56 lines
2.3 KiB
YAML
56 lines
2.3 KiB
YAML
name: Deploy tsrun
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
deploy:
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Write embedded manifest
|
|
run: |
|
|
mkdir -p secrets
|
|
printf '%s' '${{ secrets.TSRUN_MANIFEST_JSON }}' > secrets/tsrun.manifest.json
|
|
|
|
- name: Build and push
|
|
run: |
|
|
TAG=${{ gitea.sha }}
|
|
IMAGE=registry.neko-piranha.ts.net/astral/tsrun
|
|
docker buildx create --use --name tsrun-bootstrap-builder || docker buildx use tsrun-bootstrap-builder
|
|
docker buildx build --platform linux/amd64 -t $IMAGE:$TAG -t $IMAGE:latest --push .
|
|
|
|
- name: Install kubectl
|
|
run: |
|
|
ARCH=$(uname -m)
|
|
case "$ARCH" in
|
|
x86_64) KARCH=amd64 ;;
|
|
aarch64|arm64) KARCH=arm64 ;;
|
|
*) echo "unsupported kubectl arch: $ARCH" >&2; exit 1 ;;
|
|
esac
|
|
curl -fsSL "https://dl.k8s.io/release/$(curl -fsSL https://dl.k8s.io/release/stable.txt)/bin/linux/${KARCH}/kubectl" -o /usr/local/bin/kubectl
|
|
chmod +x /usr/local/bin/kubectl
|
|
|
|
- name: Configure kubectl
|
|
run: |
|
|
mkdir -p ~/.kube
|
|
if [ -f /var/run/secrets/kubernetes.io/serviceaccount/token ] && [ -n "${KUBERNETES_SERVICE_HOST:-}" ]; then
|
|
NS=$(cat /var/run/secrets/kubernetes.io/serviceaccount/namespace)
|
|
TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
|
API_SERVER="https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS:-443}"
|
|
kubectl config set-cluster in-cluster --server="$API_SERVER" --certificate-authority=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt --embed-certs=true
|
|
kubectl config set-credentials ci-deployer --token="$TOKEN"
|
|
kubectl config set-context ci-deployer --cluster=in-cluster --user=ci-deployer --namespace="$NS"
|
|
kubectl config use-context ci-deployer
|
|
elif [ -n '${{ secrets.KUBECONFIG }}' ]; then
|
|
printf '%s' '${{ secrets.KUBECONFIG }}' > ~/.kube/config
|
|
else
|
|
printf '%s' '${{ secrets.KUBECONFIG_B64 }}' | base64 -d > ~/.kube/config
|
|
fi
|
|
|
|
- name: Rollout
|
|
run: |
|
|
kubectl set image deployment/tsrun tsrun=registry.neko-piranha.ts.net/astral/tsrun:${{ gitea.sha }} -n default
|
|
kubectl rollout status deployment/tsrun -n default --timeout=180s
|