lets have a go
This commit is contained in:
Jun-te Kim
parent
8c238f0efb
commit
b652fcb97b
4 changed files with 70 additions and 247 deletions
96
.github/workflows/deploy-postgres-dev.yml
vendored
96
.github/workflows/deploy-postgres-dev.yml
vendored
|
|
@ -1,96 +0,0 @@
|
|||
name: Deploy DEV DB Infrastructure
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- "feature/*"
|
||||
jobs:
|
||||
deploy:
|
||||
runs-on: mealcraft-runners
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y curl ca-certificates
|
||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||
|
||||
- name: Configure kubeconfig (in-cluster)
|
||||
run: |
|
||||
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||
|
||||
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||
kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||
kubectl config use-context runner-context
|
||||
|
||||
- name: Deploy DEV Postgres
|
||||
run: kubectl apply -f db/k8s/postgres/postgres-dev-stripe-to-invoice.yaml
|
||||
|
||||
migrate:
|
||||
runs-on: mealcraft-runners
|
||||
needs: deploy
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y curl ca-certificates
|
||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||
|
||||
- name: Configure kubeconfig (in-cluster)
|
||||
run: |
|
||||
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||
|
||||
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||
kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||
kubectl config use-context runner-context
|
||||
|
||||
- name: Install Atlas
|
||||
run: curl -sSf https://atlasgo.sh | sh
|
||||
|
||||
- name: Load DEV DB creds
|
||||
run: |
|
||||
DB_NAMESPACE=dev
|
||||
SECRET_NAME=postgres-secret
|
||||
|
||||
POSTGRES_USER=$(kubectl get secret $SECRET_NAME \
|
||||
--namespace $DB_NAMESPACE \
|
||||
-o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
|
||||
|
||||
POSTGRES_PASSWORD=$(kubectl get secret $SECRET_NAME \
|
||||
--namespace $DB_NAMESPACE \
|
||||
-o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
|
||||
|
||||
POSTGRES_DB=$(kubectl get secret $SECRET_NAME \
|
||||
--namespace $DB_NAMESPACE \
|
||||
-o jsonpath='{.data.POSTGRES_DB}' | base64 -d)
|
||||
|
||||
POSTGRES_HOST=postgres-dev.stripe-invoice-dev.svc.cluster.local
|
||||
POSTGRES_PORT=5432
|
||||
|
||||
DATABASE_URL="postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?sslmode=disable"
|
||||
|
||||
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
|
||||
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
|
||||
echo "POSTGRES_DB=$POSTGRES_DB" >> $GITHUB_ENV
|
||||
echo "DATABASE_URL=$DATABASE_URL" >> $GITHUB_ENV
|
||||
|
||||
- name: Run Atlas migrations (DEV)
|
||||
run: |
|
||||
atlas migrate apply \
|
||||
--config file://./db/atlas/atlas.hcl \
|
||||
--env stripe_invoice_dev
|
||||
82
.github/workflows/deploy-postgres-prod.yml
vendored
82
.github/workflows/deploy-postgres-prod.yml
vendored
|
|
@ -1,82 +0,0 @@
|
|||
name: Deploy PROD DB Infrastructure
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
deploy:
|
||||
runs-on: mealcraft-runners
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y curl ca-certificates
|
||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||
|
||||
- name: Configure kubeconfig (in-cluster)
|
||||
run: |
|
||||
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||
|
||||
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||
kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||
kubectl config use-context runner-context
|
||||
|
||||
- name: Deploy PROD Postgres
|
||||
run: kubectl apply -f db/k8s/postgres/
|
||||
|
||||
# - name: Deploy PROD backups
|
||||
# run: kubectl apply -f db/k8s/backups/
|
||||
|
||||
migrate:
|
||||
runs-on: mealcraft-runners
|
||||
needs: deploy
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y curl ca-certificates
|
||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||
|
||||
- name: Configure kubeconfig (in-cluster)
|
||||
run: |
|
||||
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||
|
||||
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||
kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||
kubectl config use-context runner-context
|
||||
|
||||
- name: Install Atlas
|
||||
run: curl -sSf https://atlasgo.sh | sh
|
||||
|
||||
- name: Load PROD DB creds
|
||||
run: |
|
||||
export POSTGRES_USER=$(kubectl get secret postgres-prod-secret -o jsonpath='{.data.POSTGRES_USER}' | base64 -d)
|
||||
export POSTGRES_PASSWORD=$(kubectl get secret postgres-prod-secret -o jsonpath='{.data.POSTGRES_PASSWORD}' | base64 -d)
|
||||
|
||||
echo "POSTGRES_USER=$POSTGRES_USER" >> $GITHUB_ENV
|
||||
echo "POSTGRES_PASSWORD=$POSTGRES_PASSWORD" >> $GITHUB_ENV
|
||||
|
||||
- name: Run Atlas migrations (PROD)
|
||||
run: |
|
||||
atlas migrate apply \
|
||||
--config file://./db/atlas/atlas.hcl \
|
||||
--env stripe_invoice_prod
|
||||
137
.github/workflows/stripe-to-invoice.yml
vendored
137
.github/workflows/stripe-to-invoice.yml
vendored
|
|
@ -1,81 +1,82 @@
|
|||
# name: Build & Deploy stripe-to-invoice
|
||||
name: Build & Deploy stripe-to-invoice
|
||||
|
||||
# on:
|
||||
# push:
|
||||
# branches:
|
||||
# - main
|
||||
# - feature/**
|
||||
# - release/**
|
||||
# tags:
|
||||
# - "*"
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
- feature/**
|
||||
- release/**
|
||||
tags:
|
||||
- "*"
