renuo-cli 4.30.0 → 5.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e403749b46f9d289d45f218209831c68a8c624840f4df20e1315127d4ba2bbac
-  data.tar.gz: 85cd1b725f516ab96fa5da67355c9268d8397eeb3b7db4017263b3583558f4d8
+  metadata.gz: 8462a65e3075cb5e8a3f7c01a254ac225e81ce774ab53d16a1915883e6d4969a
+  data.tar.gz: 4985892734d7db16156a8139c325779c4d60f8763de9b7d690cac7b91503ce77
 SHA512:
-  metadata.gz: 193344bdebb9952145a2c8e948e04b8ad85f8d04d0d642c8c0f00cd1173639454c7306a7c80665de5bcc68c7e78a5de74f4406012de7e4d61cda5d0a9a173211
-  data.tar.gz: c6bd00ecd6bedcde704ab346dcfa3cdd0affae38a0413c457636c575c561b12432a9a06c1422de2673b0ff0a40bb8c7e03f66626321d7c756eb0e8ca5927ae0a
+  metadata.gz: 1dfd2825a7348c1ca48eb9a337aa5bb2d2c217c36e2653914fec2a3db8cc8c0a034aebe486142809895f75e7c0442fd41e78224173b4bd82460e66550bdc798b
+  data.tar.gz: eb01997fbb165adaaf5a904306b379ae1875098d16e65d5b3b62bb1396527c71680aa69ddc604cfcf43270e12ce83f46786c7e638e8429fb3026ea6d80f21cd1

data/lib/renuo/cli/commands/configure_semaphore.rb

@@ -33,6 +33,7 @@ class Renuo::Cli::Commands::ConfigureSemaphore
 
     create_semaphore_notification
     create_semaphore_secrets
+    create_nctl_service_account_secret
     create_semaphore_deployment_targets
   end
 
@@ -52,6 +53,42 @@ class Renuo::Cli::Commands::ConfigureSemaphore
     system("sem create secret -p #{project_name} #{project_name}")
   end
 
+  DEPLOIO_ORGANIZATION = "renuo"
+
+  def deploio_project
+    "#{DEPLOIO_ORGANIZATION}-#{project_name}"
+  end
+
+  def service_account_name
+    "#{project_name}-semaphore"
+  end
+
+  def nctl_secret_name
+    "nctl-#{project_name}"
+  end
+
+  def create_nctl_service_account_secret
+    if system(nctl_create_service_account_command)
+      system(sem_create_nctl_secret_command)
+    else
+      warn("Could not create the API service account. Does the Deploio project #{deploio_project} exist? " \
+           "Create it with `renuo create-deploio-app`, then run:\n\n  " \
+           "#{nctl_create_service_account_command}\n  #{sem_create_nctl_secret_command}")
+    end
+  end
+
+  def nctl_create_service_account_command
+    "nctl create asa #{service_account_name} --project #{deploio_project} --wait"
+  end
+
+  def sem_create_nctl_secret_command
+    get_asa = "nctl get asa #{service_account_name} --project #{deploio_project}"
+    "sem create secret #{nctl_secret_name} -p #{project_name} " \
+      "-e NCTL_API_CLIENT_ID=\"$(#{get_asa} --print-client-id)\" " \
+      "-e NCTL_API_CLIENT_SECRET=\"$(#{get_asa} --print-client-secret)\" " \
+      "-e NCTL_ORGANIZATION=#{DEPLOIO_ORGANIZATION}"
+  end
+
   def create_semaphore_deployment_targets
     %w[main develop].each do |branch|
       system("sem create dt #{branch} -p #{project_name} --object-rule branch,exact,#{branch}")

data/lib/renuo/cli/commands/create_deploio_app.rb

@@ -175,7 +175,7 @@ class Renuo::Cli::Commands::CreateDeploioApp # rubocop:disable Metrics/ClassLeng
         --basic-auth=#{environment == "develop"} \\
         --build-env=SECRET_KEY_BASE="$(rails secret)" \\
         --language=ruby \\
-        --buildpack-stack=heroku \\
+        --buildpack-type=heroku \\
         --size=mini \\
         --replicas=1
     OUTPUT

