diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml index bc2705f..4bef4e1 100644 --- a/.forgejo/workflows/deploy.yaml +++ b/.forgejo/workflows/deploy.yaml @@ -26,7 +26,7 @@ jobs: with: fetch-depth: 1 - # Build do Backend (Livre de rede/registry durante o build) + # Build do Backend - name: Build Backend uses: docker/build-push-action@v5 with: @@ -36,14 +36,16 @@ jobs: provenance: false tags: ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} - # Push do Backend com Login JIT (Just-in-Time) + # Push do Backend com config isolado - name: Push Backend Tags run: | - echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u bohessefm --password-stdin - docker tag ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest - docker push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} + mkdir -p $HOME/.docker_backend + echo "${{ secrets.FORGEJO_TOKEN }}" | docker --config $HOME/.docker_backend login ${{ env.REGISTRY }} -u bohessefm --password-stdin + + docker --config $HOME/.docker_backend tag ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest + docker --config $HOME/.docker_backend push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} sleep 2 - docker push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest + docker --config $HOME/.docker_backend push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest # Build do Backoffice - name: Build Backoffice @@ -55,14 +57,16 @@ jobs: provenance: false tags: ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} - # Push do Backoffice com Login JIT (Resolve o Unauthorized no final do push) + # Push do Backoffice com config isolado (Resolução do erro de autenticação) - name: Push Backoffice Tags run: | - echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u bohessefm --password-stdin - docker tag ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/backoffice:latest - docker push ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} + mkdir -p $HOME/.docker_backoffice + echo "${{ secrets.FORGEJO_TOKEN }}" | docker --config $HOME/.docker_backoffice login ${{ env.REGISTRY }} -u bohessefm --password-stdin + + docker --config $HOME/.docker_backoffice tag ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/backoffice:latest + docker --config $HOME/.docker_backoffice push ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} sleep 2 - docker push ${{ env.REGISTRY }}/bohessefm/backoffice:latest + docker --config $HOME/.docker_backoffice push ${{ env.REGISTRY }}/bohessefm/backoffice:latest deploy-to-k3s: needs: build-and-push @@ -89,17 +93,14 @@ jobs: chmod 600 $HOME/.kube/config export KUBECONFIG=$HOME/.kube/config - # 1. Garantir o Namespace kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f - - # 2. IMAGE PULL SECRET kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \ --docker-server=${{ env.REGISTRY }} \ --docker-username=bohessefm \ --docker-password='${{ secrets.FORGEJO_TOKEN }}' \ --dry-run=client -o yaml | kubectl apply -f - - # 3. Secrets de Variáveis kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found kubectl -n gohorsejobsdev create secret generic backend-secrets \ --from-literal=MTU='${{ vars.MTU }}' \ @@ -107,14 +108,11 @@ jobs: --from-literal=AMQP_URL='${{ vars.AMQP_URL }}' \ --from-literal=DATABASE_URL='${{ vars.DATABASE_URL }}' - # 4. Aplica os Manifestos kubectl apply -f k8s/dev/ -n gohorsejobsdev - # 5. Atualiza a imagem para a nova tag SHA kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} - # 6. Restart Forçado kubectl delete pod -n gohorsejobsdev -l app=gohorse-backend-dev --force --grace-period=0 kubectl delete pod -n gohorsejobsdev -l app=gohorse-backoffice-dev --force --grace-period=0