Skip to content

Commit 348e3c1

Browse files
shivakunvshivakunv
committed
unused aws instace and vpcs cleanup
Signed-off-by: shiva kumar <[email protected]>
1 parent f478ba5 commit 348e3c1

File tree

2 files changed

+196
-0
lines changed

2 files changed

+196
-0
lines changed

‎.github/workflows/awscleanup.yaml

+79
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
name: Daily AWS Cleanup Bot
2+
3+
# on:
4+
# schedule:
5+
# - cron: '0 8 * * *'
6+
7+
on:
8+
pull_request:
9+
types:
10+
- opened
11+
- synchronize
12+
branches:
13+
- awsresourcecleanup
14+
push:
15+
branches:
16+
- awsresourcecleanup
17+
18+
jobs:
19+
cleanup:
20+
runs-on: linux-amd64-cpu4
21+
22+
steps:
23+
- name: Checkout repository
24+
uses: actions/checkout@v4
25+
26+
- name: Set up AWS CLI
27+
uses: aws-actions/configure-aws-credentials@v4
28+
with:
29+
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
30+
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
31+
aws-region: us-west-1
32+
33+
- name: Identify resources running longer than 4 hours
34+
id: identify-resources
35+
run: |
36+
# Find EC2 instances with names ci* running longer than 4 hours
37+
running_instances=$(aws ec2 describe-instances \
38+
--filters Name=instance-state-name,Values=running Name=tag:Name,Values=ci* \
39+
--query "Reservations[*].Instances[?LaunchTime<=\`$(date -u -d '4 hours ago' +%Y-%m-%dT%H:%M:%SZ)\`].InstanceId" \
40+
--output text | tr -d '\r' | tr '\n' ' ')
41+
echo "Found instances: $running_instances"
42+
echo "instances=$running_instances" >> $GITHUB_ENV
43+
44+
# Find vpcs with names ci*
45+
vpcs=$(aws ec2 describe-vpcs \
46+
--filters "Name=tag:Name,Values=ci*" \
47+
--query "Vpcs[].VpcId" \
48+
--output text | tr -d '\r' | tr '\n' ' ')
49+
echo "Found VPCs: $vpcs"
50+
echo "vpcs=$vpcs" >> $GITHUB_ENV
51+
52+
- name: Terminate EC2 Instances
53+
if: env.instances != ''
54+
run: |
55+
for instance in $instances; do
56+
echo "Terminating instance: $instance"
57+
aws ec2 terminate-instances --instance-ids "$instance"
58+
done
59+
60+
- name: Clean up VPCs
61+
if: env.vpcs != ''
62+
run: |
63+
for vpc in $vpcs; do
64+
# Check for EC2 instances attached to VPC
65+
instances_in_vpc=$(aws ec2 describe-instances \
66+
--filters "Name=vpc-id,Values=$vpc" \
67+
--query "Reservations[*].Instances[*].InstanceId" \
68+
--output text)
69+
# if no instance attached delete it
70+
if [ -z "$instances_in_vpc" ]; then
71+
scripts/awsvpcscleanup.sh $vpc
72+
else
73+
echo "EC2 instances are still attached to VPC: $vpc. Skipping deletion."
74+
fi
75+
done
76+
77+
- name: Post cleanup
78+
run: |
79+
echo "Cleanup completed."

