ci: add a NO_DEPLOY flag to temporarily block deployments (openfoodfa…

…cts#10720)

This enable long running operations on staging (eg. testing a
migration).

.github/workflows/container-deploy.yml

@@ -43,11 +43,29 @@ jobs:
         echo "SSH_HOST=10.1.0.200" >> $GITHUB_ENV
         echo "SSH_PROXY_HOST=ovh1.openfoodfacts.org" >> $GITHUB_ENV
         echo "SSH_USERNAME=off" >> $GITHUB_ENV
+
     - name: Set various variable for prod (org) deployment
       if: matrix.env == 'off-org'
       run: |
         # FIXME: we do not deploy to prod currently
         false
+
+    - name: Check for an eventual NO_DEPLOY file to put deployment on hold
+      uses: appleboy/ssh-action@master
+      with:
+        host: ${{ env.SSH_HOST }}
+        username: ${{ env.SSH_USERNAME }}
+        key: ${{ secrets.SSH_PRIVATE_KEY }}
+        proxy_host: ${{ env.SSH_PROXY_HOST }}
+        proxy_username: ${{ env.SSH_USERNAME }}
+        proxy_key: ${{ secrets.SSH_PRIVATE_KEY }}
+        script: |
+          if [[ -f /home/off/${{ matrix.env }}/NO_DEPLOY ]]
+          then
+            >&2 echo "A NO_DEPLOY file exists (in /home/off/${{ matrix.env }}), failing !"
+            exit 1
+          fi
+
     - name: Wait for frontend container build workflow
       uses: tomchv/[email protected]
       id: wait-build