keyhan
c97152fa9e
Build and Deploy Platform / build-and-deploy (push) Failing after 15s
Harbor proxy-cache works from core API but containerd can't use it directly, so all runner images are seeded to abrban/ project. Co-authored-by: Cursor <cursoragent@cursor.com>
136 lines
4.9 KiB
YAML
136 lines
4.9 KiB
YAML
name: Build and Deploy Platform
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths-ignore:
|
|
- "gitops/platform/values-abrban.yaml"
|
|
- "**.md"
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
REGISTRY: harbor-registry.cloudhost.svc.cluster.local:5000
|
|
PROJECT: abrban
|
|
BUILD_NS: cloudhost-builds
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: abrban-builder
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set image tag
|
|
shell: sh
|
|
run: |
|
|
SHA="${GITHUB_SHA:-$(git rev-parse HEAD)}"
|
|
TAG="$(date +%Y%m%d-%H%M)-$(echo $SHA | cut -c1-8)"
|
|
echo "IMAGE_TAG=${TAG}" >> "$GITHUB_ENV"
|
|
echo "Build tag: ${TAG}"
|
|
|
|
- name: Build backend image (Kaniko Job)
|
|
shell: sh
|
|
run: |
|
|
cat <<ENDJOB | kubectl apply -f -
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: build-backend-${IMAGE_TAG}
|
|
namespace: ${BUILD_NS}
|
|
spec:
|
|
ttlSecondsAfterFinished: 600
|
|
backoffLimit: 1
|
|
template:
|
|
spec:
|
|
restartPolicy: Never
|
|
imagePullSecrets:
|
|
- name: registry-pull-secret
|
|
initContainers:
|
|
- name: clone
|
|
image: ${REGISTRY}/${PROJECT}/act-runner:0.2.11
|
|
command: ["sh", "-c", "git clone --depth=1 --branch main http://gitea-http.gitea.svc.cluster.local:3000/abrban/cloud-host.git /workspace"]
|
|
volumeMounts:
|
|
- name: ws
|
|
mountPath: /workspace
|
|
containers:
|
|
- name: kaniko
|
|
image: ${REGISTRY}/${PROJECT}/kaniko-executor:v1.27.6-debug
|
|
command:
|
|
- /kaniko/executor
|
|
args:
|
|
- --dockerfile=/workspace/backend/Dockerfile
|
|
- --context=dir:///workspace/backend
|
|
- --destination=${REGISTRY}/${PROJECT}/cloudhost-backend:${IMAGE_TAG}
|
|
- --insecure
|
|
- --skip-tls-verify
|
|
volumeMounts:
|
|
- name: ws
|
|
mountPath: /workspace
|
|
volumes:
|
|
- name: ws
|
|
emptyDir: {}
|
|
ENDJOB
|
|
echo "Waiting for backend build..."
|
|
kubectl -n ${BUILD_NS} wait --for=condition=complete job/build-backend-${IMAGE_TAG} --timeout=20m
|
|
echo "Backend build done"
|
|
|
|
- name: Build frontend image (Kaniko Job)
|
|
shell: sh
|
|
run: |
|
|
cat <<ENDJOB | kubectl apply -f -
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: build-frontend-${IMAGE_TAG}
|
|
namespace: ${BUILD_NS}
|
|
spec:
|
|
ttlSecondsAfterFinished: 600
|
|
backoffLimit: 1
|
|
template:
|
|
spec:
|
|
restartPolicy: Never
|
|
imagePullSecrets:
|
|
- name: registry-pull-secret
|
|
initContainers:
|
|
- name: clone
|
|
image: ${REGISTRY}/${PROJECT}/act-runner:0.2.11
|
|
command: ["sh", "-c", "git clone --depth=1 --branch main http://gitea-http.gitea.svc.cluster.local:3000/abrban/cloud-host.git /workspace"]
|
|
volumeMounts:
|
|
- name: ws
|
|
mountPath: /workspace
|
|
containers:
|
|
- name: kaniko
|
|
image: ${REGISTRY}/${PROJECT}/kaniko-executor:v1.27.6-debug
|
|
command:
|
|
- /kaniko/executor
|
|
args:
|
|
- --dockerfile=/workspace/frontend/Dockerfile
|
|
- --context=dir:///workspace/frontend
|
|
- --build-arg=NEXT_PUBLIC_API_URL=https://api.abrban.com
|
|
- --destination=${REGISTRY}/${PROJECT}/cloudhost-frontend:${IMAGE_TAG}
|
|
- --insecure
|
|
- --skip-tls-verify
|
|
volumeMounts:
|
|
- name: ws
|
|
mountPath: /workspace
|
|
volumes:
|
|
- name: ws
|
|
emptyDir: {}
|
|
ENDJOB
|
|
echo "Waiting for frontend build..."
|
|
kubectl -n ${BUILD_NS} wait --for=condition=complete job/build-frontend-${IMAGE_TAG} --timeout=20m
|
|
echo "Frontend build done"
|
|
|
|
- name: Update GitOps values
|
|
shell: sh
|
|
run: |
|
|
sed -i "s|tag: \"[^\"]*\"|tag: \"${IMAGE_TAG}\"|g" gitops/platform/values-abrban.yaml
|
|
git config user.email "ci@abrban.com"
|
|
git config user.name "Gitea Actions"
|
|
git add gitops/platform/values-abrban.yaml
|
|
git diff --cached --quiet || git commit -m "ci: deploy platform ${IMAGE_TAG}"
|
|
|
|
- name: Push GitOps update
|
|
shell: sh
|
|
run: |
|
|
git push origin HEAD:main
|