feat: add CI/CD workflow automation
All checks were successful
Build and Push to ACR / Build and Push (push) Successful in 3m58s
All checks were successful
Build and Push to ACR / Build and Push (push) Successful in 3m58s
This commit is contained in:
115
.gitea/workflows/deploy-humanitec.yml
Normal file
115
.gitea/workflows/deploy-humanitec.yml
Normal file
@@ -0,0 +1,115 @@
|
||||
name: Deploy to Humanitec v2
|
||||
|
||||
on:
|
||||
workflow_run:
|
||||
workflows: ["Build and Push to ACR"]
|
||||
types: [completed]
|
||||
branches: [ "main" ]
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
environment:
|
||||
description: 'Target environment'
|
||||
required: true
|
||||
default: 'dev'
|
||||
type: choice
|
||||
options: [dev, staging, production]
|
||||
|
||||
env:
|
||||
HUMANITEC_ORG: skillful-wild-chicken-2617
|
||||
HUMANITEC_AUTH_TOKEN: ${{ secrets.HUMANITEC_TOKEN }}
|
||||
PROJECT_ID: mohamed-node-mod-1
|
||||
DEFAULT_ENV_ID: dev
|
||||
ACR_REGISTRY: bstagecjotdevacr.azurecr.io
|
||||
|
||||
jobs:
|
||||
deploy:
|
||||
name: Deploy to Humanitec v2
|
||||
runs-on: ubuntu-latest
|
||||
if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- name: Install dependencies
|
||||
run: apt-get update -qq && apt-get install -y jq
|
||||
- name: Install hctl CLI
|
||||
run: |
|
||||
HCTL_VERSION=$(curl -s https://api.github.com/repos/humanitec/hctl/releases/latest | jq -r '.tag_name')
|
||||
mkdir -p /tmp/hctl-install
|
||||
curl -sLo /tmp/hctl-install/hctl.tar.gz "https://github.com/humanitec/hctl/releases/download/${HCTL_VERSION}/hctl_${HCTL_VERSION#v}_linux_amd64.tar.gz"
|
||||
tar -xzf /tmp/hctl-install/hctl.tar.gz -C /tmp/hctl-install
|
||||
install -m 755 /tmp/hctl-install/hctl /usr/local/bin/hctl
|
||||
- name: Ensure Humanitec project and environment exist
|
||||
env:
|
||||
HUMANITEC_AUTH_TOKEN: ${{ secrets.HUMANITEC_TOKEN }}
|
||||
run: |
|
||||
DISPATCH_ENV="${{ github.event.inputs.environment }}"
|
||||
ENV_ID="${DISPATCH_ENV:-$DEFAULT_ENV_ID}"
|
||||
# Create project if it doesn't exist (hctl exits 0 if already exists)
|
||||
hctl create project "$PROJECT_ID" --set display_name="mohamed-node-mod-1" 2>&1 | grep -v "already exists" || true
|
||||
# Create environment if it doesn't exist
|
||||
hctl create environment "$PROJECT_ID" "$ENV_ID" --set env_type_id=development --set display_name="Development" 2>&1 | grep -v "already exists" || true
|
||||
echo "✓ Project $PROJECT_ID / env $ENV_ID ready"
|
||||
- name: Deploy with Score
|
||||
env:
|
||||
HUMANITEC_AUTH_TOKEN: ${{ secrets.HUMANITEC_TOKEN }}
|
||||
run: |
|
||||
DISPATCH_ENV="${{ github.event.inputs.environment }}"
|
||||
ENV_ID="${DISPATCH_ENV:-$DEFAULT_ENV_ID}"
|
||||
DEFAULT_IMAGE="$ACR_REGISTRY/mohamed-node-mod-1:latest"
|
||||
# Pre-flight: wait for any deployment from a prior run to finish before calling hctl.
|
||||
# hctl refuses to start a new deployment while one is still executing.
|
||||
echo "Pre-flight: checking for in-progress deployments..."
|
||||
MAX_PREFLIGHT=420
|
||||
PREFLIGHT_WAITED=0
|
||||
while [ $PREFLIGHT_WAITED -lt $MAX_PREFLIGHT ]; do
|
||||
PREFLIGHT_STATUS=$(curl -sf -H "Authorization: Bearer $HUMANITEC_AUTH_TOKEN" "https://api.humanitec.dev/orgs/$HUMANITEC_ORG/last-deployments?env_id=$ENV_ID&project_id=$PROJECT_ID&state_change_only=true" | jq -r '.items[0].status // "none"' 2>/dev/null || echo "none")
|
||||
if [ "$PREFLIGHT_STATUS" != "in progress" ] && [ "$PREFLIGHT_STATUS" != "pending" ] && [ "$PREFLIGHT_STATUS" != "executing" ]; then
|
||||
echo "Pre-flight passed (status=$PREFLIGHT_STATUS). Proceeding."
|
||||
break
|
||||
fi
|
||||
echo " Prior deployment still running ($PREFLIGHT_WAITED s elapsed, status=$PREFLIGHT_STATUS)..."
|
||||
sleep 15
|
||||
PREFLIGHT_WAITED=$((PREFLIGHT_WAITED + 15))
|
||||
done
|
||||
# First deploy — provisions all resources. On a brand-new Humanitec project the
|
||||
# dns-k8s-ingress Terraform module runs before the K8s Service exists, so the
|
||||
# ingress backend port falls back to 3000. A second deploy (below) corrects it
|
||||
# once the Service is up, which is essential for Java/Python apps on port 8080.
|
||||
HCTL_EXIT=0
|
||||
timeout 300 hctl score deploy "$PROJECT_ID" "$ENV_ID" score.yaml --no-prompt --default-image "$DEFAULT_IMAGE" || HCTL_EXIT=$?
|
||||
if [ "$HCTL_EXIT" -eq 0 ]; then
|
||||
echo "✓ First deployment complete for mohamed-node-mod-1 to $ENV_ID"
|
||||
elif [ "$HCTL_EXIT" -eq 124 ]; then
|
||||
echo "✓ First deployment submitted (polling timed out — waiting for K8s to settle)"
|
||||
else
|
||||
echo "✗ hctl failed with exit code $HCTL_EXIT"
|
||||
exit $HCTL_EXIT
|
||||
fi
|
||||
# Poll Humanitec API until the first deployment is no longer in-progress before
|
||||
# re-deploying. A flat sleep is unreliable — Terraform DNS modules can take 4-6 min.
|
||||
echo "Waiting for first deployment to finish (polling Humanitec API)..."
|
||||
MAX_WAIT=360
|
||||
WAITED=0
|
||||
while [ $WAITED -lt $MAX_WAIT ]; do
|
||||
DEPLOY_STATUS=$(curl -sf -H "Authorization: Bearer $HUMANITEC_AUTH_TOKEN" "https://api.humanitec.dev/orgs/$HUMANITEC_ORG/last-deployments?env_id=$ENV_ID&project_id=$PROJECT_ID&state_change_only=true" | jq -r '.items[0].status // "unknown"' 2>/dev/null || echo "unknown")
|
||||
if [ "$DEPLOY_STATUS" != "in progress" ] && [ "$DEPLOY_STATUS" != "pending" ] && [ "$DEPLOY_STATUS" != "executing" ]; then
|
||||
echo "First deployment finished with status: $DEPLOY_STATUS"
|
||||
break
|
||||
fi
|
||||
echo " Still running ($WAITED s elapsed, status=$DEPLOY_STATUS)..."
|
||||
sleep 15
|
||||
WAITED=$((WAITED + 15))
|
||||
done
|
||||
if [ $WAITED -ge $MAX_WAIT ]; then
|
||||
echo "Warning: first deployment still running after $MAX_WAIT s — proceeding anyway"
|
||||
fi
|
||||
# Second deploy — dns module now reads the real K8s Service port, fixing the ingress
|
||||
HCTL_EXIT2=0
|
||||
timeout 120 hctl score deploy "$PROJECT_ID" "$ENV_ID" score.yaml --no-prompt --default-image "$DEFAULT_IMAGE" || HCTL_EXIT2=$?
|
||||
if [ "$HCTL_EXIT2" -eq 0 ]; then
|
||||
echo "✓ Deployment finalised for mohamed-node-mod-1 to $ENV_ID"
|
||||
elif [ "$HCTL_EXIT2" -eq 124 ]; then
|
||||
echo "✓ Second deployment submitted for mohamed-node-mod-1 to $ENV_ID (polling timed out)"
|
||||
else
|
||||
echo "✗ Second hctl deploy failed with exit code $HCTL_EXIT2"
|
||||
exit $HCTL_EXIT2
|
||||
fi
|
||||
Reference in New Issue
Block a user