125 lines
4.5 KiB
YAML
125 lines
4.5 KiB
YAML
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
check-changes:
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
node-labels: ${{ steps.filter.outputs.node-labels }}
|
|
coredns: ${{ steps.filter.outputs.coredns }}
|
|
traefik: ${{ steps.filter.outputs.traefik }}
|
|
steps:
|
|
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
|
|
id: filter
|
|
with:
|
|
filters: |
|
|
node-labels:
|
|
- 'node-labels/**'
|
|
coredns:
|
|
- 'coredns/**'
|
|
traefik:
|
|
- 'traefik/**'
|
|
|
|
deploy-node-labels:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.node-labels == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy
|
|
run: |
|
|
kubectl apply --server-side --field-manager=t000-n -f node-labels
|
|
|
|
deploy-coredns:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.coredns == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Deploy
|
|
run: |
|
|
kubectl apply -n kube-system -f coredns
|
|
- name: Restart coredns
|
|
run: |
|
|
kubectl -n kube-system rollout restart deployment coredns
|
|
|
|
deploy-traefik:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
if: ${{ needs.check-changes.outputs.traefik == 'true' || github.event_name == 'workflow_dispatch' }}
|
|
steps:
|
|
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Set ionos api credentials
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: ionos-api-credentials
|
|
secret-type: generic
|
|
data: |
|
|
{
|
|
"apiKey": "${{ secrets.IONOS_API_KEY }}"
|
|
}
|
|
- name: Set admin basic auth credentials
|
|
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5
|
|
with:
|
|
namespace: kube-system
|
|
secret-name: admin-basic-auth-credentials
|
|
secret-type: Opaque
|
|
data: |
|
|
{
|
|
"auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}"
|
|
}
|
|
- name: Deploy
|
|
uses: azure/k8s-deploy@6f7c489cecd8da05646259d9fa3daae92e095c7b # v5.0.4
|
|
with:
|
|
action: deploy
|
|
manifests: "traefik/"
|
|
strategy: basic
|
|
namespace: kube-system
|
|
|
|
deploy-docker-registry-secret:
|
|
runs-on: ubuntu-latest
|
|
needs: check-changes
|
|
steps:
|
|
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
|
|
- uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
|
|
- uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
|
|
with:
|
|
method: kubeconfig
|
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
|
- name: Set docker registry credentials
|
|
run: |
|
|
kubectl create secret docker-registry regcred-dockerhub \
|
|
--docker-server=https://index.docker.io/v1/ \
|
|
--docker-username="${{ secrets.DOCKER_USERNAME }}" \
|
|
--docker-password="${{ secrets.DOCKER_PASSWORD }}" \
|
|
--docker-email="${{ secrets.DOCKER_EMAIL }}" \
|
|
--namespace=default \
|
|
--dry-run=client -o yaml | kubectl apply -f -
|
|
- name: Configure image pull secret globally
|
|
run: |
|
|
kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "regcred-dockerhub"}]}'
|