data/lib/renuo/cli/commands/notify/slack/review_app_deploy.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+require_relative "../../../helpers/review_app_notification"
+
+module Renuo::Cli::Commands::Notify
+  module Slack
+    class ReviewAppDeploy
+      include ReviewAppNotification
+      include Renuo::Cli::Services
+
+      command "notify:slack:review-app-deploy" do |c|
+        c.syntax = "renuo notify:slack:review-app-deploy [options]"
+        c.summary = "Posts the branch's review app URL (with its basic auth credentials) and pull request to Slack."
+        c.description = "#{c.summary} The Slack incoming webhook is read from SLACK_WEBHOOK_URL, the GitHub " \
+                        "repository from SEMAPHORE_GIT_REPO_SLUG and bundler's GitHub credentials (a token or " \
+                        "user:token) from BUNDLE_GITHUB__COM to link the branch's open pull request. On Semaphore, " \
+                        "it links the workflow (SEMAPHORE_ORGANIZATION_URL, SEMAPHORE_WORKFLOW_ID) offering the " \
+                        "review app promotions."
+        ReviewAppNotification.define_options(c)
+        c.example "renuo notify:slack:review-app-deploy -p renuo-acme -b feature/42-migrate-to-deploio " \
+                  "--channel '#project-acme-notifications'",
+                  "Announces the branch's review app in the project's Slack channel"
+        c.action { |_args, options| new(options).run }
+      end
+
+      COLOR = "#141d50"
+
+      private
+
+      def message_lines
+        credentials = basic_auth_credentials
+        pull_request = fetch_pull_request
+
+        [
+          "Review app is ready: #{app_link(credentials)}",
+          pull_request && pull_request_line(pull_request),
+          branch_line
+        ].compact
+      end
+
+      def pull_request_line(pull_request)
+        "Pull request: <#{pull_request["html_url"]}|##{pull_request["number"]} #{pull_request["title"]}>"
+      end
+
+      def app_link(credentials)
+        url = app_url
+        url.userinfo = userinfo(credentials) if credentials
+        "<#{url}|#{url.host}>"
+      end
+
+      def userinfo(credentials)
+        credentials.values_at("username", "password").map { |value| URI.encode_www_form_component(value) }.join(":")
+      end
+
+      def app_url
+        url = Deploio.fetch_resource("app", @app_name, @project).to_h.dig("status", "atProvider", "defaultURLs", 0)
+        URI(url || abort("#{@app_name} has no URL assigned yet"))
+      end
+
+      # Deploio assigns basic auth credentials per app, so the review app's differ from the origin's.
+      def basic_auth_credentials
+        stdout, = system!("nctl get app #{@app_name} -p #{@project} -o json --basic-auth-credentials", quiet: true)
+        Array(JSON.parse(stdout)).first&.dig("basicauth")
+      end
+
+      def fetch_pull_request
+        credentials = ENV.fetch("BUNDLE_GITHUB__COM", "")
+        return if credentials.empty?
+
+        response = Net::HTTP.start("api.github.com", 443, use_ssl: true) do |http|
+          http.request(pull_request_request(credentials))
+        end
+        return JSON.parse(response.body).first if response.is_a?(Net::HTTPSuccess)
+
+        warn "GitHub pull request lookup failed: #{response.code}"
+        nil
+      end
+
+      def pull_request_request(credentials)
+        query = URI.encode_www_form(state: "open", head: "#{@repo.split("/").first}:#{@branch}")
+        request = Net::HTTP::Get.new("/repos/#{@repo}/pulls?#{query}", "Accept" => "application/vnd.github+json")
+        user, token = credentials.split(":", 2)
+        request.basic_auth(user, token || "x-oauth-basic")
+        request
+      end
+    end
+  end
+end

data/lib/renuo/cli/commands/notify/slack/review_app_purge.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require_relative "../../../helpers/review_app_notification"
+
+module Renuo::Cli::Commands::Notify
+  module Slack
+    class ReviewAppPurge
+      include ReviewAppNotification
+
+      command "notify:slack:review-app-purge" do |c|
+        c.syntax = "renuo notify:slack:review-app-purge [options]"
+        c.summary = "Announces on Slack that the branch's review app was purged."
+        c.description = "#{c.summary} The Slack incoming webhook is read from SLACK_WEBHOOK_URL and the GitHub " \
+                        "repository from SEMAPHORE_GIT_REPO_SLUG. On Semaphore, it links the workflow " \
+                        "(SEMAPHORE_ORGANIZATION_URL, SEMAPHORE_WORKFLOW_ID) offering the review app promotions."
+        ReviewAppNotification.define_options(c)
+        c.example "renuo notify:slack:review-app-purge -p renuo-acme -b feature/42-migrate-to-deploio " \
+                  "--channel '#project-acme-notifications'",
+                  "Announces that the branch's review app was purged"
+        c.action { |_args, options| new(options).run }
+      end
+
+      COLOR = "#9e9e9e"
+
+      private
+
+      def message_lines
+        ["Review app #{@app_name} was purged", branch_line]
+      end
+    end
+  end
+end

