Initial commit #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy to Cloudzilla | |
| on: | |
| push: | |
| branches: [main] | |
| workflow_dispatch: | |
| env: | |
| IMAGE_PREFIX: registry.cloudzilla.ai/rc-project-566ca024/ | |
| jobs: | |
| build-push: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: https://registry.cloudzilla.ai/ | |
| username: 'robot$rc-project-566ca024+imageuser' | |
| password: '${{ secrets.DOCKER_PASSWORD }}' | |
| - name: downcase REPO | |
| run: | | |
| image="${GITHUB_REPOSITORY#*/}" | |
| echo "IMAGE_NAME=${image,,}" >>${GITHUB_ENV} | |
| - name: Extract metadata (tags, labels) for Docker | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: ${{ env.IMAGE_PREFIX }}${{ env.IMAGE_NAME }} | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| - name: Deploy on Section | |
| env: | |
| SECTION_K8S_API_URL: '${{ secrets.SECTION_K8S_API_URL }}' | |
| SECTION_API_TOKEN: '${{ secrets.SECTION_API_TOKEN }}' | |
| DOCKER_SERVER: 'registry.cloudzilla.ai' | |
| DOCKER_USERNAME: 'robot$rc-project-566ca024+imageuser' | |
| DOCKER_PASSWORD: '${{ secrets.DOCKER_PASSWORD }}' | |
| FULL_IMAGE_WITH_TAG: '${{ env.DOCKER_METADATA_OUTPUT_TAGS }}' | |
| POD_NAME: '${{ env.IMAGE_NAME }}' | |
| DEBUG: 1 | |
| run: | | |
| #!/bin/bash | |
| test -z "${DEBUG}" || set -o xtrace | |
| set -o errexit | |
| cd "$(dirname "$0")" | |
| cert=/etc/ssl/certs/ca-certificates.crt | |
| main() { | |
| setCluster | |
| kubectl create secret docker-registry regcred --docker-server="${DOCKER_SERVER}" --docker-username="${DOCKER_USERNAME}" --docker-password="${DOCKER_PASSWORD}" --dry-run=client -o yaml | kubectl apply -f - | |
| envsubst '$FULL_IMAGE_WITH_TAG $POD_NAME' < ${GITHUB_WORKSPACE}/k8s/deploy.yaml | kubectl apply -f - | |
| kubectl apply -f ${GITHUB_WORKSPACE}/k8s/ingress-upstream.yaml | |
| kubectl rollout restart deployment "section-project-deployment" | |
| } | |
| setCluster() { | |
| # Configure kubectl to talk to Section | |
| # change the cert path depending on OS. | |
| if [[ "$OSTYPE" == "darwin"* ]]; then | |
| cert=/usr/local/etc/ca-certificates/cert.pem | |
| fi | |
| kubectl config set-cluster section \ | |
| --server=$SECTION_K8S_API_URL \ | |
| --certificate-authority=$cert | |
| kubectl config set-credentials section-user --token=$SECTION_API_TOKEN | |
| kubectl config set-context my-section-application --cluster=section --user=section-user --namespace=default | |
| kubectl config use-context my-section-application | |
| kubectl version | |
| } | |
| main | |
| "$@" |