kimjunte/juntekim.com
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 13

lets have a go

Browse source
This commit is contained in:
Jun-te Kim 2026-01-18 11:15:52 +00:00
parent 8c238f0efb
commit b652fcb97b
4 changed files with 70 additions and 247 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

96
.github/workflows/deploy-postgres-dev.yml vendored
View file

@ -1,96 +0,0 @@
name: Deploy DEV DB Infrastructure
on:
push:
branches:
- "feature/*"
jobs:
deploy:
runs-on: mealcraft-runners
steps:
- uses: actions/checkout@v4
- name: Install kubectl
run: |
sudo apt-get update
sudo apt-get install -y curl ca-certificates
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl
- name: Configure kubeconfig (in-cluster)
run: |
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
kubectl config set-credentials runner --token="$SA_TOKEN"
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
kubectl config use-context runner-context
- name: Deploy DEV Postgres
run: kubectl apply -f db/k8s/postgres/postgres-dev-stripe-to-invoice.yaml
migrate:
runs-on: mealcraft-runners
needs: deploy
steps:
- uses: actions/checkout@v4
- name: Install kubectl
run: |
sudo apt-get update
sudo apt-get install -y curl ca-certificates
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl
- name: Configure kubeconfig (in-cluster)
run: |
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
kubectl config set-credentials runner --token="$SA_TOKEN"
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
kubectl config use-context runner-context
- name: Install Atlas
run: curl -sSf https://atlasgo.sh | sh
- name: Load DEV DB creds
run: |
DB_NAMESPACE=dev
SECRET_NAME=postgres-secret
POSTGRES_USER=$(kubectl get secret $SECRET_NAME \
--namespace $DB_NAMESPACE \
-o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
POSTGRES_PASSWORD=$(kubectl get secret $SECRET_NAME \
--namespace $DB_NAMESPACE \
-o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
POSTGRES_DB=$(kubectl get secret $SECRET_NAME \
--namespace $DB_NAMESPACE \
-o jsonpath='{.data.POSTGRES_DB}' | base64 -d)
POSTGRES_HOST=postgres-dev.stripe-invoice-dev.svc.cluster.local
POSTGRES_PORT=5432
DATABASE_URL="postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?sslmode=disable"
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
echo "POSTGRES_DB=$POSTGRES_DB" >> $GITHUB_ENV
echo "DATABASE_URL=$DATABASE_URL" >> $GITHUB_ENV
- name: Run Atlas migrations (DEV)
run: |
atlas migrate apply \
--config file://./db/atlas/atlas.hcl \
--env stripe_invoice_dev

82
.github/workflows/deploy-postgres-prod.yml vendored
View file

@ -1,82 +0,0 @@
name: Deploy PROD DB Infrastructure
on:
push:
branches:
- main
workflow_dispatch:
jobs:
deploy:
runs-on: mealcraft-runners
steps:
- uses: actions/checkout@v4
- name: Install kubectl
run: |
sudo apt-get update
sudo apt-get install -y curl ca-certificates
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl
- name: Configure kubeconfig (in-cluster)
run: |
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
kubectl config set-credentials runner --token="$SA_TOKEN"
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
kubectl config use-context runner-context
- name: Deploy PROD Postgres
run: kubectl apply -f db/k8s/postgres/
# - name: Deploy PROD backups
# run: kubectl apply -f db/k8s/backups/
migrate:
runs-on: mealcraft-runners
needs: deploy
steps:
- uses: actions/checkout@v4
- name: Install kubectl
run: |
sudo apt-get update
sudo apt-get install -y curl ca-certificates
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl
- name: Configure kubeconfig (in-cluster)
run: |
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
kubectl config set-credentials runner --token="$SA_TOKEN"
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
kubectl config use-context runner-context
- name: Install Atlas
run: curl -sSf https://atlasgo.sh | sh
- name: Load PROD DB creds
run: |
export POSTGRES_USER=$(kubectl get secret postgres-prod-secret -o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
export POSTGRES_PASSWORD=$(kubectl get secret postgres-prod-secret -o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
- name: Run Atlas migrations (PROD)
run: |
atlas migrate apply \
--config file://./db/atlas/atlas.hcl \
--env stripe_invoice_prod

