Merge pull request #257 from norcalipa/norcalipa/refactor-actions #956
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright (c) 2024 Isaac Adams | |
| # Licensed under the MIT License. See LICENSE file in the project root for full license information. | |
| name: Deploy to Kubernetes (prod) | |
| on: | |
| workflow_run: | |
| workflows: [ "Build Image" ] | |
| types: | |
| - completed | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| deploy-home-k3s: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: main | |
| - name: Get latest commit SHA from main branch | |
| id: get-sha | |
| run: echo "GITHUB_SHA=$(git rev-parse HEAD)" >> $GITHUB_ENV | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - name: Set up SSH | |
| uses: webfactory/ssh-agent@v0.5.3 | |
| with: | |
| ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }} | |
| - name: Install Cloudflared | |
| run: | | |
| sudo mkdir -p --mode=0755 /usr/share/keyrings | |
| curl -fsSL https://pkg.cloudflare.com/cloudflare-main.gpg | sudo tee /usr/share/keyrings/cloudflare-main.gpg >/dev/null | |
| # Add this repo to your apt repositories | |
| echo 'deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.com/cloudflared jammy main' | sudo tee /etc/apt/sources.list.d/cloudflared.list | |
| # install cloudflared | |
| sudo apt-get update && sudo apt-get install cloudflared | |
| - name: Tag and Push Image as Latest | |
| run: | | |
| docker tag ghcr.io/${{ github.repository }}/crank:${{ github.sha }} ghcr.io/${{ github.repository }}/crank:latest | |
| docker push ghcr.io/${{ github.repository }}/crank:latest | |
| - name: Deploy to Kubernetes | |
| run: | | |
| # Copy deployment.yml to the remote system | |
| scp -o ProxyCommand='cloudflared access ssh --hostname %h' -o StrictHostKeyChecking=no ./k8s/deployment.yml ${{ secrets.SSH_USERNAME }}@${{ secrets.SSH_HOST }}:/tmp/deployment.yml | |
| # Apply the copied deployment.yml | |
| ssh -o ProxyCommand='cloudflared access ssh --hostname %h' -o StrictHostKeyChecking=no ${{ secrets.SSH_USERNAME }}@${{ secrets.SSH_HOST }} <<EOF | |
| export GITHUB_SHA=${{ env.GITHUB_SHA }} | |
| envsubst < /tmp/deployment.yml | k3s kubectl apply -f - | |
| EOF |