Compare commits
7 Commits
0.0.12
..
feb33eb0dc
| Author | SHA1 | Date | |
|---|---|---|---|
 t.behrendt
|
feb33eb0dc
|
||
|
t.behrendt
|
d03c9283b1
|
||
|
t.behrendt
|
12909ec275
|
||
 renovate-bot
|
dc62bc4e6a | ||
|
renovate-bot
|
d7d914ca4a | ||
|
renovate-bot
|
5982457d82 | ||
|
renovate-bot
|
2d3fc7613a |
+29
-77
@@ -3,36 +3,26 @@ name: Deploy
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
# Optional: Override the default k8s directory path
|
||||
k8s_dir:
|
||||
description: "Path to Kubernetes manifests directory"
|
||||
description: "Override the default k8s directory path (k8s/)"
|
||||
required: false
|
||||
default: "k8s/"
|
||||
type: string
|
||||
# Optional: Override the default helmfile path
|
||||
helmfile_path:
|
||||
description: "Path to helmfile.yaml"
|
||||
description: "Override the default helmfile path (hemfile.yaml)"
|
||||
required: false
|
||||
default: "helmfile.yaml"
|
||||
type: string
|
||||
# Optional: Skip Helm deployment even if helmfile exists
|
||||
skip_helm_deployment:
|
||||
description: "Skip Helm deployment even if helmfile.yaml exists"
|
||||
required: false
|
||||
default: false
|
||||
type: boolean
|
||||
# Optional: Custom secrets to create (JSON array of secret objects)
|
||||
custom_secrets:
|
||||
description: "JSON array of secrets to create. Each secret should have: name, type, data"
|
||||
skip_shared_secrets_deployment:
|
||||
description: "Skip shared secrets deployment (e.g. restic backup secret)"
|
||||
required: false
|
||||
default: "[]"
|
||||
type: string
|
||||
# Optional: Branch to deploy from
|
||||
deploy_branch:
|
||||
description: "Branch to deploy from"
|
||||
required: false
|
||||
default: "main"
|
||||
type: string
|
||||
default: false
|
||||
type: boolean
|
||||
|
||||
jobs:
|
||||
detect-service-type:
|
||||
@@ -63,14 +53,32 @@ jobs:
|
||||
echo "No k8s directory found at ${{ inputs.k8s_dir }}"
|
||||
fi
|
||||
|
||||
deploy-shared-secrets:
|
||||
runs-on: ubuntu-latest
|
||||
needs: detect-service-type
|
||||
if: inputs.skip_shared_secrets_deployment != 'true'
|
||||
steps:
|
||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
||||
- name: Set restic backup secret
|
||||
uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
|
||||
with:
|
||||
namespace: ${{ steps.namespace.outputs.namespace }}
|
||||
secret-name: backupsidecar-secret
|
||||
secret-type: generic
|
||||
data: |
|
||||
{
|
||||
"restic_password": "${{ secrets.RESTIC_PASSWORD }}",
|
||||
"restic_rest_username": "${{ secrets.RESTIC_REST_USERNAME }}",
|
||||
"restic_rest_password": "${{ secrets.RESTIC_REST_PASSWORD }}",
|
||||
"gotify_token": "${{ secrets.GOTIFY_TOKEN }}"
|
||||
}
|
||||
|
||||
deploy-k8s:
|
||||
runs-on: ubuntu-latest
|
||||
needs: detect-service-type
|
||||
if: needs.detect-service-type.outputs.has_k8s == 'true'
|
||||
steps:
|
||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
||||
with:
|
||||
ref: ${{ inputs.deploy_branch }}
|
||||
- uses: ./.gitea/actions/extract-namespace-from-repo-name
|
||||
id: namespace
|
||||
with:
|
||||
@@ -80,31 +88,8 @@ jobs:
|
||||
with:
|
||||
method: kubeconfig
|
||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||
- name: Create custom secrets
|
||||
id: create-secrets
|
||||
run: |
|
||||
# Parse custom secrets from input
|
||||
SECRETS='${{ inputs.custom_secrets }}'
|
||||
if [ "$SECRETS" != "[]" ]; then
|
||||
echo "Creating custom secrets..."
