Compare commits
11 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 95f593321c | |||
| 6877d117be | |||
| 517e187a4a | |||
| 7686581adc | |||
| 895b3b3609 | |||
| 9613169e92 | |||
| fa318eb32f | |||
| 26c0dc751f | |||
| 401e4dbfa5 | |||
| 45dc7056e3 | |||
| 4e1d3c0090 |
@@ -28,6 +28,11 @@ on:
|
|||||||
required: false
|
required: false
|
||||||
default: "{}"
|
default: "{}"
|
||||||
type: string
|
type: string
|
||||||
|
namespace:
|
||||||
|
description: "Override the default namespace (extracted from repository name)"
|
||||||
|
required: false
|
||||||
|
default: ""
|
||||||
|
type: string
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
detect-service-type:
|
detect-service-type:
|
||||||
@@ -36,7 +41,7 @@ jobs:
|
|||||||
has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
|
has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
|
||||||
has_k8s: ${{ steps.check-k8s.outputs.exists }}
|
has_k8s: ${{ steps.check-k8s.outputs.exists }}
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- name: Check if helmfile.yaml exists
|
- name: Check if helmfile.yaml exists
|
||||||
id: check-helmfile
|
id: check-helmfile
|
||||||
run: |
|
run: |
|
||||||
@@ -63,20 +68,20 @@ jobs:
|
|||||||
needs: detect-service-type
|
needs: detect-service-type
|
||||||
if: inputs.skip_shared_secrets_deployment != 'true'
|
if: inputs.skip_shared_secrets_deployment != 'true'
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
|
||||||
id: namespace
|
id: namespace
|
||||||
with:
|
with:
|
||||||
repo: ${{ github.repository }}
|
repo: ${{ github.repository }}
|
||||||
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
||||||
- uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
|
- uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
|
||||||
with:
|
with:
|
||||||
method: kubeconfig
|
method: kubeconfig
|
||||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||||
- name: Set restic backup secret
|
- name: Set restic backup secret
|
||||||
uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
|
uses: azure/k8s-create-secret@ba774cded95cc0d795806a986fecd1205a6c2320 # v6.0.1
|
||||||
with:
|
with:
|
||||||
namespace: ${{ steps.namespace.outputs.namespace }}
|
namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
|
||||||
secret-name: backupsidecar-secret
|
secret-name: backupsidecar-secret
|
||||||
secret-type: generic
|
secret-type: generic
|
||||||
data: |
|
data: |
|
||||||
@@ -92,13 +97,13 @@ jobs:
|
|||||||
needs: detect-service-type
|
needs: detect-service-type
|
||||||
if: needs.detect-service-type.outputs.has_k8s == 'true'
|
if: needs.detect-service-type.outputs.has_k8s == 'true'
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
|
||||||
id: namespace
|
id: namespace
|
||||||
with:
|
with:
|
||||||
repo: ${{ github.repository }}
|
repo: ${{ github.repository }}
|
||||||
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
||||||
- uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
|
- uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
|
||||||
with:
|
with:
|
||||||
method: kubeconfig
|
method: kubeconfig
|
||||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||||
@@ -108,7 +113,7 @@ jobs:
|
|||||||
action: deploy
|
action: deploy
|
||||||
manifests: "${{ inputs.k8s_dir }}"
|
manifests: "${{ inputs.k8s_dir }}"
|
||||||
strategy: basic
|
strategy: basic
|
||||||
namespace: ${{ steps.namespace.outputs.namespace }}
|
namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
|
||||||
|
|
||||||
deploy-helm:
|
deploy-helm:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
@@ -118,21 +123,22 @@ jobs:
|
|||||||
needs.detect-service-type.outputs.has_k8s == 'true' &&
|
needs.detect-service-type.outputs.has_k8s == 'true' &&
|
||||||
inputs.skip_helm_deployment != 'true'
|
inputs.skip_helm_deployment != 'true'
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
|
||||||
id: namespace
|
id: namespace
|
||||||
with:
|
with:
|
||||||
repo: ${{ github.repository }}
|
repo: ${{ github.repository }}
|
||||||
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
||||||
- uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
|
- uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