data/lib/renuo/cli/commands/review_app/README.md

@@ -13,8 +13,9 @@ These are the steps of command execution in the happy path:
 1. Create or update `renuo review-app:deploy`
 1. _Intentional gap for configuration. Consider this the wiggle-room for LLMs_
 1. Start the paused app `renuo review-app:start`
-1. Announce it on Slack `renuo review-app:notify`
+1. Announce it on Slack `renuo notify:slack:review-app-deploy`
 1. Cleanup `renuo review-app:purge`
+1. Announce the cleanup on Slack `renuo notify:slack:review-app-purge`
 
 ## Design Choices
 
@@ -28,6 +29,9 @@ These are the steps of command execution in the happy path:
 * All `nctl` commands are routed through `system!` and are logged in a command trail for auditing.
 * Configuration of system tools like `psql` is intentionally out of scope.
   But CI templating can give you some pointers.
-* `review-app:notify` posts the review app URL (carrying its Deploio-assigned basic auth credentials) and the
-  branch's open pull request to a Slack incoming webhook (`SLACK_WEBHOOK_URL`). The pull request lookup uses
+* `notify:slack:review-app-deploy` posts the review app URL (carrying its Deploio-assigned basic auth credentials) and
+  the branch's open pull request to a Slack incoming webhook (`SLACK_WEBHOOK_URL`). The pull request lookup uses
   bundler's `BUNDLE_GITHUB__COM` (a token or `user:token`) and never fails the pipeline when GitHub refuses it.
+  Incoming webhooks can't edit messages, so `notify:slack:review-app-purge` posts a separate one once purged.
+  On Semaphore, both messages link the branch's workflow offering the promotions. It's a link, not a button:
+  buttons posted by an incoming webhook show a warning unless they come from an interactive Slack app.

data/lib/renuo/cli/commands/review_app/setup_semaphoreci.rb

@@ -16,7 +16,7 @@ module Renuo::Cli::Commands::ReviewApp
       c.description = c.summary
       c.option "-p", "--project <name>", String, "The name of the Deploio project"
       c.option "--origin-pattern <pattern>", String, "Name pattern identifying the origin app to copy from"
-      c.option "--slack-channel <name>", String, "The Slack channel notified once a review app is ready"
+      c.option "--slack-channel <name>", String, "The Slack channel notified when a review app is ready or purged"
       c.action { |_args, options| new(options).run }
     end
 
@@ -25,7 +25,8 @@ module Renuo::Cli::Commands::ReviewApp
       write_or_warn DEPLOY_PIPELINE_TARGET_FILE,
                     render(DEPLOY_PIPELINE_TEMPLATE_FILE,
                            { project:, origin_pattern:, secret_name:, slack_channel: })
-      write_or_warn PURGE_PIPELINE_TARGET_FILE, render(PURGE_PIPELINE_TEMPLATE_FILE, { project:, secret_name: })
+      write_or_warn PURGE_PIPELINE_TARGET_FILE,
+                    render(PURGE_PIPELINE_TEMPLATE_FILE, { project:, secret_name:, slack_channel: })
       print_instructions
     end
 
@@ -75,7 +76,8 @@ module Renuo::Cli::Commands::ReviewApp
             pipeline_file: review-app-purge.yml
 
