workflow - runner whitelist and sleep

bescka · Aug 1, 2024 · 81ac519 · 81ac519
1 parent 82975fd
commit 81ac519
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/deploy_on_push.yml b/.github/workflows/deploy_on_push.yml
@@ -29,6 +29,9 @@ jobs:
           --port 22 \
           --cidr ${{ steps.ip.outputs.ipv4 }}/32    
 
+    - name: Wait for security group update to propagate
+      run: sleep 30
+
     - name: Checkout repository
       uses: actions/checkout@v4
 
@@ -111,3 +114,11 @@ jobs:
         echo "Cleaning up SSH keys..."
         rm -rf ~/.ssh/id_ed25519
         echo "SSH keys cleaned up."
+
+    - name: revoke runner ip address
+      run: |
+        aws ec2 revoke-security-group-ingress \
+          --group-id $AWS_INSTANCE_SG_ID \
+          --protocol tcp \
+          --port 22 \
+          --cidr ${{ steps.ip.outputs.ipv4 }}/32