From 3d235a8ac4bad0586b79a5b8116d8f3cf442231f Mon Sep 17 00:00:00 2001 From: Luke Kysow <1034429+lkysow@users.noreply.github.com> Date: Tue, 20 Jul 2021 15:23:24 -0700 Subject: [PATCH] Bump eks cleanup token duration to 3h from 1h (#1048) * Bump eks cleanup token duration to 3h from 1h * Add slack notifications for failed cleanups --- .circleci/config.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 95678f5e55..098e8c3dbd 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -647,6 +647,10 @@ jobs: az group delete -n $group --yes done + - slack/status: + fail_only: true + failure_message: "AKS cleanup failed" + cleanup-gcp-resources: docker: - image: docker.mirror.hashicorp.services/hashicorpdev/consul-helm-test:0.10.0 @@ -661,6 +665,10 @@ jobs: gcloud container clusters delete $cluster --zone us-central1-a --project ${CLOUDSDK_CORE_PROJECT} --quiet done + - slack/status: + fail_only: true + failure_message: "GKE cleanup failed" + cleanup-eks-resources: docker: - image: docker.mirror.hashicorp.services/hashicorpdev/consul-helm-test:0.9.0 @@ -670,7 +678,7 @@ jobs: name: cleanup eks resources command: | # Assume the role and set environment variables. - aws sts assume-role --role-arn "$AWS_ROLE_ARN" --role-session-name "consul-helm-$CIRCLE_BUILD_NUM" > assume-role.json + aws sts assume-role --role-arn "$AWS_ROLE_ARN" --role-session-name "consul-helm-$CIRCLE_BUILD_NUM" --duration-seconds 10800 > assume-role.json export AWS_ACCESS_KEY_ID="$(jq -r .Credentials.AccessKeyId assume-role.json)" export AWS_SECRET_ACCESS_KEY="$(jq -r .Credentials.SecretAccessKey assume-role.json)" export AWS_SESSION_TOKEN="$(jq -r .Credentials.SessionToken assume-role.json)" @@ -678,6 +686,10 @@ jobs: cd hack/aws-acceptance-test-cleanup go run ./... -auto-approve + - slack/status: + fail_only: true + failure_message: "EKS cleanup failed" + workflows: version: 2 test: