added default workflows
This commit is contained in:
parent
7dabe9f65c
commit
aea2e1729e
@ -1,154 +0,0 @@
|
|||||||
name: Base workflow which build and push docker, run prisma migrations and deploy helm to k8s
|
|
||||||
on:
|
|
||||||
workflow_call:
|
|
||||||
inputs:
|
|
||||||
APP_NAME:
|
|
||||||
required: true
|
|
||||||
type: string
|
|
||||||
description: Application name which would be the name of Docker and Helm release
|
|
||||||
# default:
|
|
||||||
GITEA_REGISTRY:
|
|
||||||
required: true
|
|
||||||
type: string
|
|
||||||
default: registry.project-rent-dev.com
|
|
||||||
NAMESPACE:
|
|
||||||
required: true
|
|
||||||
type: string
|
|
||||||
description: Namespace where Helm Release would be install
|
|
||||||
secrets:
|
|
||||||
PRISMA_DB_URL:
|
|
||||||
required: true
|
|
||||||
description: Secret where db url for migration stores
|
|
||||||
REGISTRY_USERNAME:
|
|
||||||
required: true
|
|
||||||
description: Service acc name for registry
|
|
||||||
REGISTRY_PASSWORD:
|
|
||||||
required: true
|
|
||||||
description: Service acc password for registry
|
|
||||||
KUBECONF:
|
|
||||||
required: true
|
|
||||||
description: Kubeconf which allow to deploy Helm release to namespace
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
|
|
||||||
### Build docker image
|
|
||||||
build:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
container:
|
|
||||||
image: catthehacker/ubuntu:act-22.04
|
|
||||||
|
|
||||||
steps:
|
|
||||||
|
|
||||||
- name: Checkout code
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
|
|
||||||
- name: Set up Docker BuildX
|
|
||||||
uses: docker/setup-buildx-action@v2
|
|
||||||
|
|
||||||
- &get_version
|
|
||||||
name: Extract version from tag or set commit SHA
|
|
||||||
id: vars
|
|
||||||
run: |
|
|
||||||
if [ "${{ github.ref_type }}" = "tag" ]; then
|
|
||||||
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
|
|
||||||
else
|
|
||||||
VERSION=$(echo "${{ github.sha }}" | cut -c1-7)
|
|
||||||
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: Login to Docker registry
|
|
||||||
uses: docker/login-action@v2
|
|
||||||
with:
|
|
||||||
registry: ${{ env.GITEA_REGISTRY }}
|
|
||||||
username: ${{ secrets.REGISTRY_USERNAME }}
|
|
||||||
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
||||||
|
|
||||||
- name: Build Docker image
|
|
||||||
run: |
|
|
||||||
docker build -t ${{ env.GITEA_REGISTRY }}/${{ secrets.REGISTRY_USERNAME }}/$APP_NAME:${{ env.VERSION }} .
|
|
||||||
|
|
||||||
- name: Push Docker image
|
|
||||||
if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')
|
|
||||||
run: |
|
|
||||||
docker push ${{ env.GITEA_REGISTRY }}/${{ secrets.REGISTRY_USERNAME }}/$APP_NAME:${{ env.VERSION }}
|
|
||||||
|
|
||||||
- name: Logout from Docker registry
|
|
||||||
run: docker logout ${{ env.GITEA_REGISTRY }}
|
|
||||||
|
|
||||||
### Run prisma migrations
|
|
||||||
migration:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') # Condition
|
|
||||||
container:
|
|
||||||
image: catthehacker/ubuntu:act-22.04
|
|
||||||
needs: build
|
|
||||||
steps:
|
|
||||||
|
|
||||||
- name: Checkout repo
|
|
||||||
uses: actions/checkout@v3
|
|
||||||
|
|
||||||
- name: Setup Node
|
|
||||||
uses: actions/setup-node@v3
|
|
||||||
|
|
||||||
- name: Install dependencies
|
|
||||||
run: npm install
|
|
||||||
|
|
||||||
## TODO: practice to work with vault from CI
|
|
||||||
# - name: Import secret
|
|
||||||
# uses: hashicorp/vault-action@v2
|
|
||||||
# with:
|
|
||||||
# url: 'https://vault.project-rent-dev.com'
|
|
||||||
# role_id: ${{ secrets.VAULT_ROLE_ID }}
|
|
||||||
# secret_id: ${{ secrets.VAULT_SECRET_ID }}
|
|
||||||
# secrets: cicd/data/prisma/db url | DATABASE_URL
|
|
||||||
|
|
||||||
- name: Apply all pending migrations to the database
|
|
||||||
run: npx prisma migrate deploy
|
|
||||||
env:
|
|
||||||
DATABASE_URL: ${{ secrets.PRISMA_DB_URL }}
|
|
||||||
|
|
||||||
deploy:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: [migration, build]
