mirror of
https://github.com/coollabsio/coolify.git
synced 2026-03-11 08:55:47 +00:00
576f38da1c
Implement end-to-end GitHub Actions runner support with provisioning, tracking, and cleanup flows. - handle `workflow_job` webhooks to provision and tear down runners - add runner config/execution models, enum states, and relationships - create jobs for provisioning, cleanup, and stale-runner reaping - schedule periodic stale runner cleanup in the console kernel - add Livewire server UI to manage runner configuration and executions - store GitHub App runner permissions and runner group metadata - add migrations for runner permissions, configs, executions, and group id - update GitHub permissions URL generation for organization app settings - include feature/unit tests for runner behavior and permission paths
58 lines
2 KiB
PHP
58 lines
2 KiB
PHP
<?php
|
|
|
|
namespace App\Jobs;
|
|
|
|
use App\Models\GithubApp;
|
|
use Illuminate\Bus\Queueable;
|
|
use Illuminate\Contracts\Queue\ShouldBeEncrypted;
|
|
use Illuminate\Contracts\Queue\ShouldQueue;
|
|
use Illuminate\Foundation\Bus\Dispatchable;
|
|
use Illuminate\Queue\InteractsWithQueue;
|
|
use Illuminate\Queue\SerializesModels;
|
|
use Illuminate\Support\Facades\Http;
|
|
|
|
class GithubAppPermissionJob implements ShouldBeEncrypted, ShouldQueue
|
|
{
|
|
use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
|
|
|
|
public $tries = 4;
|
|
|
|
public function backoff(): int
|
|
{
|
|
return isDev() ? 1 : 3;
|
|
}
|
|
|
|
public function __construct(public GithubApp $github_app) {}
|
|
|
|
public function handle()
|
|
{
|
|
try {
|
|
$github_access_token = generateGithubJwt($this->github_app);
|
|
|
|
$response = Http::withHeaders([
|
|
'Authorization' => "Bearer $github_access_token",
|
|
'Accept' => 'application/vnd.github+json',
|
|
])->get("{$this->github_app->api_url}/app");
|
|
|
|
if (! $response->successful()) {
|
|
throw new \RuntimeException('Failed to fetch GitHub app permissions: '.$response->body());
|
|
}
|
|
|
|
$response = $response->json();
|
|
$permissions = data_get($response, 'permissions');
|
|
|
|
$this->github_app->contents = data_get($permissions, 'contents');
|
|
$this->github_app->metadata = data_get($permissions, 'metadata');
|
|
$this->github_app->pull_requests = data_get($permissions, 'pull_requests');
|
|
$this->github_app->administration = data_get($permissions, 'administration');
|
|
$this->github_app->organization_self_hosted_runners = data_get($permissions, 'organization_self_hosted_runners');
|
|
|
|
$this->github_app->save();
|
|
$this->github_app->makeVisible('client_secret')->makeVisible('webhook_secret');
|
|
|
|
} catch (\Throwable $e) {
|
|
send_internal_notification('GithubAppPermissionJob failed with: '.$e->getMessage());
|
|
throw $e;
|
|
}
|
|
}
|
|
}
|