‎scripts/awsvpcscleanup.sh

+117
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,117 @@
1+
#!/bin/bash
2+
3+
if [[ $# -ne 1 ]]; then
4+
echo " vpcid required for deletion"
5+
exit 1
6+
fi
7+
export vpc=$1
8+
9+
echo "Start Deleting VPC: $vpc resource"
10+
11+
# Delete Internet Gateway
12+
internet_gateways=$(aws ec2 describe-internet-gateways \
13+
--filters Name=attachment.vpc-id,Values=$vpc \
14+
--query "InternetGateways[].InternetGatewayId" \
15+
--output text | tr -d '\r' | tr '\n' ' ')
16+
17+
for igw in $internet_gateways; do
18+
aws ec2 detach-internet-gateway --internet-gateway-id "$igw" --vpc-id "$vpc"
19+
aws ec2 delete-internet-gateway --internet-gateway-id "$igw"
20+
done
21+
22+
# Delete NAT Gateways
23+
nat_gateways=$(aws ec2 describe-nat-gateways \
24+
--filter Name=vpc-id,Values=$vpc \
25+
--query "NatGateways[].NatGatewayId" \
26+
--output text | tr -d '\r' | tr '\n' ' ')
27+
for ngw in $nat_gateways; do
28+
aws ec2 delete-nat-gateway --nat-gateway-id "$ngw"
29+
done
30+
31+
# Delete Elastic IPs
32+
eips=$(aws ec2 describe-addresses \
33+
--filters Name=domain,Values=vpc \
34+
--query "Addresses[].[AllocationId,Association.VpcId]" \
35+
--output text | grep "$vpc" | awk '{print $1}' | tr -d '\r' | tr '\n' ' ')
36+
for eip in $eips; do
37+
aws ec2 release-address --allocation-id "$eip"
38+
done
39+
40+
# Detach and Delete Security Groups
41+
security_groups=$(aws ec2 describe-security-groups \
42+
--filters Name=vpc-id,Values=$vpc \
43+
--query "SecurityGroups[?GroupName!='default'].GroupId" \
44+
--output text | tr -d '\r' | tr '\n' ' ')
45+
for sg in $security_groups; do
46+
enis=$(aws ec2 describe-network-interfaces \
47+
--filters Name=group-id,Values=$sg \
48+
--query "NetworkInterfaces[].NetworkInterfaceId" \
49+
--output text | tr -d '\r' | tr '\n' ' ')
50+
for eni in $enis; do
51+
aws ec2 modify-network-interface-attribute \
52+
--network-interface-id "$eni" \
53+
--groups "$(aws ec2 describe-security-groups \
54+
--query 'SecurityGroups[?GroupName==`default`].GroupId' \
55+
--output text)"
56+
done
57+
aws ec2 delete-security-group --group-id "$sg"
58+
done
59+
60+
# Delete Route Tables , do not delete Main route table
61+
route_tables=$(aws ec2 describe-route-tables \
62+
--filters Name=vpc-id,Values=$vpc \
63+
--query "RouteTables[?Associations[?Main==false]].RouteTableId" \
64+
--output text | tr -d '\r' | tr '\n' ' ')
65+
for rt in $route_tables; do
66+
associations=$(aws ec2 describe-route-tables \
67+
--route-table-ids "$rt" \
68+
--query "RouteTables[0].Associations[].RouteTableAssociationId" \
69+
--output text | tr -d '\r' | tr '\n' ' ')
70+
71+
for assoc in $associations; do
72+
aws ec2 disassociate-route-table --association-id "$assoc"
73+
done
74+
aws ec2 delete-route-table --route-table-id "$rt"
75+
done
76+
77+
# Delete Subnets
78+
subnets=$(aws ec2 describe-subnets \
79+
--filters Name=vpc-id,Values=$vpc \
80+
--query "Subnets[].SubnetId" \
81+
--output text | tr -d '\r' | tr '\n' ' ')
82+
83+
for subnet in $subnets; do
84+
aws ec2 delete-subnet --subnet-id "$subnet"
85+
done
86+
87+
# Delete Network Interfaces
88+
eni_ids=$(aws ec2 describe-network-interfaces \
89+
--filters Name=vpc-id,Values=$vpc \
90+
--query "NetworkInterfaces[].NetworkInterfaceId" \
91+
--output text | tr -d '\r' | tr '\n' ' ')
92+
for eni in $eni_ids; do
93+
aws ec2 delete-network-interface --network-interface-id "$eni"
94+
done
95+
96+
echo "All resource Deleted for VPC: $vpc , now delete vpc"
97+
98+
attempts=0
99+
# try 3 times with 5 minutes interval
100+
while [ $attempts -lt 3 ]; do
101+
echo "Attempting to delete VPC: $vpc (Attempt $((attempts+1)))"
102+
if aws ec2 delete-vpc --vpc-id $vpc; then
103+
echo "Successfully deleted VPC: $vpc"
104+
break
105+
else
106+
attempts=$((attempts + 1))
107+
if [ $attempts -lt 3 ]; then
108+
echo "Failed to delete VPC: $vpc. Retrying in 30 seconds..."
109+
sleep 30
110+
fi
111+
fi
112+
done
113+
114+
if [ $attempts -eq 3 ]; then
115+
echo "Failed to delete VPC: $vpc after 3 attempts. Skipping."
116+
exit 1
117+
fi

0 commit comments

Comments
 (0)