|
|
||||||
if: github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/') # Condition
|
|
||||||
container:
|
|
||||||
image: catthehacker/ubuntu:act-22.04
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- name: Checkout code
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
|
|
||||||
- name: Extract version from tag or set commit SHA
|
|
||||||
id: vars
|
|
||||||
run: |
|
|
||||||
if [ "${{ github.ref_type }}" = "tag" ]; then
|
|
||||||
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
|
|
||||||
else
|
|
||||||
VERSION=$(echo "${{ github.sha }}" | cut -c1-7)
|
|
||||||
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
||||||
fi
|
|
||||||
|
|
||||||
### TO:DO make something with chart, helm allow only semantic
|
|
||||||
# - name: Package chart
|
|
||||||
# run: |
|
|
||||||
# helm package chart/ --version ${{ env.VERSION }}
|
|
||||||
|
|
||||||
- name: Install helm
|
|
||||||
uses: azure/setup-helm@v4.2.0
|
|
||||||
with:
|
|
||||||
version: latest
|
|
||||||
|
|
||||||
- name: Set up Kubectl
|
|
||||||
uses: azure/k8s-set-context@v4
|
|
||||||
with:
|
|
||||||
kubeconfig: ${{ secrets.PROD_KUBECONF }}
|
|
||||||
|
|
||||||
- name: Install chart
|
|
||||||
run: |
|
|
||||||
helm upgrade --install --cleanup-on-fail --atomic --timeout 2m --wait $APP_NAME ./chart \
|
|
||||||
--create-namespace --namespace $NAMESPACE \
|
|
||||||
--set image.repository=${{ env.GITEA_REGISTRY }}/${{ secrets.REGISTRY_USERNAME }}/$APP_NAME \
|
|
||||||
--set image.tag=${{ env.VERSION }} \
|
|
||||||
-f chart/values-prod.yaml
|
|
||||||
78
.gitea/workflows/docker-build-and-push.yaml
Normal file
78
.gitea/workflows/docker-build-and-push.yaml
Normal file
@ -0,0 +1,78 @@
|
|||||||
|
name: Workflow to build and push docker image to registry
|
||||||
|
on:
|
||||||
|
workflow_call:
|
||||||
|
inputs:
|
||||||
|
APP_NAME:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Application name which would be the name of Docker and Helm release
|
||||||
|
REGISTRY:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
DOCKERFILE_PATH:
|
||||||
|
type: string
|
||||||
|
default: Dockerfile
|
||||||
|
USER_FOR_IMAGE_STORE:
|
||||||
|
type: string
|
||||||
|
default: registry-bot
|
||||||
|
secrets:
|
||||||
|
VAULT_TOKEN:
|
||||||
|
required: true
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
|
||||||
|
build:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
container:
|
||||||
|
image: catthehacker/ubuntu:act-22.04
|
||||||
|
|
||||||
|
steps:
|
||||||
|
|
||||||
|
- name: Checkout code
|
||||||
|
uses: actions/checkout@v2
|
||||||
|
|
||||||
|
- name: Import Secrets
|
||||||
|
uses: hashicorp/vault-action@v2
|
||||||
|
with:
|
||||||
|
url: https://vault.project-rent-dev.com
|
||||||
|
token: ${{ secrets.VAULT_TOKEN }}
|
||||||
|
secrets: |
|
||||||
|
cicd/data/docker password | REGISTRY_PASSWORD ;
|
||||||
|
cicd/data/docker username | REGISTRY_USERNAME ;
|
||||||
|
|
||||||
|
- name: Set up Docker BuildX
|
||||||
|
uses: docker/setup-buildx-action@v2
|
||||||
|
with:
|
||||||
|
driver-opts: network=host
|
||||||
|
config-inline: |
|
||||||
|
[registries.insecure]
|
||||||
|
"${{ inputs.REGISTRY }}" = true
|
||||||
|
|
||||||
|
- &get_version
|
||||||
|
name: Extract version from tag or set commit SHA
|
||||||
|
id: vars
|
||||||
|
run: |
|
||||||
|
if [ "${{ github.ref_type }}" = "tag" ]; then
|
||||||
|
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
|
||||||
|
else
|
||||||
|
VERSION=$(echo "${{ github.sha }}" | cut -c1-7)
|
||||||
|
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Login to Docker registry
|
||||||
|
uses: docker/login-action@v2
|
||||||
|
with:
|
||||||
|
registry: ${{ inputs.REGISTRY }}
|
||||||
|
username: ${{ env.REGISTRY_USERNAME }}
|
||||||
|
password: ${{ env.REGISTRY_PASSWORD }}
|
||||||
|
|
||||||
|
- name: Build Docker image
|
||||||
|
run: |
|
||||||
|
docker build -t ${{ inputs.REGISTRY }}/${{ inputs.USER_FOR_IMAGE_STORE }}/${{ inputs.APP_NAME }}:${{ env.VERSION }} .