|
||||||
- uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
|
- uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
|
||||||
with:
|
with:
|
||||||
method: kubeconfig
|
method: kubeconfig
|
||||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||||
- name: Deploy Helm
|
- name: Deploy Helm
|
||||||
uses: helmfile/helmfile-action@f6f7844b9e6d9f5ac8cf4cdae8ada1a42755c036 # v2.4.4
|
uses: helmfile/helmfile-action@daefb3e1fa5a91b7a88d30870d20da4896944818 # v2.4.5
|
||||||
with:
|
with:
|
||||||
helmfile-args: apply
|
helmfile-args: apply
|
||||||
|
namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
|
||||||
env: ${{ fromJSON(inputs.helmfile_env) }}
|
env: ${{ fromJSON(inputs.helmfile_env) }}
|
||||||
|
|
||||||
# Summary job that always runs to show what was deployed
|
# Summary job that always runs to show what was deployed
|
||||||
|
|||||||
@@ -14,15 +14,15 @@ jobs:
|
|||||||
name: Release
|
name: Release
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
- name: Increment tag
|
- name: Increment tag
|
||||||
id: tag
|
id: tag
|
||||||
uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@ef0c23189db33220a73022d8c29a27709d0df440 # 0.1.32
|
uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@e393dbb067c09fd43519392572ccf63b66cba92d # 0.1.39
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.GITEA_TOKEN }}
|
token: ${{ secrets.GITEA_TOKEN }}
|
||||||
- name: Push tag
|
- name: Push tag
|
||||||
uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
|
uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@29f50ea246d5d9a62ac3c611fa5c8a6e9846df5a # 0.2.8
|
||||||
with:
|
with:
|
||||||
tag: ${{ steps.tag.outputs.new-tag }}
|
tag: ${{ steps.tag.outputs.new-tag }}
|
||||||
|
|||||||
@@ -23,6 +23,11 @@ on:
|
|||||||
required: false
|
required: false
|
||||||
default: "{}"
|
default: "{}"
|
||||||
type: string
|
type: string
|
||||||
|
namespace:
|
||||||
|
description: "Override the default namespace (extracted from repository name)"
|
||||||
|
required: false
|
||||||
|
default: ""
|
||||||
|
type: string
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
detect-service-type:
|
detect-service-type:
|
||||||
@@ -31,7 +36,7 @@ jobs:
|
|||||||
has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
|
has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
|
||||||
has_k8s: ${{ steps.check-k8s.outputs.exists }}
|
has_k8s: ${{ steps.check-k8s.outputs.exists }}
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- name: Check if helmfile.yaml exists
|
- name: Check if helmfile.yaml exists
|
||||||
id: check-helmfile
|
id: check-helmfile
|
||||||
run: |
|
run: |
|
||||||
@@ -58,20 +63,20 @@ jobs:
|
|||||||
needs: detect-service-type
|
needs: detect-service-type
|
||||||
if: needs.detect-service-type.outputs.has_k8s == 'true'
|
if: needs.detect-service-type.outputs.has_k8s == 'true'
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
|
||||||
id: namespace
|
id: namespace
|
||||||
with:
|
with:
|
||||||
repo: ${{ github.repository }}
|
repo: ${{ github.repository }}
|
||||||
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
||||||
- uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
|
- uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
|
||||||
with:
|
with:
|
||||||
method: kubeconfig
|
method: kubeconfig
|
||||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||||
- name: Validate k8s manifests
|
- name: Validate k8s manifests
|
||||||
uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
|
uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
|
||||||
with:
|
with:
|
||||||
namespace: ${{ steps.namespace.outputs.namespace }}
|
namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
|
||||||
lintType: dryrun
|
lintType: dryrun
|
||||||
manifests: "${{ inputs.k8s_dir }}"
|
manifests: "${{ inputs.k8s_dir }}"
|
||||||
|
|
||||||
@@ -83,21 +88,22 @@ jobs:
|
|||||||
needs.detect-service-type.outputs.has_k8s == 'true' &&
|
needs.detect-service-type.outputs.has_k8s == 'true' &&
|
||||||
inputs.skip_helm_validation != 'true'
|
inputs.skip_helm_validation != 'true'
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||||
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
