77 СЕМЬ

2025-09-17 16:13:32 +03:00
parent 9fb046223c
commit a11e3b3a82
4 changed files with 23 additions and 26 deletions
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -0,0 +1,138 @@
+name: Deploy Staging
+
+on:
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: Environment to deploy to
+        required: true
+        default: staging
+        type: choice
+        options:
+          - staging
+          - production
+      version:
+        description: Version to deploy (default is latest, to see other versions use the 'Get available versions' workflow)
+        required: false
+        default: latest
+
+jobs:
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-22.04
+
+    env:
+      STACK_NAME: molvaapp-${{ inputs.environment }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Extract Git metadata
+        id: git-metadata
+        env:
+          REPO: ${{ github.repository }}
+        run: |
+          GIT_SHA=$(git rev-parse --short HEAD)
+          GIT_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo 'none')
+
+          echo "GIT_SHA=${GIT_SHA}" >> $GITHUB_OUTPUT
+          echo "GIT_TAG=${GIT_TAG}" >> $GITHUB_OUTPUT
+          echo "APP_COMMIT=$(${GIT_TAG} != 'none' && echo ${GIT_TAG} || echo ${GIT_SHA})" >> $GITHUB_OUTPUT
+          echo "REPO_OWNER=$(echo $REPO | cut -d'/' -f1)" >> $GITHUB_OUTPUT
+          echo "REPO_NAME=$(echo $REPO | cut -d'/' -f2)" >> $GITHUB_OUTPUT
+
+      - name: Login to Docker Registry
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Extract image metadata
+        id: docker-metadata
+        needs: git-metadata
+        env:
+          REGISTRY: hub.docker.com
+          REPO_NAME: ${{ steps.git-metadata.outputs.REPO_NAME }}
+        run: |
+          IMAGE_TAG=${{ inputs.version }}
+          PUSH_DATE=$(wget -q -O - "https://$REGISTRY/v2/namespaces/molvaapp/repositories/$REPO_NAME/tags/${IMAGE_TAG}/" | jq -r '.tag_last_pushed')
+
+          echo "IMAGE_NAME=molvaapp/${{ steps.git-metadata.outputs.REPO_NAME }}" >> $GITHUB_OUTPUT
+          echo "IMAGE_TAG=${IMAGE_TAG}" >> $GITHUB_OUTPUT
+          echo "TAG_LAST_PUSHED=${PUSH_DATE}" >> $GITHUB_OUTPUT
+
+      - name: Install dependencies
+        id: install-dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y gettext jq
+
+      - name: Prepare environment
+        id: prepare-env
+        run: |
+          mkdir -p /tmp/swarm-certs
+          echo "${{ secrets.SWARM_CA_PEM }}" > /tmp/swarm-certs/ca.pem
+          echo "${{ secrets.SWARM_CERT_PEM }}" > /tmp/swarm-certs/cert.pem
+          echo "${{ secrets.SWARM_KEY_PEM }}" > /tmp/swarm-certs/key.pem
+          chmod 600 /tmp/swarm-certs/*.pem
+
+      - name: Deploy to Swarm
+        needs:
+          - git-metadata
+          - docker-metadata
+          - install-dependencies
+          - prepare-env
+        env:
+          DOCKER_HOST: tcp://${{ secrets.SWARM_MANAGER_HOST }}:2376
+          DOCKER_TLS_VERIFY: 1
+          DOCKER_CERT_PATH: /tmp/swarm-certs
+
+          VERSION: ${{ inputs.version }}
+
+          APP_VERSION: ${{ inputs.environment }}-${{ steps.git-metadata.outputs.APP_COMMIT }}
+          APP_COMMIT: ${{ steps.git-metadata.outputs.APP_COMMIT }}
+          APP_BUILD_DATE: ${{ steps.docker-metadata.outputs.TAG_LAST_PUSHED }}
+
+          KEYCLOAK_BASE_URL: ${{ secrets.KEYCLOAK_BASE_URL }}
+          KEYCLOAK_REALM: ${{ secrets.KEYCLOAK_REALM }}
+          KEYCLOAK_CLIENT_ID: ${{ secrets.KEYCLOAK_CLIENT_ID }}
+          KEYCLOAK_CLIENT_SECRET: ${{ secrets.KEYCLOAK_CLIENT_SECRET }}
+
+          BROKER_HOST: ${{ secrets.BROKER_HOST }}
+          BROKER_PORT: ${{ secrets.BROKER_PORT }}
+          BROKER_USERNAME: ${{ secrets.BROKER_USERNAME }}
+          BROKER_PASSWORD: ${{ secrets.BROKER_PASSWORD }}
+
+          SHORTENER_SECRET_KEY: ${{ secrets.SHORTENER_SECRET_KEY }}
+
+          CACHE_ADDRS: ${{ secrets.CACHE_ADDRS }}
+          CACHE_PASSWORD: ${{ secrets.CACHE_PASSWORD }}
+
+          DB_HOSTS: ${{ secrets.DB_HOSTS }}
+          DB_PORT: ${{ secrets.DB_PORT }}
+          DB_USERNAME: ${{ inputs.environment == 'staging' && secrets.DB_STG_USERNAME || secrets.DB_PROD_USERNAME }}
+          DB_PASSWORD: ${{ inputs.environment == 'staging' && secrets.DB_STG_PASSWORD || secrets.DB_PROD_PASSWORD }}
+          DB_DBNAME: ${{ secrets.DB_DBNAME }}
+
+          INTEGRATION_VKUSVILL_API_TOKEN: ${{ secrets.INTEGRATION_VKUSVILL_API_TOKEN }}
+        run: |
+          envsubst < docker-compose.${{ inputs.environment }}.yaml > docker-compose.runtime.yaml
+
+          echo "Deploying version $VERSION to ${{ inputs.environment }}..."
+          echo "Log level: ${{ inputs.logLevel }}"
+
+          docker stack deploy \
+            --with-registry-auth \
+            -c docker-compose.runtime.yaml \
+            ${{ env.STACK_NAME }}
+
+      - name: Cleanup
+        run: |
+          rm -rf /tmp/swarm-certs
+          rm -f docker-compose.runtime.yaml
+
+      - name: Post-deploy
+        run: |
+          echo "Deployment to ${{ inputs.environment }} completed."
+          echo "Version deployed: ${{ inputs.version }}"