|
||||||
|
|
||||||
|
- name: Push Docker image
|
||||||
|
run: |
|
||||||
|
docker push ${{ inputs.REGISTRY }}/${{ inputs.USER_FOR_IMAGE_STORE }}/${{ inputs.APP_NAME }}:${{ env.VERSION }}
|
||||||
|
|
||||||
|
- name: Logout from Docker registry
|
||||||
|
run: docker logout ${{ inputs.REGISTRY }}
|
||||||
106
.gitea/workflows/k8s-deploy.yml
Normal file
106
.gitea/workflows/k8s-deploy.yml
Normal file
@ -0,0 +1,106 @@
|
|||||||
|
name: Workflow for deploy helm to k8s
|
||||||
|
on:
|
||||||
|
workflow_call:
|
||||||
|
inputs:
|
||||||
|
APP_NAME:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Application name which would be the name of Docker and Helm release
|
||||||
|
REGISTRY:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
default: registry.project-rent-dev.com
|
||||||
|
PROD_NAMESPACE:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Namespace where PROD Helm Release would be install
|
||||||
|
default: greedy
|
||||||
|
DEV_NAMESPACE:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Namespace where DEV Helm Release would be install
|
||||||
|
default: greedy-dev
|
||||||
|
PROD_VALUES_FILE:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Prod values file location in repo
|
||||||
|
default: chart/values-prod.yaml
|
||||||
|
DEV_VALUES_FILE:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Dev values file location in repo
|
||||||
|
default: chart/values-dev.yaml
|
||||||
|
REGISTRY_USER:
|
||||||
|
type: string
|
||||||
|
default: registry-bot
|
||||||
|
description: Because of gitea registry specific docker images path we need that var
|
||||||
|
DEV_KUBECONF_SECRET_PATH:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Kubeconf secret path in vault for dev
|
||||||
|
PROD_KUBECONF_SECRET_PATH:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Kubeconf secret path in vault for prod
|
||||||
|
secrets:
|
||||||
|
VAULT_TOKEN:
|
||||||
|
required: true
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
|
||||||
|
deploy:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
container:
|
||||||
|
image: catthehacker/ubuntu:act-22.04
|
||||||
|
|
||||||
|
steps:
|
||||||
|
- name: Checkout code
|
||||||
|
uses: actions/checkout@v2
|
||||||
|
|
||||||
|
- name: Extract version from tag or set commit SHA
|
||||||
|
id: vars
|
||||||
|
run: |
|
||||||
|
if [ "${{ github.ref_type }}" = "tag" ]; then
|
||||||
|
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
|
||||||
|
else
|
||||||
|
VERSION=$(echo "${{ github.sha }}" | cut -c1-7)
|
||||||
|
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Export secrets for deploy
|
||||||
|
run: |
|
||||||
|
if [ "${{ github.ref }}" == "refs/heads/main" ]; then
|
||||||
|
echo "NAMESPACE=${{ inputs.PROD_NAMESPACE }}" >> $GITHUB_ENV
|
||||||
|
echo "VALUES_FILE=${{ inputs.PROD_VALUES_FILE }}" >> $GITHUB_ENV
|
||||||
|
echo "KUBECONF=${{ inputs.PROD_KUBECONF_SECRET_PATH }}" >> $GITHUB_ENV
|
||||||
|
else
|
||||||
|
echo "NAMESPACE=${{ inputs.DEV_NAMESPACE }}" >> $GITHUB_ENV
|
||||||
|
echo "VALUES_FILE=${{ inputs.DEV_VALUES_FILE }}" >> $GITHUB_ENV
