feat: notes devops/argocd deployment #133
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI/CD | |
| on: push | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| env: | |
| ENV: dev | |
| ECR_REPOSITORY: portfolio | |
| SLACK_TOKEN: ${{ secrets.AWS_SECRET_KEY }} | |
| steps: | |
| - name: Checkout repo source | |
| uses: actions/checkout@v4 | |
| - name: Login to Docker Hub | |
| run: | | |
| echo "${{ secrets.DOCKER_HUB_PASSWORD }}" | docker login --username ${{ secrets.DOCKER_HUB_USERNAME }} --password-stdin | |
| - name: Copy secret env | |
| run: | | |
| echo "SLACK_TOKEN=${{ secrets.SLACK_TOKEN }}" >> portfolio/environments/${ENV}.env | |
| - name: Build, tag, and push | |
| id: build-image | |
| env: | |
| ECR_REGISTRY: ${{ secrets.ECR_REGISTRY }} | |
| RUNNER_ID: ${{ github.run_number }} | |
| run: | | |
| IMAGE_TAG=$RUNNER_ID | |
| IMAGE_REPO_NAME=$ECR_REGISTRY/$ECR_REPOSITORY | |
| LATEST_IMAGE=$IMAGE_REPO_NAME:latest | |
| echo "Pulling latest image" | |
| docker pull $LATEST_IMAGE || true | |
| echo "Building images" | |
| docker build --build-arg ENVIRONMENT=$ENV --cache-from $LATEST_IMAGE -t $IMAGE_REPO_NAME:latest -t $IMAGE_REPO_NAME:$IMAGE_TAG . | |
| echo "Pushing images to ECR..." | |
| docker push $IMAGE_REPO_NAME:latest | |
| docker push $IMAGE_REPO_NAME:$IMAGE_TAG | |
| echo "New image name=$IMAGE_REPO_NAME:$IMAGE_TAG" | |
| deploy: | |
| needs: [build] | |
| runs-on: ubuntu-latest | |
| env: | |
| ECR_REPOSITORY: portfolio | |
| ECR_REGISTRY: ${{ secrets.ECR_REGISTRY }} | |
| RUNNER_ID: ${{ github.run_number }} | |
| steps: | |
| - name: Deploy | |
| uses: appleboy/ssh-action@master | |
| with: | |
| host: ${{ secrets.SSH_HOST }} | |
| username: ${{ secrets.SSH_USER }} | |
| key: ${{ secrets.SSH_KEY }} | |
| script: | | |
| IMAGE_REPO_NAME=${{ env.ECR_REGISTRY }}/${{ env.ECR_REPOSITORY }} | |
| IMAGE_TAG=${{ env.RUNNER_ID }} | |
| awk -v old="$IMAGE_REPO_NAME:[0-9]+" -v new="$IMAGE_REPO_NAME:$IMAGE_TAG" '{gsub(old, new)}1' docker-compose.yaml > tmpfile && mv tmpfile docker-compose.yaml | |
| docker pull $IMAGE_REPO_NAME:$IMAGE_TAG | |
| docker-compose stop portfolio | |
| docker-compose rm --force portfolio | |
| docker-compose up -d --no-deps portfolio | |
| echo "Deployed new image: $IMAGE_REPO_NAME:$IMAGE_TAG" | |
| docker image prune --all --force | |
| echo "Cleanup old images successfully" |