-
Notifications
You must be signed in to change notification settings - Fork 49
114 lines (98 loc) · 3.05 KB
/
Copy pathrelease.yml
File metadata and controls
114 lines (98 loc) · 3.05 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
name: Release
on:
push:
tags:
- "v*"
permissions:
contents: write
packages: write
jobs:
goreleaser:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v5
with:
fetch-depth: 0
- name: Login to GitHub Container registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- uses: actions/setup-go@v6
with:
go-version: stable
- name: Set RELEASE_ID env
run: echo RELEASE_ID=$(( ($(date +%s) - $(date -d "2022-06-15" +%s)) / 86400 )) >> ${GITHUB_ENV}
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@v6
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
DOCKER_REGISTRY: ${{ vars.DOCKER_REGISTRY }}
with:
distribution: goreleaser
version: "~> v2"
args: release --clean
###
deploy:
runs-on: ubuntu-latest
permissions:
contents: read
deployments: write
environment: production
concurrency: production
needs: goreleaser
env:
AWS_ACCESS_KEY_ID: ${{secrets.AWS_ACCESS_KEY_ID}}
AWS_SECRET_ACCESS_KEY: ${{secrets.AWS_SECRET_ACCESS_KEY}}
steps:
- name: Set APP_VERSION env
run: echo APP_VERSION=${GITHUB_REF#refs/tags/} >> ${GITHUB_ENV}
- name: Checkout code
uses: actions/checkout@v5
- name: Install Terraform
uses: hashicorp/setup-terraform@v3
with:
terraform_version: 1.4.6
- name: Initialize Terraform
working-directory: deployments/docker-swarm-terraform
run: terraform init
- name: Deploy Docker service to Swarm
working-directory: deployments/docker-swarm-terraform
env:
CPU_LIMIT: ${{ vars.CPU_LIMIT }}
run: |
eval "$(ssh-agent -s)"
ssh-add <(echo "${{ secrets.SSH_PRIVATE_KEY }}")
terraform apply -auto-approve -input=false \
-var 'swarm-manager-host=${{ secrets.SWARM_MANAGER_HOST }}' \
-var 'app-name=${{ vars.APP_NAME }}' \
-var "app-version=${{ env.APP_VERSION }}" \
-var 'app-host=${{ secrets.APP_HOST }}' \
-var "app-config-b64=${{ secrets.APP_CONFIG_B64 }}" \
-var "app-env-json-b64=${{ secrets.APP_ENV_JSON_B64 }}" \
-var "memory-limit=${{ vars.MEMORY_LIMIT }}"
deploy-secondary:
runs-on: ubuntu-latest
permissions:
contents: read
deployments: write
needs: goreleaser
environment: production-secondary
concurrency: production
env:
DEPLOY_WEBHOOK_URL: ${{ secrets.DEPLOY_WEBHOOK_URL }}
steps:
- name: Trigger Deploy webhook
if: ${{ env.DEPLOY_WEBHOOK_URL != '' }}
run: |
curl -X POST "${DEPLOY_WEBHOOK_URL}" \
--fail \
--silent \
--max-time 10 \
--retry 3 \
--retry-delay 5 \
|| exit 1