|
- uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
|
||||||
id: namespace
|
id: namespace
|
||||||
with:
|
with:
|
||||||
repo: ${{ github.repository }}
|
repo: ${{ github.repository }}
|
||||||
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
- uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
|
||||||
- uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
|
- uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
|
||||||
- uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5.0.0
|
- uses: azure/k8s-set-context@8698eba2499e9012f0d5085f8798077cce4bc526 # v5.0.1
|
||||||
with:
|
with:
|
||||||
method: kubeconfig
|
method: kubeconfig
|
||||||
kubeconfig: ${{ secrets.KUBECONFIG }}
|
kubeconfig: ${{ secrets.KUBECONFIG }}
|
||||||
- name: Validate Helm
|
- name: Validate Helm
|
||||||
uses: helmfile/helmfile-action@f6f7844b9e6d9f5ac8cf4cdae8ada1a42755c036 # v2.4.4
|
uses: helmfile/helmfile-action@daefb3e1fa5a91b7a88d30870d20da4896944818 # v2.4.5
|
||||||
with:
|
with:
|
||||||
helmfile-args: diff
|
helmfile-args: diff
|
||||||
|
namespace: ${{ inputs.namespace || steps.namespace.outputs.namespace }}
|
||||||
env: ${{ fromJSON(inputs.helmfile_env) }}
|
env: ${{ fromJSON(inputs.helmfile_env) }}
|
||||||
|
|
||||||
# Summary job that always runs to show what was validated
|
# Summary job that always runs to show what was validated
|
||||||
|
|||||||
@@ -51,21 +51,23 @@ jobs:
|
|||||||
### CI (`.gitea/workflows/ci.yaml`)
|
### CI (`.gitea/workflows/ci.yaml`)
|
||||||
|
|
||||||
| Parameter | Description | Default | Required |
|
| Parameter | Description | Default | Required |
|
||||||
| ---------------------- | -------------------------------------------- | --------------- | -------- |
|
| ---------------------- | --------------------------------------------------------------- | --------------- | -------- |
|
||||||
| `k8s_dir` | Path to Kubernetes manifests directory | `k8s/` | No |
|
| `k8s_dir` | Path to Kubernetes manifests directory | `k8s/` | No |
|
||||||
| `helmfile_path` | Path to helmfile.yaml | `helmfile.yaml` | No |
|
| `helmfile_path` | Path to helmfile.yaml | `helmfile.yaml` | No |
|
||||||
| `skip_helm_validation` | Skip Helm validation even if helmfile exists | `false` | No |
|
| `skip_helm_validation` | Skip Helm validation even if helmfile exists | `false` | No |
|
||||||
| `helmfile_env` | JSON object string passed as env to helmfile | `{}` | No |
|
| `helmfile_env` | JSON object string passed as env to helmfile | `{}` | No |
|
||||||
|
| `namespace` | Override the default namespace (extracted from repository name) | `""` | No |
|
||||||
|
|
||||||
### CD (`.gitea/workflows/cd.yaml`)
|
### CD (`.gitea/workflows/cd.yaml`)
|
||||||
|
|
||||||
| Parameter | Description | Default | Required |
|
| Parameter | Description | Default | Required |
|
||||||
| -------------------------------- | -------------------------------------------- | --------------- | -------- |
|
| -------------------------------- | --------------------------------------------------------------- | --------------- | -------- |
|
||||||
| `k8s_dir` | Path to Kubernetes manifests directory | `k8s/` | No |
|
| `k8s_dir` | Path to Kubernetes manifests directory | `k8s/` | No |
|
||||||
| `helmfile_path` | Path to helmfile.yaml | `helmfile.yaml` | No |
|
| `helmfile_path` | Path to helmfile.yaml | `helmfile.yaml` | No |
|
||||||
| `skip_helm_deployment` | Skip Helm deployment even if helmfile exists | `false` | No |
|
| `skip_helm_deployment` | Skip Helm deployment even if helmfile exists | `false` | No |
|
||||||
| `skip_shared_secrets_deployment` | Skip shared secrets deployment | `false` | No |
|
| `skip_shared_secrets_deployment` | Skip shared secrets deployment | `false` | No |
|
||||||
| `helmfile_env` | JSON object string passed as env to helmfile | `{}` | No |
|
| `helmfile_env` | JSON object string passed as env to helmfile | `{}` | No |
|
||||||
|
| `namespace` | Override the default namespace (extracted from repository name) | `""` | No |
|
||||||
|
|
||||||
## Directory Structure Requirements
|
## Directory Structure Requirements
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user