         Both buttons appear on every branch workflow in Semaphore. Deploy and purge the review app
-        of a branch by clicking the promotion on that branch's workflow.
+        of a branch by clicking the promotion on that branch's workflow. The Slack message announcing
+        a review app links that workflow, so it can be purged from there.
       INSTRUCTIONS
     end
 

data/lib/renuo/cli/helpers/review_app_notification.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require_relative "review_app_helper"
+require_relative "safe_review_app_name_contract"
+require_relative "../services/review_app_slack_webhook"
+
+module ReviewAppNotification
+  include ReviewAppHelper
+  include Contracts::Core
+
+  def self.define_options(command)
+    command.option "-p", "--project <name>", String, "The name of the Deploio project"
+    command.option "-b", "--branch <name>", String, "The Git branch"
+    command.option "--channel <name>", String, "The Slack channel to post to"
+    command.option "--repo <owner/name>", String, "The GitHub repository, defaults to SEMAPHORE_GIT_REPO_SLUG"
+  end
+
+  def run
+    @slack.post([*message_lines, workflow_line].compact.join("\n"), color: self.class::COLOR)
+    CmdTrail::Print.call
+    puts "\nnotified #{@channel}"
+  end
+
+  private
+
+  def initialize(options)
+    @project = options.project || abort("missing project name")
+    @branch = options.branch || abort("missing branch name")
+    @channel = options.channel || abort("missing Slack channel")
+    @repo = options.repo || ENV.fetch("SEMAPHORE_GIT_REPO_SLUG", nil).presence ||
+            abort("missing GitHub repository, set SEMAPHORE_GIT_REPO_SLUG or pass --repo")
+    @slack = Renuo::Cli::Services::ReviewAppSlackWebhook.new(@channel)
+    derive_app_name(@branch)
+  end
+
+  Contract String => SafeReviewAppNameContract
+  def derive_app_name(branch)
+    @app_name = review_app_name(branch)
+  end
+
+  def branch_line
+    "Branch: <https://github.com/#{@repo}/tree/#{@branch}|#{@branch}>"
+  end
+
+  # The deploy and purge promotions both run within the branch's workflow, which offers the other one.
+  # A link, because a button posted by an incoming webhook shows a warning without an interactive Slack app.
+  def workflow_line
+    organization_url, workflow_id = ENV.values_at("SEMAPHORE_ORGANIZATION_URL", "SEMAPHORE_WORKFLOW_ID")
+    return if organization_url.blank? || workflow_id.blank?
+
+    "Workflow: <#{organization_url}/workflows/#{workflow_id}|Open on Semaphore>"
+  end
+end

data/lib/renuo/cli/services/review_app_slack_webhook.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+class Renuo::Cli::Services::ReviewAppSlackWebhook
+  SENDER = { username: "Deploio Review Apps", icon_url: "https://deploio.ch/meta/apple-touch-icon.png" }.freeze
+
+  def initialize(channel)
+    @channel = channel
+    @url = ENV.fetch("SLACK_WEBHOOK_URL", nil).presence || abort("SLACK_WEBHOOK_URL is not set")
+  end
+
+  # The color bar on the side comes from the (legacy) attachment, which an incoming webhook still renders.
+  def post(text, color:)
+    attachment = { color: color, text: text, mrkdwn_in: ["text"] }
+    payload = SENDER.merge(channel: @channel, attachments: [attachment]).to_json
+    response = Net::HTTP.post(URI(@url), payload, "Content-Type" => "application/json")
+    return if response.is_a?(Net::HTTPSuccess)
+
+    abort "Slack refused the notification: #{response.code} #{response.body}"
+  end
+end

data/lib/renuo/cli/templates/semaphore/review-app-deploy.yml.erb

@@ -43,4 +43,4 @@ blocks:
             # - renuo review-app:deploy --project <%= project %> --branch $SEMAPHORE_GIT_WORKING_BRANCH --origin-pattern <%= origin_pattern %> --keep-envs=build,sensitive-build,runtime,sensitive-runtime --start
             - renuo review-app:start --project <%= project %> --branch $SEMAPHORE_GIT_WORKING_BRANCH
             - renuo ci check-deploio-status $(renuo review-app:name --branch $SEMAPHORE_GIT_WORKING_BRANCH) --project <%= project %>
-            - renuo review-app:notify --project <%= project %> --branch $SEMAPHORE_GIT_WORKING_BRANCH --channel '<%= slack_channel %>'
+            - renuo notify:slack:review-app-deploy --project <%= project %> --branch $SEMAPHORE_GIT_WORKING_BRANCH --channel '<%= slack_channel %>'

