kimjunte/juntekim.com
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 13

save

Browse source
This commit is contained in:
Jun-te Kim 2025-12-06 21:31:51 +00:00
parent 7fb4636a98
commit cb5b325790
2 changed files with 55 additions and 68 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

75
.github/workflows/k8s_traefik_init_setup.yml vendored
View file

@ -7,6 +7,13 @@ jobs:
bootstrap: bootstrap:
runs-on: mealcraft-runners runs-on: mealcraft-runners
# -----------------------------------------------------
# REQUIRED: Use Docker DinD job container
# -----------------------------------------------------
container:
image: docker:24.0-dind
options: --privileged
steps: steps:
# ----------------------------------------------------- # -----------------------------------------------------
# Checkout Repo # Checkout Repo
@ -18,10 +25,9 @@ jobs:
# ----------------------------------------------------- # -----------------------------------------------------
- name: Install kubectl - name: Install kubectl
run: | run: |
sudo apt-get update apk add --no-cache curl ca-certificates bash
sudo apt-get install -y ca-certificates curl
curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
sudo install -m 0755 kubectl /usr/local/bin/kubectl install -m 0755 kubectl /usr/local/bin/kubectl
# ----------------------------------------------------- # -----------------------------------------------------
# Configure kubeconfig via ARC pod token # Configure kubeconfig via ARC pod token
@ -39,43 +45,26 @@ jobs:
kubectl config use-context runner-context kubectl config use-context runner-context
# ----------------------------------------------------- # -----------------------------------------------------
# Install buildctl (standalone BuildKit client) # Docker Login
# ----------------------------------------------------- # -----------------------------------------------------
- name: Install buildctl - name: Login to Docker Hub
run: | uses: docker/login-action@v3
sudo apt-get update && sudo apt-get install -y curl with:
curl -sSL https://github.com/moby/buildkit/releases/download/v0.12.5/buildkit-v0.12.5.linux-amd64.tar.gz -o buildkit.tar.gz username: ${{ secrets.DOCKER_HUB_USERNAME }}
tar -xzf buildkit.tar.gz password: ${{ secrets.DOCKER_HUB_PASSWORD }}
sudo mv bin/buildctl /usr/local/bin/
sudo chmod +x /usr/local/bin/buildctl
# ----------------------------------------------------- # -----------------------------------------------------
# Build & Push Docker Image (NO docker, NO buildx, NO daemon) # Build & Push Docker Image (Docker-in-Docker)
# ----------------------------------------------------- # -----------------------------------------------------
- name: Build & Push Traefik Image - name: Build and Push Traefik Image
env: uses: docker/build-push-action@v5
DOCKER_USER: ${{ secrets.DOCKER_HUB_USERNAME }} with:
DOCKER_PASS: ${{ secrets.DOCKER_HUB_PASSWORD }} context: ./traefik
IMAGE_SHA: docker.io/kimjunte/edge_router:${{ github.sha }} file: ./traefik/Dockerfile
IMAGE_LATEST: docker.io/kimjunte/edge_router:latest push: true
run: | tags: |
AUTH=$(printf "%s:%s" "$DOCKER_USER" "$DOCKER_PASS" | base64 -w0) docker.io/kimjunte/edge_router:${{ github.sha }}
docker.io/kimjunte/edge_router:latest
# Build + Push SHA tag
buildctl build \
--frontend dockerfile.v0 \
--local context="${GITHUB_WORKSPACE}/traefik" \
--local dockerfile="${GITHUB_WORKSPACE}/traefik" \
--opt platform=linux/amd64 \
--output type=registry,name=${IMAGE_SHA},push=true,registry.auth=${AUTH}
# Build + Push latest tag
buildctl build \
--frontend dockerfile.v0 \
--local context="${GITHUB_WORKSPACE}/traefik" \
--local dockerfile="${GITHUB_WORKSPACE}/traefik" \
--opt platform=linux/amd64 \
--output type=registry,name=${IMAGE_LATEST},push=true,registry.auth=${AUTH}
# ----------------------------------------------------- # -----------------------------------------------------
# Apply Storage Classes + PVCs # Apply Storage Classes + PVCs
@ -118,22 +107,14 @@ jobs:
kubectl apply -f traefik/who-am-i/whoami-ingressroute.yml kubectl apply -f traefik/who-am-i/whoami-ingressroute.yml
# ----------------------------------------------------- # -----------------------------------------------------
# Create registry secret in default namespace # Registry secrets
# ----------------------------------------------------- # -----------------------------------------------------
- name: Create registry secret (default) - name: Create registry secret (default)
run: | run: kubectl apply -f traefik/docker-registry-credentials/docker-credentials.yml
kubectl apply -f traefik/docker-registry-credentials/docker-credentials.yml
# -----------------------------------------------------
# Ensure staging namespace exists
# -----------------------------------------------------
- name: Create staging namespace - name: Create staging namespace
run: | run: kubectl get ns staging >/dev/null 2>&1 || kubectl create namespace staging
kubectl get ns staging >/dev/null 2>&1 || kubectl create namespace staging
# -----------------------------------------------------
# Apply registry secret to staging
# -----------------------------------------------------
- name: Registry secret to staging - name: Registry secret to staging
run: | run: |
sed 's/namespace: default/namespace: staging/' \ sed 's/namespace: default/namespace: staging/' \