137
.github/workflows/stripe-to-invoice.yml vendored
View file

@ -1,81 +1,82 @@
# name: Build & Deploy stripe-to-invoice name: Build & Deploy stripe-to-invoice
# on: on:
# push: push:
# branches: branches:
# - main - main
# - feature/** - feature/**
# - release/** - release/**
# tags: tags:
# - "*" - "*"
# jobs: jobs:
# build: build:
# runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
# steps: steps:
# - uses: actions/checkout@v4 - uses: actions/checkout@v4
# - name: Inject slug variables - name: Inject slug variables
# uses: rlespinasse/github-slug-action@v4 uses: rlespinasse/github-slug-action@v4
# - name: Login to Docker Hub - name: Login to Docker Hub
# uses: docker/login-action@v3 uses: docker/login-action@v3
# with: with:
# username: ${{ secrets.DOCKER_HUB_USERNAME }} username: ${{ secrets.DOCKER_HUB_USERNAME }}
# password: ${{ secrets.DOCKER_HUB_TOKEN }} password: ${{ secrets.DOCKER_HUB_TOKEN }}
# - name: Build image - name: Build image
# run: | run: |
# docker build \ docker build \
# -f stripe_to_invoice/deployment/Dockerfile \ -f stripe_to_invoice/deployment/Dockerfile \
# -t docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG \ -t docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG \
# . .
# - name: Push image - name: Push image
# run: | run: |
# docker push docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG docker push docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG
# deploy: deploy:
# runs-on: mealcraft-runners runs-on: mealcraft-runners
# needs: build needs: build
# steps: steps:
# - uses: actions/checkout@v4 - uses: actions/checkout@v4
# - name: Install kubectl - name: Install kubectl
# run: | run: |
# sudo apt-get update sudo apt-get update
# sudo apt-get install -y curl ca-certificates gettext sudo apt-get install -y curl ca-certificates gettext
# curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
# sudo install -m 0755 kubectl /usr/local/bin/kubectl sudo install -m 0755 kubectl /usr/local/bin/kubectl
# - name: Configure kubeconfig - name: Configure kubeconfig
# run: | run: |
# KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT" KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
# SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
# CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
# NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace) NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
# kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT" kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
# kubectl config set-credentials runner --token="$SA_TOKEN" kubectl config set-credentials runner --token="$SA_TOKEN"
# kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE" kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
# kubectl config use-context runner-context kubectl config use-context runner-context
# - name: Inject slug variables - name: Inject slug variables
# uses: rlespinasse/github-slug-action@v4 uses: rlespinasse/github-slug-action@v4
# - name: Set environment - name: Set environment
# run: | run: |
# if [[ "$GITHUB_REF" == refs/heads/release/* || "$GITHUB_REF" == refs/tags/* ]]; then if [[ "$GITHUB_REF" == refs/heads/release/* || "$GITHUB_REF" == refs/tags/* ]]; then
# echo "NAMESPACE=default" >> $GITHUB_ENV echo "NAMESPACE=default" >> $GITHUB_ENV
# echo "DB_ENV=prod" >> $GITHUB_ENV echo "DB_ENV=prod" >> $GITHUB_ENV
# else echo "HOSTNAME=stripe-to-invoice.juntekim.com" >> $GITHUB_ENV
# echo "NAMESPACE=dev" >> $GITHUB_ENV else
# echo "DB_ENV=dev" >> $GITHUB_ENV echo "NAMESPACE=dev" >> $GITHUB_ENV
# fi echo "DB_ENV=dev" >> $GITHUB_ENV
echo "HOSTNAME=stripe-to-invoice.dev.juntekim.com" >> $GITHUB_ENV
# - name: Deploy fi
# run: | - name: Deploy
# export IMAGE="docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG" run: |
# export NAMESPACE DB_ENV export IMAGE="docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG"
# envsubst < stripe_to_invoice/deployment/deployment.yaml | kubectl apply -f - export NAMESPACE DB_ENV
envsubst < stripe_to_invoice/deployment/deployment.yaml | kubectl apply -f -

2
stripe_to_invoice/deployment/deployment.yaml
View file

@ -24,7 +24,7 @@ spec:
containerPort: 3000 containerPort: 3000
env: env:
- name: NODE_ENV - name: NODE_ENV
value: "production" value: "${DB_ENV}"
# ---- Database ---- # ---- Database ----
- name: DATABASE_URL - name: DATABASE_URL