This commit is contained in:
Marcus 2026-01-31 11:07:00 -03:00
parent 340085dc13
commit 9a3ff52d9e

View file

@ -1,13 +1,4 @@
name: Deploy Backend and Backoffice Dev
on:
workflow_dispatch:
push:
branches:
- dev
jobs:
build-and-push:
build-and-push:
runs-on: docker-ready
env:
DOCKER_API_VERSION: "1.43"
@ -26,10 +17,7 @@ jobs:
with:
fetch-depth: 1
- name: Set up Docker Buildx
run: |
docker buildx create --use --driver docker-container --name local-builder || docker buildx use local-builder
docker buildx inspect --bootstrap
# REMOVIDO: docker buildx create (Isso estava isolando o login e causando o 401)
- name: Login to Forgejo Registry
uses: docker/login-action@v3
@ -44,6 +32,8 @@ jobs:
context: ./backend
file: ./backend/Dockerfile
push: true
# Força o uso do builder padrão do host que JÁ ESTÁ LOGADO
builder: default
provenance: false
tags: |
${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
@ -55,61 +45,9 @@ jobs:
context: ./backoffice
file: ./backoffice/Dockerfile
push: true
# Força o uso do builder padrão do host que JÁ ESTÁ LOGADO
builder: default
provenance: false
tags: |
${{ env.REGISTRY }}/bohessefm/backoffice:latest
${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
deploy-to-k3s:
needs: build-and-push
runs-on: docker-ready
defaults:
run:
shell: sh
steps:
- name: Install Tools (Git & Kubectl)
run: |
sed -i 's/dl-cdn.alpinelinux.org/mirror.leaseweb.com/g' /etc/apk/repositories
apk add --no-cache git curl
if [ ! -f /usr/local/bin/kubectl ]; then
KVER=$(curl -L -s https://dl.k8s.io/release/stable.txt)
curl -LO "https://dl.k8s.io/release/${KVER}/bin/linux/amd64/kubectl"
chmod +x kubectl
mv kubectl /usr/local/bin/
fi
- name: Checkout code
uses: actions/checkout@v4
- name: Deploy to K3s
run: |
mkdir -p $HOME/.kube
echo "${{ secrets.KUBECONFIG }}" > $HOME/.kube/config
chmod 600 $HOME/.kube/config
export KUBECONFIG=$HOME/.kube/config
# 1. Namespace
kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
# 2. Secret registry-auth (O que o seu YAML de K8s precisa para puxar a imagem)
kubectl -n gohorsejobsdev create secret docker-registry registry-auth \
--docker-server=${{ env.REGISTRY }} \
--docker-username=bohessefm \
--docker-password='${{ secrets.FORGEJO_TOKEN }}' \
--dry-run=client -o yaml | kubectl apply -f -
# 3. Secrets da aplicação
kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
kubectl -n gohorsejobsdev create secret generic backend-secrets \
--from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}" \
--from-literal=JWT_SECRET="${{ vars.JWT_SECRET }}" \
--from-literal=MTU="${{ vars.MTU }}"
# 4. Aplica manifestos da pasta
kubectl apply -f k8s/dev/ -n gohorsejobsdev
# 5. Força o Kubernetes a usar a imagem buildada agora pelo SHA
kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
kubectl -n gohorsejobsdev rollout status deployment gohorse-backend-dev
${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}