data/lib/renuo/cli/templates/semaphore/review-app-purge.yml.erb

@@ -19,3 +19,4 @@ blocks:
             - gem i -q renuo-cli
             - renuo ci setup
             - renuo review-app:purge --project <%= project %> --branch $SEMAPHORE_GIT_WORKING_BRANCH
+            - renuo notify:slack:review-app-purge --project <%= project %> --branch $SEMAPHORE_GIT_WORKING_BRANCH --channel '<%= slack_channel %>'

data/lib/renuo/cli/templates/semaphore/semaphore-deploy.yml.erb

@@ -13,7 +13,7 @@ blocks:
     task:
       secrets:
         - name: <%= project_name %>
-        - name: nctl
+        - name: <%= nctl_secret_name %>
       jobs:
         - name: deploying
           commands:

data/lib/renuo/cli/version.rb

@@ -3,7 +3,7 @@
 # simplecov:disable
 module Renuo
   class Cli
-    VERSION = "4.30.0"
+    VERSION = "5.0.0"
     NAME = "renuo-cli"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: renuo-cli
 version: !ruby/object:Gem::Version
-  version: 4.30.0
+  version: 5.0.0
 platform: ruby
 authors:
 - Renuo AG
@@ -116,11 +116,12 @@ files:
 - lib/renuo/cli/commands/github_replace.rb
 - lib/renuo/cli/commands/heroku_users.rb
 - lib/renuo/cli/commands/list_large_git_files.rb
+- lib/renuo/cli/commands/notify/slack/review_app_deploy.rb
+- lib/renuo/cli/commands/notify/slack/review_app_purge.rb
 - lib/renuo/cli/commands/release.rb
 - lib/renuo/cli/commands/review_app/README.md
 - lib/renuo/cli/commands/review_app/deploy.rb
 - lib/renuo/cli/commands/review_app/name.rb
-- lib/renuo/cli/commands/review_app/notify.rb
 - lib/renuo/cli/commands/review_app/purge.rb
 - lib/renuo/cli/commands/review_app/setup_semaphoreci.rb
 - lib/renuo/cli/commands/review_app/start.rb
@@ -136,6 +137,7 @@ files:
 - lib/renuo/cli/helpers/environments.rb
 - lib/renuo/cli/helpers/renuo_version.rb
 - lib/renuo/cli/helpers/review_app_helper.rb
+- lib/renuo/cli/helpers/review_app_notification.rb
 - lib/renuo/cli/helpers/safe_review_app_name_contract.rb
 - lib/renuo/cli/helpers/zsh_completion_script.rb
 - lib/renuo/cli/services/cache.rb
@@ -153,6 +155,7 @@ files:
 - lib/renuo/cli/services/heroku.rb
 - lib/renuo/cli/services/hetzner.rb
 - lib/renuo/cli/services/renuo_cli_config.rb
+- lib/renuo/cli/services/review_app_slack_webhook.rb
 - lib/renuo/cli/templates/semaphore/bin/cache_restore.erb
 - lib/renuo/cli/templates/semaphore/bin/cache_store.erb
 - lib/renuo/cli/templates/semaphore/notification.yml.erb

