE_CDC_CLIENT_ID }}
+      ARM_TENANT_ID: ${{ github.event.inputs.environment == 'internal' && secrets.AZURE_TENANT_ID || secrets.AZURE_CDC_TENANT_ID}}
+      ARM_SUBSCRIPTION_ID: ${{ github.event.inputs.environment == 'internal' && secrets.AZURE_SUBSCRIPTION_ID || secrets.AZURE_CDC_DMZ_C1_SUBSCRIPTION_ID}}
+      ARM_USE_OIDC: true
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+
+      - uses: actions/checkout@v4
+
+      - name: Terraform Init
+        id: init
+        run: |
+          cd ./operations/environments/${{ github.event.inputs.environment }}
+          terraform init
+
+      - name: Login via Azure CLI
+        uses: azure/login@v1
+        with:
+          client-id: ${{ github.event.inputs.environment == 'internal' && secrets.AZURE_CLIENT_ID || secrets.AZURE_CDC_CLIENT_ID }}
+          tenant-id: ${{ github.event.inputs.environment == 'internal' && secrets.AZURE_TENANT_ID || secrets.AZURE_CDC_TENANT_ID}}
+          subscription-id: ${{ github.event.inputs.environment == 'internal' && secrets.AZURE_SUBSCRIPTION_ID || secrets.AZURE_CDC_DMZ_C1_SUBSCRIPTION_ID}}
+
+      - name: Extract database hostname and password into GitHub Env
+        run: |
+          cd ./operations/environments/${{ github.event.inputs.environment }}
+          DATABASE_HOSTNAME=$(terraform output -raw database_hostname)
+          DATABASE_PASSWORD=$(az account get-access-token --resource-type oss-rdbms --query "[accessToken]" -o tsv)
+          echo "::add-mask::$DATABASE_HOSTNAME"
+          echo "::add-mask::$DATABASE_PASSWORD"
+          echo "DATABASE_HOSTNAME=$DATABASE_HOSTNAME" >> "$GITHUB_ENV"
+          echo "DATABASE_PASSWORD=$DATABASE_PASSWORD" >> "$GITHUB_ENV"
+
+      - name: Run Db Rollback
+        uses: liquibase-github-actions/[email protected]
+        with:
+          changelogFile: ${{ github.event.inputs.rollbackFile }}
+          count: ${{ github.event.inputs.rollbackCount }}
+          url: "jdbc:postgresql://${{ env.DATABASE_HOSTNAME }}:5432/postgres"
+          username: cdcti-github
+          password: ${{ env.DATABASE_PASSWORD }}

.github/workflows/prod-deploy.yml

@@ -17,7 +17,7 @@ jobs:
     uses: ./.github/workflows/terraform-deploy_reusable.yml
     with:
       ENVIRONMENT: prd
-      TERRAFORM_DIRECTORY: operations/environments/prod
+      TERRAFORM_DIRECTORY: operations/environments/prd
     secrets:
       AZURE_CLIENT_ID: ${{ secrets.AZURE_CDC_CLIENT_ID }}
       AZURE_TENANT_ID: ${{ secrets.AZURE_CDC_TENANT_ID }}

.secrets.baseline

@@ -164,7 +164,7 @@
         "filename": "docker-compose.postgres.yml",
         "hashed_secret": "0f7866a6cab6f2793ea9f68e92935e4d726d58b5",
         "is_verified": false,
-        "line_number": 12,
+        "line_number": 15,
         "is_secret": false
       }
     ],
@@ -269,5 +269,5 @@
       }
     ]
   },
-  "generated_at": "2024-02-09T15:36:39Z"
+  "generated_at": "2024-02-09T17:58:04Z"
 }

docker-compose.postgres.yml

@@ -1,6 +1,9 @@
 # Run the following to migrate...
 # liquibase update --changelog-file ./etor/databaseMigrations/root.yml --url jdbc:postgresql://localhost:5433/intermediary --username intermediary --password 'changeIT!' --label-filter '!azure'
 
+# Run the following to rollback...
+# liquibase rollback-count --changelog-file ./etor/databaseMigrations/root.yml --url jdbc:postgresql://localhost:5433/intermediary --username intermediary --password 'changeIT!' --count 2
+
 version: "3.7"
 
 services:

etor/databaseMigrations/azure.yml

@@ -9,3 +9,4 @@ databaseChangeLog:
       changes:
         - sql:
             sql: REASSIGN OWNED BY CURRENT_USER TO azure_pg_admin
+      rollback: empty

etor/databaseMigrations/metadata.yml

@@ -8,6 +8,9 @@ databaseChangeLog:
       changes:
        - sql:
            sql: CREATE TYPE message_status AS ENUM ('PENDING', 'DELIVERED', 'FAILED')
+      rollback:
+        - sql:
+            sql: DROP TYPE message_status
 
   - changeSet:
       id: 2

operations/environments/staging/outputs.tf → operations/environments/stg/outputs.tf

@@ -8,4 +8,4 @@ output "publish_app" {
 
 output "database_hostname" {
   value = module.template.database_hostname
-}
+}