feature branch test|
This commit is contained in:
parent
dc4fa21c6c
commit
427e1af203
3 changed files with 21 additions and 59 deletions
75
.github/workflows/deploy-postgres.yml
vendored
75
.github/workflows/deploy-postgres.yml
vendored
|
|
@ -1,19 +1,16 @@
|
||||||
name: Deploy DB Infrastructure
|
name: Deploy DEV DB Infrastructure
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches:
|
branches:
|
||||||
- main
|
- "feature/*"
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
deploy:
|
deploy:
|
||||||
runs-on: mealcraft-runners
|
runs-on: mealcraft-runners
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repo
|
- uses: actions/checkout@v4
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
# Install kubectl
|
|
||||||
- name: Install kubectl
|
- name: Install kubectl
|
||||||
run: |
|
run: |
|
||||||
sudo apt-get update
|
sudo apt-get update
|
||||||
|
|
@ -21,72 +18,38 @@ jobs:
|
||||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||||
|
|
||||||
# Configure kubeconfig (ARC in-cluster)
|
- name: Configure kubeconfig (in-cluster)
|
||||||
- name: Configure kubeconfig
|
|
||||||
run: |
|
run: |
|
||||||
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||||
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||||
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||||
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||||
|
|
||||||
kubectl config set-cluster microk8s \
|
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||||
--server="$KUBE_HOST" \
|
kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||||
--certificate-authority="$CA_CERT"
|
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||||
|
|
||||||
kubectl config set-credentials runner \
|
|
||||||
--token="$SA_TOKEN"
|
|
||||||
|
|
||||||
kubectl config set-context runner-context \
|
|
||||||
--cluster=microk8s \
|
|
||||||
--user=runner \
|
|
||||||
--namespace="$NAMESPACE"
|
|
||||||
|
|
||||||
kubectl config use-context runner-context
|
kubectl config use-context runner-context
|
||||||
|
|
||||||
# 1️⃣ Secrets
|
- name: Apply DEV secrets
|
||||||
- name: Apply DB secrets
|
run: kubectl apply -f db/k8s/dev/secrets/
|
||||||
run: |
|
|
||||||
kubectl apply -f db/k8s/secrets/
|
|
||||||
|
|
||||||
# 2️⃣ PostgreSQL
|
- name: Deploy DEV Postgres
|
||||||
- name: Deploy Postgres
|
run: kubectl apply -f db/k8s/dev/postgres/
|
||||||
run: |
|
|
||||||
kubectl apply -f db/k8s/postgres/
|
|
||||||
|
|
||||||
# 3️⃣ Backups (CronJob)
|
- name: Deploy DEV backups
|
||||||
- name: Deploy Postgres backups
|
run: kubectl apply -f db/k8s/dev/backups/
|
||||||
run: |
|
|
||||||
kubectl apply -f db/k8s/backups/
|
|
||||||
|
|
||||||
migrate:
|
migrate:
|
||||||
runs-on: mealcraft-runners
|
runs-on: mealcraft-runners
|
||||||
needs: deploy
|
needs: deploy
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repo
|
- uses: actions/checkout@v4
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
# Install Atlas
|
- name: Install Atlas
|
||||||
- name: debug
|
run: curl -sSf https://atlasgo.sh | sh
|
||||||
run: |
|
|
||||||
ls -la
|
|
||||||
pwd
|
|
||||||
|
|
||||||
- name: Install kubectl
|
- name: Load DEV DB creds
|
||||||
run: |
|
|
||||||
sudo apt-get update
|
|
||||||
sudo apt-get install -y curl ca-certificates
|
|
||||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
|
||||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
|
||||||
|
|
||||||
|
|
||||||
# Install Atlas
|
|
||||||
- name: Install Atlas CLI
|
|
||||||
run: |
|
|
||||||
curl -sSf https://atlasgo.sh | sh
|
|
||||||
|
|
||||||
# Load DB creds from Kubernetes secret
|
|
||||||
- name: Load Postgres credentials
|
|
||||||
run: |
|
run: |
|
||||||
export POSTGRES_USER=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
|
export POSTGRES_USER=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
|
||||||
export POSTGRES_PASSWORD=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
|
export POSTGRES_PASSWORD=$(kubectl get secret postgres-secret -o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
|
||||||
|
|
@ -94,10 +57,8 @@ jobs:
|
||||||
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
|
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
|
||||||
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
|
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
|
||||||
|
|
||||||
- name: Run Atlas migrations (dev)
|
- name: Run Atlas migrations (DEV)
|
||||||
run: |
|
run: |
|
||||||
atlas migrate apply \
|
atlas migrate apply \
|
||||||
--config file://./db/atlas/atlas.hcl \
|
--config file://./db/atlas/atlas.hcl \
|
||||||
--env stripe_invoice_dev
|
--env stripe_invoice_dev
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -9,7 +9,8 @@ spec:
|
||||||
containers:
|
containers:
|
||||||
- name: atlas
|
- name: atlas
|
||||||
image: arigaio/atlas:latest
|
image: arigaio/atlas:latest
|
||||||
command: ["atlas", "migrate", "apply", "--env", "stripe_invoice_dev"]
|
command: ["/atlas"]
|
||||||
|
args: ["migrate", "apply", "--env", "stripe_invoice_dev"]
|
||||||
envFrom:
|
envFrom:
|
||||||
- secretRef:
|
- secretRef:
|
||||||
name: postgres-secret
|
name: postgres-secret
|
||||||
|
|
|
||||||
|
|
@ -9,7 +9,7 @@ spec:
|
||||||
containers:
|
containers:
|
||||||
- name: atlas
|
- name: atlas
|
||||||
image: arigaio/atlas:latest
|
image: arigaio/atlas:latest
|
||||||
command: ["atlas", "migrate", "apply", "--env", "stripe_invoice_prod"]
|
command: ["migrate", "apply", "--env", "stripe_invoice_prod"]
|
||||||
envFrom:
|
envFrom:
|
||||||
- secretRef:
|
- secretRef:
|
||||||
name: postgres-secret
|
name: postgres-secret
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue