更新 .github/workflows/buidl_and_push_ghcr.yml

This commit is contained in:
2025-12-19 04:14:40 +00:00
parent 9856a09d4f
commit 830c9cd0e0

View File

@@ -41,35 +41,88 @@ jobs:
- name: Deploy to Kubernetes - name: Deploy to Kubernetes
uses: docker://bitnami/kubectl:latest uses: docker://bitnami/kubectl:latest
env: env:
# 这里传入的是 Base64 编码后的字符串,不再是原始 YAML # --- 1. 将变量提到这里,避免 Shell 引号地狱 ---
KUBECONFIG_BASE64: ${{ secrets.KUBE_CONFIG_TEST }} KUBECONFIG_BASE64: ${{ secrets.KUBE_CONFIG_TEST }}
HOST: gitea-http.gitea.svc.cluster.local:3000
# Gitea 变量直接在这里注入
RAW_USER: ${{ gitea.actor }}
IMAGE_TAG: ${{ github.sha }}
with: with:
entrypoint: /bin/sh entrypoint: /bin/sh
args: >- args: >-
-c -c
" "
# 1. 解码 Base64 并写入文件 (最稳健的方式) # --- 2. 开启 Debug 模式 (关键!) ---
echo \"$KUBECONFIG_BASE64\" | base64 -d > /tmp/kubeconfig; # -x: 打印执行的每一行命令
# -e: 遇到错误立即退出,不再继续
set -xe
# 设置环境变量 echo '>>> Step 1: Checking Environment'
export KUBECONFIG=/tmp/kubeconfig; if [ -z \"$KUBECONFIG_BASE64\" ]; then
echo 'Error: KUBECONFIG_BASE64 is empty! Check Gitea Secrets.'
exit 1
fi
# --- 调试代码 (如果还报错,请取消下面两行的注释来查看文件是否有内容) --- echo '>>> Step 2: Decoding Kubeconfig'
# echo 'Checking kubeconfig content size:' # 使用 base64 -d 解码,忽略可能存在的换行符
# ls -l /tmp/kubeconfig echo \"$KUBECONFIG_BASE64\" | base64 -d > /tmp/kubeconfig
# ------------------------------------------------------------- export KUBECONFIG=/tmp/kubeconfig
# 2. 准备变量 # 测试 kubectl 是否能连接 (验证 config 是否有效)
HOST='gitea-http.gitea.svc.cluster.local:3000'; echo '>>> Step 3: Verifying Cluster Connection'
RAW_USER='${{ gitea.actor }}'; kubectl cluster-info
LOWER_USER=$(echo $RAW_USER | tr '[:upper:]' '[:lower:]'); kubectl get pods -n dev || echo 'Warning: Could not list pods, check permissions'
IMAGE_TAG='${{ github.sha }}';
FULL_IMAGE=\"$HOST/$LOWER_USER/my-docs:$IMAGE_TAG\";
echo \"Deploying image: $FULL_IMAGE\"; echo '>>> Step 4: Preparing Image Name'
# 在 Shell 内部处理大小写转换
LOWER_USER=$(echo $RAW_USER | tr '[:upper:]' '[:lower:]')
FULL_IMAGE=\"$HOST/$LOWER_USER/my-docs:$IMAGE_TAG\"
# 3. 执行命令 echo \"Target Image: $FULL_IMAGE\"
kubectl set image deployment/my-docs nginx=$FULL_IMAGE -n dev;
kubectl rollout restart deployment/my-docs -n dev; echo '>>> Step 5: Executing Deployment'
kubectl rollout status deployment/my-docs -n dev; # 执行部署
kubectl set image deployment/my-docs nginx=$FULL_IMAGE -n dev
echo '>>> Step 6: Restarting and Waiting'
kubectl rollout restart deployment/my-docs -n dev
kubectl rollout status deployment/my-docs -n dev
"
-c
"
# --- 2. 开启 Debug 模式 (关键!) ---
# -x: 打印执行的每一行命令
# -e: 遇到错误立即退出,不再继续
set -xe
echo '>>> Step 1: Checking Environment'
if [ -z \"$KUBECONFIG_BASE64\" ]; then
echo 'Error: KUBECONFIG_BASE64 is empty! Check Gitea Secrets.'
exit 1
fi
echo '>>> Step 2: Decoding Kubeconfig'
# 使用 base64 -d 解码,忽略可能存在的换行符
echo \"$KUBECONFIG_BASE64\" | base64 -d > /tmp/kubeconfig
export KUBECONFIG=/tmp/kubeconfig
# 测试 kubectl 是否能连接 (验证 config 是否有效)
echo '>>> Step 3: Verifying Cluster Connection'
kubectl cluster-info
kubectl get pods -n dev || echo 'Warning: Could not list pods, check permissions'
echo '>>> Step 4: Preparing Image Name'
# 在 Shell 内部处理大小写转换
LOWER_USER=$(echo $RAW_USER | tr '[:upper:]' '[:lower:]')
FULL_IMAGE=\"$HOST/$LOWER_USER/my-docs:$IMAGE_TAG\"
echo \"Target Image: $FULL_IMAGE\"
echo '>>> Step 5: Executing Deployment'
# 执行部署
kubectl set image deployment/my-docs nginx=$FULL_IMAGE -n dev
echo '>>> Step 6: Restarting and Waiting'
kubectl rollout restart deployment/my-docs -n dev
kubectl rollout status deployment/my-docs -n dev
" "