Renovate Bot
caf741d9df
All checks were successful
Deploy / check-changes (push) Successful in 11s
Deploy / deploy-node-labels (push) Has been skipped
Deploy / deploy-coredns (push) Has been skipped
Deploy / deploy-traefik (push) Has been skipped
Deploy / deploy-crowdsec (push) Has been skipped
Deploy / deploy-docker-registry-secret (push) Successful in 26s
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [helmfile/helmfile-action](https://github.com/helmfile/helmfile-action) | action | patch | `v2.4.0` → `v2.4.1` | --- ### Release Notes <details> <summary>helmfile/helmfile-action (helmfile/helmfile-action)</summary> ### [`v2.4.1`](https://github.com/helmfile/helmfile-action/releases/tag/v2.4.1) [Compare Source](https://github.com/helmfile/helmfile-action/compare/v2.4.0...v2.4.1) ##### What's Changed - build(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​664](https://github.com/helmfile/helmfile-action/pull/664) - build(deps-dev): bump typescript from 5.9.3 to 6.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​663](https://github.com/helmfile/helmfile-action/pull/663) **Full Changelog**: <https://github.com/helmfile/helmfile-action/compare/v2.4.0...v2.4.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=--> Reviewed-on: #61 Reviewed-by: t.behrendt <t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>
162 lines
6.1 KiB
YAML
162 lines
6.1 KiB
YAML
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
check-changes:
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
node-labels: ${{ steps.filter.outputs.node-labels }}
|
|
coredns: ${{ steps.filter.outputs.coredns }}
|
|
traefik: ${{ steps.filter.outputs.traefik }}
|
|
crowdsec: ${{ steps.filter.outputs.crowdsec }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
|
|
id: filter
|
|
with:
|
|
filters: |
|
|
node-labels:
|
|
- 'node-labels/**'
|
|
coredns:
|
|
- 'coredns/**'
|
|
traefik:
|
|
- 'traefik/**'
|
|
crowdsec:
|
|
- 'crowdsec/**'
|
|
|
|
deploy-node-labels:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.node-labels == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy
|
|
run: |
|
|
kubectl apply --server-side --field-manager=t000-n -f node-labels
|
|
|
|
deploy-coredns:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.coredns == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy
|
|
run: |
|
|
kubectl apply -n kube-system -f coredns
|
|
- name: Restart coredns
|
|
run: |
|
|
kubectl -n kube-system rollout restart deployment coredns
|
|
|
|
deploy-traefik:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.traefik == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Set ionos api credentials
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: ionos-api-credentials
|
|
secret-type: generic
|
|
data: |
|
|
{
|
|
"apiKey": "${{ secrets.IONOS_API_KEY }}"
|
|
}
|
|
- name: Set admin basic auth credentials
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: admin-basic-auth-credentials
|
|
secret-type: Opaque
|
|
data: |
|
|
{
|
|
"auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}"
|
|
}
|
|
- name: Set crowdsec bouncer api key
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: crowdsec-bouncer-api-key
|
|
secret-type: generic
|
|
data: |
|
|
{
|
|
"api-key": "${{ secrets.CROWDSEC_BOUNCER_API_KEY }}"
|
|
}
|
|
- name: Deploy
|
|
uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
|
|
with:
|
|
action: deploy
|
|
manifests: "traefik/"
|
|
strategy: basic
|
|
namespace: kube-system
|
|
|
|
deploy-crowdsec:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.crowdsec == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@c373c34c836716e663e2d6379e686997bfd7746c # 0.0.6
|
|
id: namespace
|
|
with:
|
|
repo: ${{ github.repository }}
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
|
|
with:
|
|
version: "3.15.0"
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy helm
|
|
uses: helmfile/helmfile-action@d9fefe29b0d07e9ab187ecfe1d63eff91e0a070c # v2.4.1
|
|
with:
|
|
helmfile-args: apply
|
|
helmfile-workdirectory: "crowdsec"
|
|
|
|
deploy-docker-registry-secret:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Set docker registry credentials
|
|
run: |
|
|
kubectl create secret docker-registry regcred-dockerhub \
|
|
--docker-server=https://index.docker.io/v1/ \
|
|
--docker-username="${{ secrets.DOCKER_USERNAME }}" \
|
|
--docker-password="${{ secrets.DOCKER_PASSWORD }}" \
|
|
--docker-email="${{ secrets.DOCKER_EMAIL }}" \
|
|
--namespace=default \
|
|
--dry-run=client -o yaml | kubectl apply -f -
|
|
- name: Configure image pull secret globally
|
|
run: |
|
|
kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regcred-dockerhub"}]}'
|