This commit is contained in:
Marcus 2026-01-31 11:39:34 -03:00
parent 5d66982710
commit dd268929e3

View file

@ -26,7 +26,7 @@ jobs:
with: with:
fetch-depth: 1 fetch-depth: 1
# Build do Backend (Livre de rede/registry durante o build) # Build do Backend
- name: Build Backend - name: Build Backend
uses: docker/build-push-action@v5 uses: docker/build-push-action@v5
with: with:
@ -36,14 +36,16 @@ jobs:
provenance: false provenance: false
tags: ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} tags: ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
# Push do Backend com Login JIT (Just-in-Time) # Push do Backend com config isolado
- name: Push Backend Tags - name: Push Backend Tags
run: | run: |
echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u bohessefm --password-stdin mkdir -p $HOME/.docker_backend
docker tag ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest echo "${{ secrets.FORGEJO_TOKEN }}" | docker --config $HOME/.docker_backend login ${{ env.REGISTRY }} -u bohessefm --password-stdin
docker push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
docker --config $HOME/.docker_backend tag ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
docker --config $HOME/.docker_backend push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
sleep 2 sleep 2
docker push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest docker --config $HOME/.docker_backend push ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
# Build do Backoffice # Build do Backoffice
- name: Build Backoffice - name: Build Backoffice
@ -55,14 +57,16 @@ jobs:
provenance: false provenance: false
tags: ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} tags: ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
# Push do Backoffice com Login JIT (Resolve o Unauthorized no final do push) # Push do Backoffice com config isolado (Resolução do erro de autenticação)
- name: Push Backoffice Tags - name: Push Backoffice Tags
run: | run: |
echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u bohessefm --password-stdin mkdir -p $HOME/.docker_backoffice
docker tag ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/backoffice:latest echo "${{ secrets.FORGEJO_TOKEN }}" | docker --config $HOME/.docker_backoffice login ${{ env.REGISTRY }} -u bohessefm --password-stdin
docker push ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
docker --config $HOME/.docker_backoffice tag ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} ${{ env.REGISTRY }}/bohessefm/backoffice:latest
docker --config $HOME/.docker_backoffice push ${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
sleep 2 sleep 2
docker push ${{ env.REGISTRY }}/bohessefm/backoffice:latest docker --config $HOME/.docker_backoffice push ${{ env.REGISTRY }}/bohessefm/backoffice:latest
deploy-to-k3s: deploy-to-k3s:
needs: build-and-push needs: build-and-push
@ -89,17 +93,14 @@ jobs:
chmod 600 $HOME/.kube/config chmod 600 $HOME/.kube/config
export KUBECONFIG=$HOME/.kube/config export KUBECONFIG=$HOME/.kube/config
# 1. Garantir o Namespace
kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f - kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
# 2. IMAGE PULL SECRET
kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \ kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \
--docker-server=${{ env.REGISTRY }} \ --docker-server=${{ env.REGISTRY }} \
--docker-username=bohessefm \ --docker-username=bohessefm \
--docker-password='${{ secrets.FORGEJO_TOKEN }}' \ --docker-password='${{ secrets.FORGEJO_TOKEN }}' \
--dry-run=client -o yaml | kubectl apply -f - --dry-run=client -o yaml | kubectl apply -f -
# 3. Secrets de Variáveis
kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found kubectl -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
kubectl -n gohorsejobsdev create secret generic backend-secrets \ kubectl -n gohorsejobsdev create secret generic backend-secrets \
--from-literal=MTU='${{ vars.MTU }}' \ --from-literal=MTU='${{ vars.MTU }}' \
@ -107,14 +108,11 @@ jobs:
--from-literal=AMQP_URL='${{ vars.AMQP_URL }}' \ --from-literal=AMQP_URL='${{ vars.AMQP_URL }}' \
--from-literal=DATABASE_URL='${{ vars.DATABASE_URL }}' --from-literal=DATABASE_URL='${{ vars.DATABASE_URL }}'
# 4. Aplica os Manifestos
kubectl apply -f k8s/dev/ -n gohorsejobsdev kubectl apply -f k8s/dev/ -n gohorsejobsdev
# 5. Atualiza a imagem para a nova tag SHA
kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }} kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/bohessefm/gohorsejobs:${{ github.sha }}
kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }} kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/bohessefm/backoffice:${{ github.sha }}
# 6. Restart Forçado
kubectl delete pod -n gohorsejobsdev -l app=gohorse-backend-dev --force --grace-period=0 kubectl delete pod -n gohorsejobsdev -l app=gohorse-backend-dev --force --grace-period=0
kubectl delete pod -n gohorsejobsdev -l app=gohorse-backoffice-dev --force --grace-period=0 kubectl delete pod -n gohorsejobsdev -l app=gohorse-backoffice-dev --force --grace-period=0