|
||||
|
||||
# jobs:
|
||||
# build:
|
||||
# runs-on: ubuntu-22.04
|
||||
# steps:
|
||||
# - uses: actions/checkout@v4
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ubuntu-22.04
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
# - name: Inject slug variables
|
||||
# uses: rlespinasse/github-slug-action@v4
|
||||
- name: Inject slug variables
|
||||
uses: rlespinasse/github-slug-action@v4
|
||||
|
||||
# - name: Login to Docker Hub
|
||||
# uses: docker/login-action@v3
|
||||
# with:
|
||||
# username: ${{ secrets.DOCKER_HUB_USERNAME }}
|
||||
# password: ${{ secrets.DOCKER_HUB_TOKEN }}
|
||||
- name: Login to Docker Hub
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
username: ${{ secrets.DOCKER_HUB_USERNAME }}
|
||||
password: ${{ secrets.DOCKER_HUB_TOKEN }}
|
||||
|
||||
# - name: Build image
|
||||
# run: |
|
||||
# docker build \
|
||||
# -f stripe_to_invoice/deployment/Dockerfile \
|
||||
# -t docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG \
|
||||
# .
|
||||
- name: Build image
|
||||
run: |
|
||||
docker build \
|
||||
-f stripe_to_invoice/deployment/Dockerfile \
|
||||
-t docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG \
|
||||
.
|
||||
|
||||
# - name: Push image
|
||||
# run: |
|
||||
# docker push docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG
|
||||
- name: Push image
|
||||
run: |
|
||||
docker push docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG
|
||||
|
||||
# deploy:
|
||||
# runs-on: mealcraft-runners
|
||||
# needs: build
|
||||
deploy:
|
||||
runs-on: mealcraft-runners
|
||||
needs: build
|
||||
|
||||
# steps:
|
||||
# - uses: actions/checkout@v4
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
# - name: Install kubectl
|
||||
# run: |
|
||||
# sudo apt-get update
|
||||
# sudo apt-get install -y curl ca-certificates gettext
|
||||
# curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||
# sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y curl ca-certificates gettext
|
||||
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
||||
sudo install -m 0755 kubectl /usr/local/bin/kubectl
|
||||
|
||||
# - name: Configure kubeconfig
|
||||
# run: |
|
||||
# KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||
# SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||
# CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
# NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||
- name: Configure kubeconfig
|
||||
run: |
|
||||
KUBE_HOST="https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT"
|
||||
SA_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
||||
CA_CERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
|
||||
NAMESPACE=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
||||
|
||||
# kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||
# kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||
# kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||
# kubectl config use-context runner-context
|
||||
kubectl config set-cluster microk8s --server="$KUBE_HOST" --certificate-authority="$CA_CERT"
|
||||
kubectl config set-credentials runner --token="$SA_TOKEN"
|
||||
kubectl config set-context runner-context --cluster=microk8s --user=runner --namespace="$NAMESPACE"
|
||||
kubectl config use-context runner-context
|
||||
|
||||
# - name: Inject slug variables
|
||||
# uses: rlespinasse/github-slug-action@v4
|
||||
- name: Inject slug variables
|
||||
uses: rlespinasse/github-slug-action@v4
|
||||
|
||||
# - name: Set environment
|
||||
# run: |
|
||||
# if [[ "$GITHUB_REF" == refs/heads/release/* || "$GITHUB_REF" == refs/tags/* ]]; then
|
||||
# echo "NAMESPACE=default" >> $GITHUB_ENV
|
||||
# echo "DB_ENV=prod" >> $GITHUB_ENV
|
||||
# else
|
||||
# echo "NAMESPACE=dev" >> $GITHUB_ENV
|
||||
# echo "DB_ENV=dev" >> $GITHUB_ENV
|
||||
# fi
|
||||
|
||||
# - name: Deploy
|
||||
# run: |
|
||||
# export IMAGE="docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG"
|
||||
# export NAMESPACE DB_ENV
|
||||
# envsubst < stripe_to_invoice/deployment/deployment.yaml | kubectl apply -f -
|
||||
- name: Set environment
|
||||
run: |
|
||||
if [[ "$GITHUB_REF" == refs/heads/release/* || "$GITHUB_REF" == refs/tags/* ]]; then
|
||||
echo "NAMESPACE=default" >> $GITHUB_ENV
|
||||
echo "DB_ENV=prod" >> $GITHUB_ENV
|
||||
echo "HOSTNAME=stripe-to-invoice.juntekim.com" >> $GITHUB_ENV
|
||||
else
|
||||
echo "NAMESPACE=dev" >> $GITHUB_ENV
|
||||
echo "DB_ENV=dev" >> $GITHUB_ENV
|
||||
echo "HOSTNAME=stripe-to-invoice.dev.juntekim.com" >> $GITHUB_ENV
|
||||
fi
|
||||
- name: Deploy
|
||||
run: |
|
||||
export IMAGE="docker.io/kimjunte/stripe_to_invoice:$GITHUB_REF_SLUG"
|
||||
export NAMESPACE DB_ENV
|
||||
envsubst < stripe_to_invoice/deployment/deployment.yaml | kubectl apply -f -
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@ spec:
|
|||
containerPort: 3000
|
||||
env:
|
||||
- name: NODE_ENV
|
||||
value: "production"
|
||||
value: "${DB_ENV}"
|
||||
|
||||
# ---- Database ----
|
||||
- name: DATABASE_URL
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue