Renovate Bot
1ce690c199
All checks were successful
Deploy / check-changes (push) Successful in 32s
Deploy / deploy-node-labels (push) Has been skipped
Deploy / deploy-coredns (push) Has been skipped
Deploy / deploy-traefik (push) Has been skipped
Deploy / deploy-crowdsec (push) Has been skipped
Deploy / deploy-docker-registry-secret (push) Successful in 6s
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [azure/setup-kubectl](https://github.com/azure/setup-kubectl) | action | major | `v4.0.1` → `v5.0.0` | --- ### Release Notes <details> <summary>azure/setup-kubectl (azure/setup-kubectl)</summary> ### [`v5.0.0`](https://github.com/Azure/setup-kubectl/releases/tag/v5.0.0) [Compare Source](https://github.com/azure/setup-kubectl/compare/v4.0.1...v5.0.0) ##### Changed - [#​233](https://github.com/azure/setup-kubectl/issues/233) [Update Node.js runtime from node20 to node24](https://github.com/Azure/setup-kubectl/pull/233) - [#​228](https://github.com/azure/setup-kubectl/issues/228) [Replace cdn.dl.k8s.io with dl.k8s.io](https://github.com/Azure/setup-kubectl/pull/228) - [#​219](https://github.com/azure/setup-kubectl/issues/219) [Remove download redirects, use cdn.dl.k8s.io domain](https://github.com/Azure/setup-kubectl/pull/219) - [#​190](https://github.com/azure/setup-kubectl/issues/190) [Update stableVersionUrl to dl.k8s.io](https://github.com/Azure/setup-kubectl/pull/190) - [#​235](https://github.com/azure/setup-kubectl/issues/235) [Bump undici from 6.23.0 to 6.24.1](https://github.com/Azure/setup-kubectl/pull/235) - [#​226](https://github.com/azure/setup-kubectl/issues/226) [Bump undici and @​actions/http-client](https://github.com/Azure/setup-kubectl/pull/226) - [#​230](https://github.com/azure/setup-kubectl/issues/230) [Bump minimatch](https://github.com/Azure/setup-kubectl/pull/230) ##### Added - [#​172](https://github.com/azure/setup-kubectl/issues/172) [Enhance version handling: auto-resolve kubectl major.minor to latest patch](https://github.com/Azure/setup-kubectl/pull/172) - [#​171](https://github.com/azure/setup-kubectl/issues/171) [Add husky precommit check](https://github.com/Azure/setup-kubectl/pull/171) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=--> Reviewed-on: https://gitea.t000-n.de/t.behrendt/k/pulls/59 Reviewed-by: t.behrendt <t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>
162 lines
6.1 KiB
YAML
162 lines
6.1 KiB
YAML
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
check-changes:
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
node-labels: ${{ steps.filter.outputs.node-labels }}
|
|
coredns: ${{ steps.filter.outputs.coredns }}
|
|
traefik: ${{ steps.filter.outputs.traefik }}
|
|
crowdsec: ${{ steps.filter.outputs.crowdsec }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
|
|
id: filter
|
|
with:
|
|
filters: |
|
|
node-labels:
|
|
- 'node-labels/**'
|
|
coredns:
|
|
- 'coredns/**'
|
|
traefik:
|
|
- 'traefik/**'
|
|
crowdsec:
|
|
- 'crowdsec/**'
|
|
|
|
deploy-node-labels:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.node-labels == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy
|
|
run: |
|
|
kubectl apply --server-side --field-manager=t000-n -f node-labels
|
|
|
|
deploy-coredns:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.coredns == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy
|
|
run: |
|
|
kubectl apply -n kube-system -f coredns
|
|
- name: Restart coredns
|
|
run: |
|
|
kubectl -n kube-system rollout restart deployment coredns
|
|
|
|
deploy-traefik:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.traefik == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Set ionos api credentials
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: ionos-api-credentials
|
|
secret-type: generic
|
|
data: |
|
|
{
|
|
"apiKey": "${{ secrets.IONOS_API_KEY }}"
|
|
}
|
|
- name: Set admin basic auth credentials
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: admin-basic-auth-credentials
|
|
secret-type: Opaque
|
|
data: |
|
|
{
|
|
"auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}"
|
|
}
|
|
- name: Set crowdsec bouncer api key
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: crowdsec-bouncer-api-key
|
|
secret-type: generic
|
|
data: |
|
|
{
|
|
"api-key": "${{ secrets.CROWDSEC_BOUNCER_API_KEY }}"
|
|
}
|
|
- name: Deploy
|
|
uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
|
|
with:
|
|
action: deploy
|
|
manifests: "traefik/"
|
|
strategy: basic
|
|
namespace: kube-system
|
|
|
|
deploy-crowdsec:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.crowdsec == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@a7cfa06300b45468b86d351e78a0330ee3ef483d # 0.0.4
|
|
id: namespace
|
|
with:
|
|
repo: ${{ github.repository }}
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
|
|
with:
|
|
version: "3.15.0"
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy helm
|
|
uses: helmfile/helmfile-action@c58e4737b8a69764d8294a70fcbcb0a63573dae9 # v2.3.1
|
|
with:
|
|
helmfile-args: apply
|
|
helmfile-workdirectory: "crowdsec"
|
|
|
|
deploy-docker-registry-secret:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Set docker registry credentials
|
|
run: |
|
|
kubectl create secret docker-registry regcred-dockerhub \
|
|
--docker-server=https://index.docker.io/v1/ \
|
|
--docker-username="${{ secrets.DOCKER_USERNAME }}" \
|
|
--docker-password="${{ secrets.DOCKER_PASSWORD }}" \
|
|
--docker-email="${{ secrets.DOCKER_EMAIL }}" \
|
|
--namespace=default \
|
|
--dry-run=client -o yaml | kubectl apply -f -
|
|
- name: Configure image pull secret globally
|
|
run: |
|
|
kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regcred-dockerhub"}]}'
|