Slots Cleanup - Adding new check

.github/workflows/pr-close-delete-env.yml

@@ -5,25 +5,48 @@ on:
     types: [closed]
   workflow_dispatch:
     inputs:
-      environment:
+      slotID:
         description: "Pull request number"
         required: true
         default: ""
+  workflow_call:
+    inputs:
+      slotIDs:
+        type: string
+        description: "Slot IDs"
+        required: true
 
 defaults:
   run:
     shell: pwsh
 
 env:
-  SLOT_NAME: pr-${{ github.event.number }}
-
+  SLOT_NAME: ${{ inputs.slotIDs || inputs.slotID || github.event.number }}
+  SLOT_PREFIX: pr-
 permissions:
   id-token: write
   contents: read
 
 jobs:
+  setting-up-slot-ids:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.set-matrix.outputs.matrix }}
+    steps:
+      - name: Converting slots into JSON Formatted Array
+        id: set-matrix
+        run: |
+          # TODO: Tech Debt - need to use it as JSON instead of space delimited - Github issue - https://github.com/SSWConsulting/SSW.Website/issues/1228
+          $slotIDs = '${{ env.SLOT_NAME }}' -split ' '
+          $slotIDsInJSonArray = ConvertTo-Json -Compress @($slotIDs)
+          echo "matrix=$slotIDsInJSonArray" >> $env:GITHUB_OUTPUT
+
   delete-slot:
     runs-on: ubuntu-latest
+    needs: setting-up-slot-ids
+    strategy:
+      matrix:
+        SLOT_NAME: ${{ fromJson(needs.setting-up-slot-ids.outputs.matrix) }}
 
     steps:
       - uses: actions/checkout@v3
@@ -32,7 +55,6 @@ jobs:
         uses: xom9ikk/dotenv@v2
         with:
           path: ./.github
-          load-mode: strict
 
       - name: Azure CLI - Login
         uses: azure/login@v1
@@ -41,7 +63,7 @@ jobs:
           tenant-id: ${{ secrets.AZURE_TENANT_ID  }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
 
-      - name: Cleanup ACRPull & KeyVault permission
+      - name: Cleanup ACR Pull & Key Vault permission
         run: |
           $acrId = az acr show `
             --resource-group ${{ env.AZURE_RESOURCE_GROUP }} `
@@ -54,7 +76,7 @@ jobs:
           $identityId = az webapp identity show `
             --resource-group ${{ env.AZURE_RESOURCE_GROUP }} `
             --name ${{ env.APP_SERVICE_NAME }} `
-            --slot ${{ env.SLOT_NAME }} `
+            --slot ${{ env.SLOT_PREFIX }}${{ matrix.SLOT_NAME }} `
             --query principalId `
             --output tsv
           Write-Host '✅ slot identity found'
@@ -92,5 +114,5 @@ jobs:
           az webapp deployment slot delete `
             --resource-group ${{ env.AZURE_RESOURCE_GROUP }} `
             --name ${{ env.APP_SERVICE_NAME }} `
-            --slot ${{ env.SLOT_NAME }} `
+            --slot ${{ env.SLOT_PREFIX }}${{ matrix.SLOT_NAME }} `
             --output none

.github/workflows/weekly-slots-cleanup.yml

@@ -0,0 +1,89 @@
+name: Weekly app service slot cleanup
+
+on:
+  schedule:
+    # Monday at 12 PM UTC - https://cron.help/#0_12_*_*_MON
+    - cron: "0 12 * * MON"
+  workflow_dispatch:
+
+env:
+  GH_TOKEN: ${{ github.token }}
+
+defaults:
+  run:
+    shell: pwsh
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  check-pr-slots:
+    runs-on: ubuntu-latest
+    outputs:
+      slotsExistThatRequireDeletion: ${{ steps.comparision.outputs.slotsExistThatRequireDeletion }}
+
+    steps:
+      - name: Checking out
+        uses: actions/checkout@v2
+
+      - name: Load .env file
+        uses: xom9ikk/dotenv@v2
+        with:
+          path: ./.github
+
+      - name: Azure CLI - Login
+        uses: azure/login@v1
+        with:
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
+      - name: Get list of deployed Slots
+        id: slotList
+        run: |
+          $slots = $(az webapp deployment slot list `
+            --name ${{ env.APP_SERVICE_NAME }} `
+            --resource-group ${{env.AZURE_RESOURCE_GROUP }} `
+            --query '[].name' `
+            --output tsv | `
+            sed 's/pr-//g')
+          echo "slots=$slots" >> $env:GITHUB_OUTPUT
+
+      - name: Get list of active PRs
+        id: prList
+        run: |
+          $active_prs=$(gh pr list --state open --json number | jq -r '.[].number')
+          echo "active_prs=$active_prs" >> $env:GITHUB_OUTPUT
+
+      - name: Compare PRs with Slots
+        id: comparision
+        run: |
+          # Comparing the number of Slots and PRs
+          $prList =  "${{ steps.PRList.outputs.active_prs }}" -split ' '
+          $slotList = "${{ steps.slotList.outputs.slots }}" -split ' '
+
+          $slotsExistThatRequireDeletion = $slotList | Where-Object { $_ -notin $prList }
+          $slotsNeedDeletion = $slotsExistThatRequireDeletion.Length -gt 0
+
+          if ( ! $slotsNeedDeletion ) {
+            echo "✅ - Number of slots are equal to number of active PRs - 🏃 Skipping next step"
+          }
+          else {
+            echo "❌ - Number of slots are not equal to number of active PRs"
+            Write-Host "⚡- These slots need to be deleted : $slotsExistThatRequireDeletion"
+          }
+          echo "slotsExistThatRequireDeletion=$slotsExistThatRequireDeletion" >> $env:GITHUB_OUTPUT
+
+  invokeDeleteSlot:
+    name: Invoking PR Close/Delete
+    needs:
+      - check-pr-slots #Adding second check to avoid running this flow
+    if: needs.check-pr-slots.outputs.slotsExistThatRequireDeletion != ''
+    uses: ./.github/workflows/pr-close-delete-env.yml
+    with:
+      slotIDs: ${{ needs.check-pr-slots.outputs.slotsExistThatRequireDeletion }}
+    permissions:
+      id-token: write
+      contents: read
+    secrets: inherit