48
github_runner/install/install_arc.sh
View file

@ -11,30 +11,36 @@ set -ex
# sudo usermod -aG microk8s $USER # sudo usermod -aG microk8s $USER
# sudo chown -f -R $USER ~/.kube # sudo chown -f -R $USER ~/.kube
# helm uninstall arc -n arc-systems || true helm uninstall arc -n arc-systems || true
# echo "=== Install ARC Scale Set Controller ===" echo "=== Install ARC Scale Set Controller ==="
# helm install arc \ helm install arc \
# --namespace arc-systems \ --namespace arc-systems \
# --create-namespace \ --create-namespace \
# oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set-controller oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set-controller
# helm uninstall mealcraft-runners -n arc-systems || true helm uninstall mealcraft-runners -n arc-systems || true
# helm install mealcraft-runners \ helm install mealcraft-runners \
# --namespace arc-systems \ --namespace arc-systems \
# --create-namespace \ --create-namespace \
# --set runnerScaleSetName="mealcraft-runners" \ --set runnerScaleSetName="mealcraft-runners" \
# --set githubConfigUrl="https://github.com/MealCraft" \ --set githubConfigUrl="https://github.com/MealCraft" \
# --set githubConfigSecret.name="github-secret" \ --set githubConfigSecret.name="github-secret" \
# --set githubConfigSecret.github_token="$GITHUB_PAT" \ --set githubConfigSecret.github_token="$GITHUB_PAT" \
# --set containerMode.type="kubernetes" \ \
# --set containerMode.kubernetesModeDefaultContainer.image="ubuntu:22.04" \ --set dockerInDockerEnabled=true \
# --set containerMode.kubernetesModeWorkVolumeClaim.accessModes[0]="ReadWriteOnce" \ \
# --set containerMode.kubernetesModeWorkVolumeClaim.storageClassName="microk8s-hostpath" \ --set containerMode.type="kubernetes" \
# --set containerMode.kubernetesModeWorkVolumeClaim.resources.requests.storage="1Gi" \ --set containerMode.kubernetesModeDefaultContainer.image="docker:24.0-dind" \
# --set runnerLabels[0]="mealcraft" \ --set containerMode.kubernetesModeDefaultContainer.options="--privileged" \
# oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set \
--set containerMode.kubernetesModeWorkVolumeClaim.accessModes[0]="ReadWriteOnce" \
--set containerMode.kubernetesModeWorkVolumeClaim.storageClassName="microk8s-hostpath" \
--set containerMode.kubernetesModeWorkVolumeClaim.resources.requests.storage="20Gi" \
\
--set runnerLabels[0]="mealcraft" \
oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set
echo "=== Applying RBAC for runner ===" echo "=== Applying RBAC for runner ==="