test: k3s deploy action #19
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Spring Boot Multi-module K3s Deployment | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| env: | |
| REGISTRY: "ghcr.io" | |
| NAMESPACE: "depromeet" | |
| IMAGE_NAME: "kasukabe-server" | |
| MODULE: "layer-api" | |
| jobs: | |
| setup: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| outputs: | |
| deploy_target: ${{ steps.set-env.outputs.DEPLOY_TARGET }} | |
| sha_short: ${{ steps.sha_short.outputs.sha_short }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v2 | |
| - name: Setup Env | |
| id: set-env | |
| run: | | |
| if [[ "${GITHUB_REF}" == "refs/heads/main" ]]; then | |
| echo "DEPLOY_TARGET=production" >> $GITHUB_OUTPUT | |
| else | |
| echo "DEPLOY_TARGET=development" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Get short SHA | |
| id: sha_short | |
| run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT | |
| build: | |
| name: build | |
| needs: [ setup ] | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| env: | |
| DEPLOY_TARGET: ${{ needs.setup.outputs.deploy_target }} | |
| APPLICATION_SECRET_PROPERTIES: ${{ secrets.APPLICATION_SECRET_PROPERTIES }} | |
| GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }} | |
| SHA_SHORT: ${{ needs.setup.outputs.sha_short }} | |
| steps: | |
| - name: Setup Java | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'corretto' | |
| - name: Checkout sources | |
| uses: actions/checkout@v4 | |
| - name: Setup Gradle | |
| uses: gradle/gradle-build-action@bd5760595778326ba7f1441bcf7e88b49de61a25 # v2.6.0 | |
| - name: Create application-secret.properties | |
| run: | | |
| echo "${APPLICATION_SECRET_PROPERTIES}" > ./${{ env.MODULE }}/src/main/resources/application-secret.properties | |
| - name: Build ${{ env.MODULE }} module | |
| run: ./gradlew :${{ env.MODULE }}:build | |
| - name: Run tests:${{ env.MODULE }} | |
| run: ./gradlew :${{ env.MODULE }}:test | |
| - name: login github container registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Extract metadata (tags, labels) for Docker | |
| id: meta | |
| uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 | |
| with: | |
| images: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}/${{ env.MODULE }} | |
| - name: push | |
| uses: docker/build-push-action@v4 | |
| with: | |
| context: ./${{ env.MODULE }} | |
| platforms: linux/amd64 | |
| push: true | |
| tags: | | |
| ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}:${{ env.SHA_SHORT }} | |
| ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}:latest | |
| deploy: | |
| name: Deploy to K3s | |
| needs: [ build, setup ] | |
| runs-on: ubuntu-latest | |
| env: | |
| DEPLOY_TARGET: ${{ needs.setup.outputs.deploy_target }} | |
| SELECTOR: layer-dev | |
| SHA_SHORT: ${{ needs.setup.outputs.sha_short }} | |
| steps: | |
| - name: Checkout sources | |
| uses: actions/checkout@v4 | |
| - name: Install kubectl | |
| uses: azure/setup-kubectl@v1 | |
| with: | |
| version: 'v1.21.0' | |
| - name: Set up kubeconfig | |
| run: | | |
| mkdir -p $HOME/.kube | |
| echo "${{ secrets.KUBE_CONFIG }}" > $HOME/.kube/config | |
| chmod 600 $HOME/.kube/config | |
| - name: Create K3s deployment files | |
| run: | | |
| cat <<EOF > deployment.yaml | |
| apiVersion: apps/v1 | |
| kind: Deployment | |
| metadata: | |
| name: ${{ env.MODULE }}-deployment | |
| namespace: default | |
| labels: | |
| app: ${{ env.SELECTOR }} | |
| spec: | |
| replicas: 1 | |
| selector: | |
| matchLabels: | |
| app: ${{ env.SELECTOR }} | |
| template: | |
| metadata: | |
| labels: | |
| app: ${{ env.SELECTOR }} | |
| spec: | |
| containers: | |
| - name: ${{ env.MODULE }} | |
| image: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/${{ env.IMAGE_NAME }}:${{ env.SHA_SHORT }} | |
| ports: | |
| - containerPort: 8080 | |
| env: | |
| - name: TZ | |
| value: "Asia/Seoul" | |
| - name: SPRING_PROFILES_ACTIVE | |
| value: "${{ env.DEPLOY_TARGET }}" | |
| volumeMounts: | |
| - name: secret-volume | |
| mountPath: /config/application-secret.properties | |
| subPath: application-secret.properties | |
| - name: log-volume | |
| mountPath: /log | |
| - name: tokens-volume | |
| mountPath: /config/tokens | |
| volumes: | |
| - name: secret-volume | |
| secret: | |
| secretName: app-secret-dev | |
| - name: log-volume | |
| hostPath: | |
| path: /${{ env.DEPLOY_TARGET }}/log/${{ env.MODULE }} | |
| type: DirectoryOrCreate | |
| - name: tokens-volume | |
| emptyDir: {} | |
| --- | |
| apiVersion: v1 | |
| kind: Service | |
| metadata: | |
| name: ${{ env.MODULE }}-service | |
| namespace: default | |
| labels: | |
| app: ${{ env.SELECTOR }} | |
| spec: | |
| selector: | |
| app: ${{ env.SELECTOR }} | |
| ports: | |
| - protocol: TCP | |
| port: 80 | |
| targetPort: 8080 | |
| --- | |
| apiVersion: networking.k8s.io/v1 | |
| kind: Ingress | |
| metadata: | |
| name: ${{ env.MODULE }}-ingress | |
| namespace: default | |
| annotations: | |
| kubernetes.io/ingress.class: traefik | |
| spec: | |
| rules: | |
| - host: stgapi.layerapp.io | |
| http: | |
| paths: | |
| - path: / | |
| pathType: Prefix | |
| backend: | |
| service: | |
| name: ${{ env.MODULE }}-service | |
| port: | |
| number: 80 | |
| EOF | |
| - name: Deploy to K3s | |
| run: | | |
| kubectl apply -f deployment.yaml | |