zebra/.github/workflows
Gustavo Valverde b366d6e7bb
ci(ssh): connect using `ssh-compute` action by Google (#5330)
* refactor(ssh): connect using `ssh-compute` action by Google

Previous behavior:
From time to time SSH connections to deployed VMs fails with the following
error: `kex_exchange_identification: Connection closed by remote host`

This was still happening after implementing https://github.com/ZcashFoundation/zebra/pull/5292

Excpected behavior:
Ensure we're not creating SSH key pairs on the fly to improve our connections
guarantees

Solution:
- Enable the Cloud Identity-Aware Proxy API in GCP
- Create a firewall rule to enable connections from IAP
- Grant the required IAM permissions to enable IAP TCP forwarding
- Generate an SSH keys pair and set a private key as an input param
- Set the GitHub Action SA to have authorized ssh connection to the VMs
- Implement the `google-github-actions/ssh-compute` action to connect

* fix(ssh): id `compute-ssh` cannot be used more than once within the same scope

* fix(ci): try to enclose commands to override parsing issues

* tmp: remove ssh_args

* fix(action): secrets must be inherited to be used

* tmp: validate command enclosing fixes executin

* fix(ssh): ssh_args are not implemented correctly

* fix(ssh): login with the root user

* fix(privelege): uso sudo with docker commands

* tmp: add sudo

* fix(ssh): use sudo for all docker commands

* fix(ssh): add missing `sudo` commands

* fix(ssh): get sync height from ssh stdout

* fix(height): get the height correctly
2022-10-05 09:02:40 +00:00
..
build-crates-individually.patch.yml ci(test): run build and test jobs on cargo and clippy config changes (#4941) 2022-08-26 18:06:32 +00:00
build-crates-individually.yml build(deps): bump prost, tonic, tonic-build and console-subscriber (#5009) 2022-09-06 14:49:18 +00:00
build-docker-image.yml Use the best cache for docker images (#5282) 2022-09-28 13:14:29 +00:00
continous-delivery.yml build(deps): bump actions/github-script from 6.3.0 to 6.3.1 (#5317) 2022-10-03 17:50:10 +00:00
continous-integration-docker.patch-always.yml feat(verify): Concurrently verify proof and signature batches (#4776) 2022-07-18 08:43:29 +10:00
continous-integration-docker.patch.yml ci(test): run build and test jobs on cargo and clippy config changes (#4941) 2022-08-26 18:06:32 +00:00
continous-integration-docker.yml ci(ssh): connect using `ssh-compute` action by Google (#5330) 2022-10-05 09:02:40 +00:00
continous-integration-os.patch.yml fix(ci): Build zebrad with Rust 1.63 to avoid Zcash parameter download hangs (#5251) 2022-09-26 12:37:23 +00:00
continous-integration-os.yml fix(ci): Build zebrad with Rust 1.63 to avoid Zcash parameter download hangs (#5251) 2022-09-26 12:37:23 +00:00
coverage.patch.yml ci(test): run build and test jobs on cargo and clippy config changes (#4941) 2022-08-26 18:06:32 +00:00
coverage.yml fix(ci): Build zebrad with Rust 1.63 to avoid Zcash parameter download hangs (#5251) 2022-09-26 12:37:23 +00:00
delete-gcp-resources.yml fix(ci): Delete Google Cloud test instances after 3 days (#5192) 2022-09-21 23:16:38 +00:00
deploy-gcp-tests.yml ci(ssh): connect using `ssh-compute` action by Google (#5330) 2022-10-05 09:02:40 +00:00
docs.yml build(deps): bump w9jds/firebase-action from 11.5.0 to 11.9.0 (#5196) 2022-09-20 04:40:55 +00:00
lint.patch.yml Add a "Rust doc" patch job (#4654) 2022-06-21 09:30:48 +10:00
lint.yml ci(lint): do not fail linter on `push` events (#5331) 2022-10-04 19:00:44 +00:00
release-binaries.yml feat(release): create Docker hub binaries when tagging (#5138) 2022-09-16 04:14:06 +00:00
release-drafter.yml change(release): Automatically split CHANGELOG entries into categories (#5203) 2022-09-27 12:41:55 +00:00
zcash-lightwalletd.yml build(deps): bump google-github-actions/auth from 0.8.0 to 0.8.1 (#5029) 2022-09-01 23:48:28 +00:00
zcash-params.yml ci(concurrency)!: run a single CI workflow as required (#4981) 2022-08-30 00:11:05 +00:00
zcashd-manual-deploy.yml build(deps): bump google-github-actions/auth from 0.8.0 to 0.8.1 (#5029) 2022-09-01 23:48:28 +00:00