feature branch test|

This commit is contained in:
Jun-te Kim 2025-12-28 13:24:46 +00:00
parent dc4fa21c6c
commit 427e1af203
3 changed files with 21 additions and 59 deletions

View file

@ -1,19 +1,16 @@
name: Deploy DB Infrastructure name: Deploy DEV DB Infrastructure
on: on:
push: push:
branches: branches:
- main - "feature/*"
jobs: jobs:
deploy: deploy:
runs-on: mealcraft-runners runs-on: mealcraft-runners
steps: steps:
- name: Checkout repo - uses: actions/checkout@v4
uses: actions/checkout@v4
# Install kubectl
- name: Install kubectl - name: Install kubectl
run: | run: |
sudo apt-get update sudo apt-get update
@ -21,72 +18,38 @@ jobs:
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl sudo install -m 0755 kubectl /usr/local/bin/kubectl
# Configure kubeconfig (ARC in-cluster) - name: Configure kubeconfig (in-cluster)
- name: Configure kubeconfig
run: | run: |
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT" KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace) NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
kubectl config set-cluster microk8s \ kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
--server="$KUBE_HOST" \ kubectl config set-credentials runner --token="$SA_TOKEN"
--certificate-authority="$CA_CERT" kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
kubectl config set-credentials runner \
--token="$SA_TOKEN"
kubectl config set-context runner-context \
--cluster=microk8s \
--user=runner \
--namespace="$NAMESPACE"
kubectl config use-context runner-context kubectl config use-context runner-context
# 1⃣ Secrets - name: Apply DEV secrets
- name: Apply DB secrets run: kubectl apply -f db/k8s/dev/secrets/
run: |
kubectl apply -f db/k8s/secrets/
# 2⃣ PostgreSQL - name: Deploy DEV Postgres
- name: Deploy Postgres run: kubectl apply -f db/k8s/dev/postgres/
run: |
kubectl apply -f db/k8s/postgres/
# 3⃣ Backups (CronJob) - name: Deploy DEV backups
- name: Deploy Postgres backups run: kubectl apply -f db/k8s/dev/backups/
run: |
kubectl apply -f db/k8s/backups/
migrate: migrate:
runs-on: mealcraft-runners runs-on: mealcraft-runners
needs: deploy needs: deploy
steps: steps:
- name: Checkout repo - uses: actions/checkout@v4
uses: actions/checkout@v4
# Install Atlas - name: Install Atlas
- name: debug run: curl -sSf https://atlasgo.sh | sh
run: |
ls -la
pwd
- name: Install kubectl - name: Load DEV DB creds
run: |
sudo apt-get update
sudo apt-get install -y curl ca-certificates
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl
# Install Atlas
- name: Install Atlas CLI
run: |
curl -sSf https://atlasgo.sh | sh
# Load DB creds from Kubernetes secret
- name: Load Postgres credentials
run: | run: |
export POSTGRES_USER=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_USER}' | base64 -d) export POSTGRES_USER=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
export POSTGRES_PASSWORD=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d) export POSTGRES_PASSWORD=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
@ -94,10 +57,8 @@ jobs:
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
- name: Run Atlas migrations (dev) - name: Run Atlas migrations (DEV)
run: | run: |
atlas migrate apply \ atlas migrate apply \
--config file://./db/atlas/atlas.hcl \ --config file://./db/atlas/atlas.hcl \
--env stripe_invoice_dev --env stripe_invoice_dev

View file

@ -9,7 +9,8 @@ spec:
containers: containers:
- name: atlas - name: atlas
image: arigaio/atlas:latest image: arigaio/atlas:latest
command: ["atlas", "migrate", "apply", "--env", "stripe_invoice_dev"] command: ["/atlas"]
args: ["migrate", "apply", "--env", "stripe_invoice_dev"]
envFrom: envFrom:
- secretRef: - secretRef:
name: postgres-secret name: postgres-secret

View file

@ -9,7 +9,7 @@ spec:
containers: containers:
- name: atlas - name: atlas
image: arigaio/atlas:latest image: arigaio/atlas:latest
command: ["atlas", "migrate", "apply", "--env", "stripe_invoice_prod"] command: ["migrate", "apply", "--env", "stripe_invoice_prod"]
envFrom: envFrom:
- secretRef: - secretRef:
name: postgres-secret name: postgres-secret