|
||||||
|
echo "KUBECONF=${{ inputs.DEV_KUBECONF_SECRET_PATH }}" >> $GITHUB_ENV
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Import config of k8s
|
||||||
|
uses: hashicorp/vault-action@v2
|
||||||
|
with:
|
||||||
|
url: https://vault.project-rent-dev.com
|
||||||
|
token: ${{ secrets.VAULT_TOKEN }}
|
||||||
|
secrets: |
|
||||||
|
${{ env.KUBECONF }} | KUBECONFIG;
|
||||||
|
|
||||||
|
- name: Install helm
|
||||||
|
uses: azure/setup-helm@v4.2.0
|
||||||
|
with:
|
||||||
|
version: latest
|
||||||
|
|
||||||
|
- name: Set up Kubectl
|
||||||
|
uses: azure/k8s-set-context@v4
|
||||||
|
with:
|
||||||
|
kubeconfig: ${{ env.KUBECONFIG }}
|
||||||
|
|
||||||
|
- name: Install chart
|
||||||
|
run: |
|
||||||
|
helm upgrade --install --cleanup-on-fail --atomic --timeout 2m --wait ${{ inputs.APP_NAME }} ./chart \
|
||||||
|
--create-namespace --namespace ${{ env.NAMESPACE }} \
|
||||||
|
--set image.repository=${{ inputs.REGISTRY }}/${{ inputs.REGISTRY_USER }}/${{ inputs.APP_NAME }} \
|
||||||
|
--set image.tag=${{ env.VERSION }} \
|
||||||
|
-f ${{ env.VALUES_FILE }}
|
||||||
53
.gitea/workflows/prisma-migrate.yaml
Normal file
53
.gitea/workflows/prisma-migrate.yaml
Normal file
@ -0,0 +1,53 @@
|
|||||||
|
name: Workflow for prisma migrations
|
||||||
|
on:
|
||||||
|
workflow_call:
|
||||||
|
inputs:
|
||||||
|
PROD_PRISMA_SECRET_DB_PATH:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Prisma db url secret path in vault for prod
|
||||||
|
DEV_PRISMA_SECRET_DB_PATH:
|
||||||
|
required: true
|
||||||
|
type: string
|
||||||
|
description: Prisma db url secret path in vault for dev
|
||||||
|
secrets:
|
||||||
|
VAULT_TOKEN:
|
||||||
|
required: true
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
|
||||||
|
migration:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
container:
|
||||||
|
image: catthehacker/ubuntu:act-22.04
|
||||||
|
steps:
|
||||||
|
|
||||||
|
- name: Checkout repo
|
||||||
|
uses: actions/checkout@v3
|
||||||
|
|
||||||
|
- name: Setup Node
|
||||||
|
uses: actions/setup-node@v3
|
||||||
|
|
||||||
|
- name: Install dependencies
|
||||||
|
run: npm install
|
||||||
|
|
||||||
|
- name: Export secrets for prisma
|
||||||
|
run: |
|
||||||
|
if [ "${{ github.ref }}" == "refs/heads/main" ]; then
|
||||||
|
echo "PRISMA_DB_SECRET_PATH=${{ inputs.PROD_PRISMA_SECRET_DB_PATH }}" >> $GITHUB_ENV
|
||||||
|
else
|
||||||
|
echo "PRISMA_DB_SECRET_PATH=${{ inputs.DEV_PRISMA_SECRET_DB_PATH }}" >> $GITHUB_ENV
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Import prisma db url
|
||||||
|
uses: hashicorp/vault-action@v2
|
||||||
|
with:
|
||||||
|
url: https://vault.project-rent-dev.com
|
||||||
|
token: ${{ secrets.VAULT_TOKEN }}
|
||||||
|
secrets: |
|
||||||
|
${{ env.PRISMA_DB_SECRET_PATH }} | PRISMA_DB_URL;
|
||||||
|
|
||||||
|
- name: Apply all pending migrations to the database
|
||||||
|
run: npx prisma migrate deploy
|
||||||
|
env:
|
||||||
|
DATABASE_URL: ${{ env.PRISMA_DB_URL }}
|
||||||
Loading…
x
Reference in New Issue
Block a user