data/lib/renuo/cli/commands/review_app/notify.rb

@@ -1,120 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "../../helpers/safe_review_app_name_contract"
-
-module Renuo::Cli::Commands::ReviewApp
-  class Notify
-    include ReviewAppHelper
-    include Renuo::Cli::Services
-    include Contracts::Core
-
-    command "review-app:notify" do |c|
-      c.syntax = "renuo review-app:notify [options]"
-      c.summary = "Posts the branch's review app URL (with its basic auth credentials) and pull request to Slack."
-      c.description = "#{c.summary} The Slack incoming webhook is read from SLACK_WEBHOOK_URL, the GitHub " \
-                      "repository from SEMAPHORE_GIT_REPO_SLUG and bundler's GitHub credentials (a token or " \
-                      "user:token) from BUNDLE_GITHUB__COM to link the branch's open pull request."
-      c.option "-p", "--project <name>", String, "The name of the Deploio project"
-      c.option "-b", "--branch <name>", String, "The Git branch"
-      c.option "--channel <name>", String, "The Slack channel to post to"
-      c.option "--repo <owner/name>", String, "The GitHub repository, defaults to SEMAPHORE_GIT_REPO_SLUG"
-      c.example "renuo review-app:notify -p renuo-acme -b feature/42-migrate-to-deploio " \
-                "--channel '#project-acme-notifications'",
-                "Announces the branch's review app in the project's Slack channel"
-      c.action { |_args, options| new(options).run }
-    end
-
-    def run
-      post_to_slack(message_lines.join("\n"))
-      CmdTrail::Print.call
-      puts "\nnotified #{@channel}"
-    end
-
-    private
-
-    def initialize(options)
-      @project = options.project || abort("missing project name")
-      @branch = options.branch || abort("missing branch name")
-      @channel = options.channel || abort("missing Slack channel")
-      @repo = options.repo || ENV.fetch("SEMAPHORE_GIT_REPO_SLUG", nil).presence ||
-              abort("missing GitHub repository, set SEMAPHORE_GIT_REPO_SLUG or pass --repo")
-      @webhook_url = ENV.fetch("SLACK_WEBHOOK_URL", nil).presence || abort("SLACK_WEBHOOK_URL is not set")
-      derive_app_name(@branch)
-    end
-
-    Contract String => SafeReviewAppNameContract
-    def derive_app_name(branch)
-      @app_name = review_app_name(branch)
-    end
-
-    def message_lines
-      credentials = basic_auth_credentials
-      pull_request = fetch_pull_request
-
-      [
-        "Review app is ready: #{app_link(credentials)}",
-        pull_request && pull_request_line(pull_request),
-        "Branch: <https://github.com/#{@repo}/tree/#{@branch}|#{@branch}>"
-      ].compact
-    end
-
-    def pull_request_line(pull_request)
-      "Pull request: <#{pull_request["html_url"]}|##{pull_request["number"]} #{pull_request["title"]}>"
-    end
-
-    def app_link(credentials)
-      url = app_url
-      url.userinfo = userinfo(credentials) if credentials
-      "<#{url}|#{url.host}>"
-    end
-
-    def userinfo(credentials)
-      credentials.values_at("username", "password").map { |value| URI.encode_www_form_component(value) }.join(":")
-    end
-
-    def app_url
-      url = Deploio.fetch_resource("app", @app_name, @project).to_h.dig("status", "atProvider", "defaultURLs", 0)
-      URI(url || abort("#{@app_name} has no URL assigned yet"))
-    end
-
-    # Deploio assigns basic auth credentials per app, so the review app's differ from the origin's.
-    def basic_auth_credentials
-      stdout, = system!("nctl get app #{@app_name} -p #{@project} -o json --basic-auth-credentials", quiet: true)
-      Array(JSON.parse(stdout)).first&.dig("basicauth")
-    end
-
-    def fetch_pull_request
-      credentials = ENV.fetch("BUNDLE_GITHUB__COM", "")
-      return if credentials.empty?
-
-      response = Net::HTTP.start("api.github.com", 443, use_ssl: true) do |http|
-        http.request(pull_request_request(credentials))
-      end
-      return JSON.parse(response.body).first if response.is_a?(Net::HTTPSuccess)
-
-      warn "GitHub pull request lookup failed: #{response.code}"
-      nil
-    end
-
-    def pull_request_request(credentials)
-      query = URI.encode_www_form(state: "open", head: "#{@repo.split("/").first}:#{@branch}")
-      request = Net::HTTP::Get.new("/repos/#{@repo}/pulls?#{query}", "Accept" => "application/vnd.github+json")
-      user, token = credentials.split(":", 2)
-      request.basic_auth(user, token || "x-oauth-basic")
-      request
-    end
-
-    SENDER = { username: "Deploio Review Apps", icon_url: "https://deploio.ch/meta/apple-touch-icon.png" }.freeze
-    DEPLOIO_BLUE = "#141d50"
-
-    # The color bar on the side comes from the (legacy) attachment, which an incoming webhook still renders.
-    def post_to_slack(text)
-      attachment = { color: DEPLOIO_BLUE, text: text, mrkdwn_in: ["text"] }
-      payload = SENDER.merge(channel: @channel, attachments: [attachment]).to_json
-      response = Net::HTTP.post(URI(@webhook_url), payload, "Content-Type" => "application/json")
-      return if response.is_a?(Net::HTTPSuccess)
-
-      abort "Slack refused the notification: #{response.code} #{response.body}"
-    end
-  end
-end