ajustes
This commit is contained in:
parent
67874263a6
commit
9c720c2bf7
1 changed files with 11 additions and 12 deletions
|
|
@ -26,7 +26,7 @@ jobs:
|
||||||
with:
|
with:
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
# Build do Backend
|
# --- BACKEND ---
|
||||||
- name: Build Backend
|
- name: Build Backend
|
||||||
uses: docker/build-push-action@v5
|
uses: docker/build-push-action@v5
|
||||||
with:
|
with:
|
||||||
|
|
@ -36,11 +36,11 @@ jobs:
|
||||||
provenance: false
|
provenance: false
|
||||||
tags: ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
|
tags: ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
|
||||||
|
|
||||||
# Push do Backend (Auth renovada antes de cada comando)
|
- name: Push Backend (Forced Auth)
|
||||||
- name: Push Backend Tags
|
|
||||||
run: |
|
run: |
|
||||||
docker tag ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
|
docker tag ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
|
||||||
|
|
||||||
|
# Injeção 1: Push da Tag SHA
|
||||||
AUTH=$(echo -n "bohessefm:${{ secrets.FORGEJO_TOKEN }}" | base64 | tr -d '\n')
|
AUTH=$(echo -n "bohessefm:${{ secrets.FORGEJO_TOKEN }}" | base64 | tr -d '\n')
|
||||||
mkdir -p $HOME/.docker
|
mkdir -p $HOME/.docker
|
||||||
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
||||||
|
|
@ -48,10 +48,11 @@ jobs:
|
||||||
|
|
||||||
sleep 2
|
sleep 2
|
||||||
|
|
||||||
|
# Injeção 2: Push da Tag Latest (Garante que não perdeu a sessão)
|
||||||
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
||||||
docker push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
|
docker push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
|
||||||
|
|
||||||
# Build do Backoffice
|
# --- BACKOFFICE ---
|
||||||
- name: Build Backoffice
|
- name: Build Backoffice
|
||||||
uses: docker/build-push-action@v5
|
uses: docker/build-push-action@v5
|
||||||
with:
|
with:
|
||||||
|
|
@ -61,11 +62,11 @@ jobs:
|
||||||
provenance: false
|
provenance: false
|
||||||
tags: ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
|
tags: ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
|
||||||
|
|
||||||
# Push do Backoffice (Auth renovada antes de cada comando)
|
- name: Push Backoffice (Forced Auth)
|
||||||
- name: Push Backoffice Tags
|
|
||||||
run: |
|
run: |
|
||||||
docker tag ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/backoffice:latest
|
docker tag ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/backoffice:latest
|
||||||
|
|
||||||
|
# Injeção 3: Push da Tag SHA
|
||||||
AUTH=$(echo -n "bohessefm:${{ secrets.FORGEJO_TOKEN }}" | base64 | tr -d '\n')
|
AUTH=$(echo -n "bohessefm:${{ secrets.FORGEJO_TOKEN }}" | base64 | tr -d '\n')
|
||||||
mkdir -p $HOME/.docker
|
mkdir -p $HOME/.docker
|
||||||
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
||||||
|
|
@ -73,6 +74,7 @@ jobs:
|
||||||
|
|
||||||
sleep 2
|
sleep 2
|
||||||
|
|
||||||
|
# Injeção 4: Push da Tag Latest
|
||||||
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
echo "{\"auths\":{\"${{ env.REGISTRY }}\":{\"auth\":\"$AUTH\"}}}" > $HOME/.docker/config.json
|
||||||
docker push ${{ env.REGISTRY }}/bohessefm/backoffice:latest
|
docker push ${{ env.REGISTRY }}/bohessefm/backoffice:latest
|
||||||
|
|
||||||
|
|
@ -103,17 +105,15 @@ jobs:
|
||||||
chmod 600 $HOME/.kube/config
|
chmod 600 $HOME/.kube/config
|
||||||
export KUBECONFIG=$HOME/.kube/config
|
export KUBECONFIG=$HOME/.kube/config
|
||||||
|
|
||||||
# Garante o Namespace
|
# Ajuste Namespace e Secrets (Sintaxe robusta)
|
||||||
kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
|
kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
|
||||||
|
|
||||||
# Recria o Image Pull Secret de forma limpa (sem pipe)
|
|
||||||
kubectl -n gohorsejobsdev delete secret forgejo-registry --ignore-not-found
|
kubectl -n gohorsejobsdev delete secret forgejo-registry --ignore-not-found
|
||||||
kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \
|
kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \
|
||||||
--docker-server="${{ env.REGISTRY }}" \
|
--docker-server="${{ env.REGISTRY }}" \
|
||||||
--docker-username="bohessefm" \
|
--docker-username="bohessefm" \
|
||||||
--docker-password="${{ secrets.FORGEJO_TOKEN }}"
|
--docker-password="${{ secrets.FORGEJO_TOKEN }}"
|
||||||
|
|
||||||
# Recria os Secrets do Backend com aspas duplas para proteger os valores
|
|
||||||
kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
|
kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
|
||||||
kubectl -n gohorsejobsdev create secret generic backend-secrets \
|
kubectl -n gohorsejobsdev create secret generic backend-secrets \
|
||||||
--from-literal=MTU="${{ vars.MTU }}" \
|
--from-literal=MTU="${{ vars.MTU }}" \
|
||||||
|
|
@ -121,14 +121,13 @@ jobs:
|
||||||
--from-literal=AMQP_URL="${{ vars.AMQP_URL }}" \
|
--from-literal=AMQP_URL="${{ vars.AMQP_URL }}" \
|
||||||
--from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}"
|
--from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}"
|
||||||
|
|
||||||
# Aplica os manifestos
|
|
||||||
kubectl apply -f k8s/dev/ -n gohorsejobsdev
|
kubectl apply -f k8s/dev/ -n gohorsejobsdev
|
||||||
|
|
||||||
# Atualiza as imagens nos deployments para o SHA específico
|
# Set image usando o SHA para garantir que baixe a nova
|
||||||
kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
|
kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
|
||||||
kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
|
kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
|
||||||
|
|
||||||
# Força o reinício dos pods (Uso de || true para não falhar se não houver pods)
|
# Force Restart
|
||||||
kubectl delete pod -n gohorsejobsdev -l app=gohorse-backend-dev --force --grace-period=0 || true
|
kubectl delete pod -n gohorsejobsdev -l app=gohorse-backend-dev --force --grace-period=0 || true
|
||||||
kubectl delete pod -n gohorsejobsdev -l app=gohorse-backoffice-dev --force --grace-period=0 || true
|
kubectl delete pod -n gohorsejobsdev -l app=gohorse-backoffice-dev --force --grace-period=0 || true
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue