更新 .github/workflows/buidl_and_push_ghcr.yml
This commit is contained in:
93
.github/workflows/buidl_and_push_ghcr.yml
vendored
93
.github/workflows/buidl_and_push_ghcr.yml
vendored
@@ -41,35 +41,88 @@ jobs:
|
||||
- name: Deploy to Kubernetes
|
||||
uses: docker://bitnami/kubectl:latest
|
||||
env:
|
||||
# 这里传入的是 Base64 编码后的字符串,不再是原始 YAML
|
||||
# --- 1. 将变量提到这里,避免 Shell 引号地狱 ---
|
||||
KUBECONFIG_BASE64: ${{ secrets.KUBE_CONFIG_TEST }}
|
||||
HOST: gitea-http.gitea.svc.cluster.local:3000
|
||||
# Gitea 变量直接在这里注入
|
||||
RAW_USER: ${{ gitea.actor }}
|
||||
IMAGE_TAG: ${{ github.sha }}
|
||||
with:
|
||||
entrypoint: /bin/sh
|
||||
args: >-
|
||||
-c
|
||||
"
|
||||
# 1. 解码 Base64 并写入文件 (最稳健的方式)
|
||||
echo \"$KUBECONFIG_BASE64\" | base64 -d > /tmp/kubeconfig;
|
||||
# --- 2. 开启 Debug 模式 (关键!) ---
|
||||
# -x: 打印执行的每一行命令
|
||||
# -e: 遇到错误立即退出,不再继续
|
||||
set -xe
|
||||
|
||||
# 设置环境变量
|
||||
export KUBECONFIG=/tmp/kubeconfig;
|
||||
echo '>>> Step 1: Checking Environment'
|
||||
if [ -z \"$KUBECONFIG_BASE64\" ]; then
|
||||
echo 'Error: KUBECONFIG_BASE64 is empty! Check Gitea Secrets.'
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# --- 调试代码 (如果还报错,请取消下面两行的注释来查看文件是否有内容) ---
|
||||
# echo 'Checking kubeconfig content size:'
|
||||
# ls -l /tmp/kubeconfig
|
||||
# -------------------------------------------------------------
|
||||
echo '>>> Step 2: Decoding Kubeconfig'
|
||||
# 使用 base64 -d 解码,忽略可能存在的换行符
|
||||
echo \"$KUBECONFIG_BASE64\" | base64 -d > /tmp/kubeconfig
|
||||
export KUBECONFIG=/tmp/kubeconfig
|
||||
|
||||
# 2. 准备变量
|
||||
HOST='gitea-http.gitea.svc.cluster.local:3000';
|
||||
RAW_USER='${{ gitea.actor }}';
|
||||
LOWER_USER=$(echo $RAW_USER | tr '[:upper:]' '[:lower:]');
|
||||
IMAGE_TAG='${{ github.sha }}';
|
||||
FULL_IMAGE=\"$HOST/$LOWER_USER/my-docs:$IMAGE_TAG\";
|
||||
# 测试 kubectl 是否能连接 (验证 config 是否有效)
|
||||
echo '>>> Step 3: Verifying Cluster Connection'
|
||||
kubectl cluster-info
|
||||
kubectl get pods -n dev || echo 'Warning: Could not list pods, check permissions'
|
||||
|
||||
echo \"Deploying image: $FULL_IMAGE\";
|
||||
echo '>>> Step 4: Preparing Image Name'
|
||||
# 在 Shell 内部处理大小写转换
|
||||
LOWER_USER=$(echo $RAW_USER | tr '[:upper:]' '[:lower:]')
|
||||
FULL_IMAGE=\"$HOST/$LOWER_USER/my-docs:$IMAGE_TAG\"
|
||||
|
||||
# 3. 执行命令
|
||||
kubectl set image deployment/my-docs nginx=$FULL_IMAGE -n dev;
|
||||
kubectl rollout restart deployment/my-docs -n dev;
|
||||
kubectl rollout status deployment/my-docs -n dev;
|
||||
echo \"Target Image: $FULL_IMAGE\"
|
||||
|
||||
echo '>>> Step 5: Executing Deployment'
|
||||
# 执行部署
|
||||
kubectl set image deployment/my-docs nginx=$FULL_IMAGE -n dev
|
||||
|
||||
echo '>>> Step 6: Restarting and Waiting'
|
||||
kubectl rollout restart deployment/my-docs -n dev
|
||||
kubectl rollout status deployment/my-docs -n dev
|
||||
"
|
||||
-c
|
||||
"
|
||||
# --- 2. 开启 Debug 模式 (关键!) ---
|
||||
# -x: 打印执行的每一行命令
|
||||
# -e: 遇到错误立即退出,不再继续
|
||||
set -xe
|
||||
|
||||
echo '>>> Step 1: Checking Environment'
|
||||
if [ -z \"$KUBECONFIG_BASE64\" ]; then
|
||||
echo 'Error: KUBECONFIG_BASE64 is empty! Check Gitea Secrets.'
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo '>>> Step 2: Decoding Kubeconfig'
|
||||
# 使用 base64 -d 解码,忽略可能存在的换行符
|
||||
echo \"$KUBECONFIG_BASE64\" | base64 -d > /tmp/kubeconfig
|
||||
export KUBECONFIG=/tmp/kubeconfig
|
||||
|
||||
# 测试 kubectl 是否能连接 (验证 config 是否有效)
|
||||
echo '>>> Step 3: Verifying Cluster Connection'
|
||||
kubectl cluster-info
|
||||
kubectl get pods -n dev || echo 'Warning: Could not list pods, check permissions'
|
||||
|
||||
echo '>>> Step 4: Preparing Image Name'
|
||||
# 在 Shell 内部处理大小写转换
|
||||
LOWER_USER=$(echo $RAW_USER | tr '[:upper:]' '[:lower:]')
|
||||
FULL_IMAGE=\"$HOST/$LOWER_USER/my-docs:$IMAGE_TAG\"
|
||||
|
||||
echo \"Target Image: $FULL_IMAGE\"
|
||||
|
||||
echo '>>> Step 5: Executing Deployment'
|
||||
# 执行部署
|
||||
kubectl set image deployment/my-docs nginx=$FULL_IMAGE -n dev
|
||||
|
||||
echo '>>> Step 6: Restarting and Waiting'
|
||||
kubectl rollout restart deployment/my-docs -n dev
|
||||
kubectl rollout status deployment/my-docs -n dev
|
||||
"
|
||||
Reference in New Issue
Block a user