Implement Keystone environment deployments

2026-05-13 16:11:23 +01:00
parent 65d3142d03
commit aa680b25fd
175 changed files with 10258 additions and 740 deletions
--- a/app/Actions/Environments/ResolveEnvironmentCommit.php
+++ b/app/Actions/Environments/ResolveEnvironmentCommit.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Actions\Environments;
+
+use App\Models\Environment;
+use Illuminate\Support\Facades\File;
+use Illuminate\Support\Facades\Process;
+use RuntimeException;
+
+class ResolveEnvironmentCommit
+{
+    public function execute(Environment $environment): string
+    {
+        $environment->loadMissing('application');
+
+        $application = $environment->application;
+
+        if (! $application->deploy_key_private) {
+            throw new RuntimeException('Application does not have a deploy key.');
+        }
+
+        $directory = storage_path('app/private/operations/resolve-'.$environment->id.'-'.str()->random(8));
+        $keyPath = $directory.'/deploy_key';
+
+        File::ensureDirectoryExists($directory, 0700);
+        File::put($keyPath, $application->deploy_key_private);
+        File::chmod($keyPath, 0600);
+
+        try {
+            $result = Process::path($directory)
+                ->env([
+                    'GIT_SSH_COMMAND' => 'ssh -i '.$keyPath.' -o IdentitiesOnly=yes -o StrictHostKeyChecking=no',
+                ])
+                ->run([
+                    'git',
+                    'ls-remote',
+                    $application->repository_url,
+                    'refs/heads/'.$environment->branch,
+                ]);
+
+            if ($result->failed()) {
+                throw new RuntimeException(trim($result->errorOutput()) ?: 'Unable to resolve environment commit.');
+            }
+
+            return $this->commitFromOutput($result->output(), $environment->branch);
+        } finally {
+            rescue(fn () => File::deleteDirectory($directory), report: false);
+        }
+    }
+
+    private function commitFromOutput(string $output, string $branch): string
+    {
+        $commit = str($output)->before("\t")->trim()->value();
+
+        if (preg_match('/^[a-f0-9]{40}$/i', $commit) !== 1) {
+            throw new RuntimeException("Unable to resolve commit for branch {$branch}.");
+        }
+
+        return strtolower($commit);
+    }
+}