|
||||
echo "$SECRETS" | jq -c '.[]' | while read -r secret; do
|
||||
SECRET_NAME=$(echo "$secret" | jq -r '.name')
|
||||
SECRET_TYPE=$(echo "$secret" | jq -r '.type // "generic"')
|
||||
SECRET_DATA=$(echo "$secret" | jq -r '.data')
|
||||
|
||||
echo "Creating secret: $SECRET_NAME (type: $SECRET_TYPE)"
|
||||
|
||||
# Create the secret using kubectl
|
||||
echo "$SECRET_DATA" | kubectl create secret $SECRET_TYPE $SECRET_NAME \
|
||||
--from-literal=secret.json="$SECRET_DATA" \
|
||||
--namespace=${{ steps.namespace.outputs.namespace }} \
|
||||
--dry-run=client -o yaml | kubectl apply -f -
|
||||
done
|
||||
else
|
||||
echo "No custom secrets to create"
|
||||
fi
|
||||
- name: Deploy Kubernetes manifests
|
||||
uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
|
||||
uses: azure/k8s-deploy@c7ebd0d5f39477a23f1b5dea0f52e6db04adf28e # v6.0.0
|
||||
with:
|
||||
action: deploy
|
||||
manifests: "${{ inputs.k8s_dir }}"
|
||||
@@ -120,8 +105,6 @@ jobs:
|
||||
inputs.skip_helm_deployment != 'true'
|
||||
steps:
|
||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
||||
with:
|
||||
ref: ${{ inputs.deploy_branch }}
|
||||
- uses: ./.gitea/actions/extract-namespace-from-repo-name
|
||||
id: namespace
|
||||
with:
|
||||
@@ -132,38 +115,15 @@ jobs:
|
||||
with:
|
||||
method: kubeconfig
|
||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||
- name: Create custom secrets
|
||||
id: create-secrets
|
||||
run: |
|
||||
# Parse custom secrets from input
|
||||
SECRETS='${{ inputs.custom_secrets }}'
|
||||
if [ "$SECRETS" != "[]" ]; then
|
||||
echo "Creating custom secrets..."
|
||||
echo "$SECRETS" | jq -c '.[]' | while read -r secret; do
|
||||
SECRET_NAME=$(echo "$secret" | jq -r '.name')
|
||||
SECRET_TYPE=$(echo "$secret" | jq -r '.type // "generic"')
|
||||
SECRET_DATA=$(echo "$secret" | jq -r '.data')
|
||||
|
||||
echo "Creating secret: $SECRET_NAME (type: $SECRET_TYPE)"
|
||||
|
||||
# Create the secret using kubectl
|
||||
echo "$SECRET_DATA" | kubectl create secret $SECRET_TYPE $SECRET_NAME \
|
||||
--from-literal=secret.json="$SECRET_DATA" \
|
||||
--namespace=${{ steps.namespace.outputs.namespace }} \
|
||||
--dry-run=client -o yaml | kubectl apply -f -
|
||||
done
|
||||
else
|
||||
echo "No custom secrets to create"
|
||||
fi
|
||||
- name: Deploy Helm
|
||||
uses: helmfile/helmfile-action@8676eae58f17e6232c519147a0729f5f3d67a8a0 # v2.4.2
|
||||
uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
|
||||
with:
|
||||
helmfile-args: apply
|
||||
|
||||
# Summary job that always runs to show what was deployed
|
||||
deployment-summary:
|
||||
runs-on: ubuntu-latest
|
||||
needs: [ detect-service-type, deploy-k8s, deploy-helm ]
|
||||
needs: [detect-service-type, deploy-k8s, deploy-helm]
|
||||
if: always()
|
||||
steps:
|
||||
- name: Deployment Summary
|
||||
@@ -187,11 +147,3 @@ jobs:
|
||||
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "**Service Type**: ${{ needs.detect-service-type.outputs.has_helmfile == 'true' && 'Helm + Kubernetes' || 'Kubernetes Only' }}" >> $GITHUB_STEP_SUMMARY
|
||||
|
||||
# Show custom secrets info
|
||||
SECRETS='${{ inputs.custom_secrets }}'
|
||||
if [ "$SECRETS" != "[]" ]; then
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "**Custom Secrets Created**: $(echo "$SECRETS" | jq length)" >> $GITHUB_STEP_SUMMARY
|
||||
echo "$SECRETS" | jq -r '.[] | "- " + .name + " (" + (.type // "generic") + ")"' >> $GITHUB_STEP_SUMMARY
|
||||
fi
|
||||
|
||||
@@ -90,7 +90,7 @@ jobs:
|
||||
method: kubeconfig
|
||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||
- name: Validate Helm
|
||||
uses: helmfile/helmfile-action@8676eae58f17e6232c519147a0729f5f3d67a8a0 # v2.4.2
|
||||
uses: helmfile/helmfile-action@02671705b1dda1dc4b0a4ddd4f9f1ea8f4568c6f # v2.4.3
|
||||
with:
|
||||
helmfile-args: diff
|
||||
|
||||
|
||||
@@ -18,10 +18,10 @@ jobs:
|
||||
fetch-depth: 0
|
||||
- name: Increment tag
|
||||
id: tag
|
||||
uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@74d41d9bd9c243f295b53762681c714f3d24fd4c # 0.1.31
|
||||
uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@ef0c23189db33220a73022d8c29a27709d0df440 # 0.1.32
|
||||
with:
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
- name: Push tag
|
||||
uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@f386e2570df6a796ba0a69865c89ea0c1a7109ab # 0.2.2
|
||||
uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
|
||||
with:
|
||||
tag: ${{ steps.tag.outputs.new-tag }}
|
||||
|
||||
+1
-4
@@ -1,7 +1,4 @@
|
||||
{
|
||||
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
||||
"extends": [
|
||||
"local>t.behrendt/renovate-configs:common",
|
||||
"local>t.behrendt/renovate-configs:action"
|
||||
]
|
||||
"extends": ["local>t.behrendt/renovate-configs:action"]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user