bast/boday_tf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

.github/workflows/deploy.yml aktualisiert
Some checks failed
Django Helm GitOps Deploy / build-and-deploy (push) Failing after 54s
Details

Browse source
This commit is contained in:
bast 2026-11-01 00:58:53 +00:00
parent f6bc7129d0
commit ca33bb4a45
1 changed files with 4 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
.github/workflows/deploy.yml vendored
View file

@ -13,11 +13,8 @@ jobs:
- name: Checkout Code - name: Checkout Code
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Activate Included Terraform Binary # DER INSTALLATIONS-/AKTIVIERUNGSSCHRITT IST ENTFERNT!
run: | # Terraform steht durch das Runner-Volume sofort global bereit.
mv ./terraform /usr/local/bin/terraform 2>/dev/null || echo "Nutze vorhandenes File"
chmod +x /usr/local/bin/terraform
terraform --version
- name: Trust Local Nginx Certificate Inside Container - name: Trust Local Nginx Certificate Inside Container
run: | run: |
@ -25,31 +22,28 @@ jobs:
cp nginx_ssl/nginx.crt /usr/local/share/ca-certificates/nginx-sandbox.crt 2>/dev/null || echo "Nutze Workspace-Zertifikat" cp nginx_ssl/nginx.crt /usr/local/share/ca-certificates/nginx-sandbox.crt 2>/dev/null || echo "Nutze Workspace-Zertifikat"
update-ca-certificates update-ca-certificates
# Nutzt dein Personal Access Token für den Registry-Push über den Host-Socket
- name: Log in to Local Registry - name: Log in to Local Registry
run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login localhost:3005 -u ${{ github.actor }} --password-stdin run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login localhost:3005 -u ${{ github.actor }} --password-stdin
# Baut das Django-Image und taggt es mit dem aktuellen Git-SHA
- name: Build Django Image - name: Build Django Image
run: | run: |
docker build -t registry.local/bast/boday-it-web:${{ github.sha }} . docker build -t registry.local/bast/boday-it-web:${{ github.sha }} .
docker build -t registry.local/bast/boday-it-web:latest . docker build -t registry.local/bast/boday-it-web:latest .
# Pusht das Image hochsicher via HTTPS über das Nginx-Tor
- name: Push Django Image - name: Push Django Image
run: | run: |
docker push registry.local/bast/boday-it-web:${{ github.sha }} docker push registry.local/bast/boday-it-web:${{ github.sha }}
docker push registry.local/bast/boday-it-web:latest docker push registry.local/bast/boday-it-web:latest
# Bereitet den Kubernetes-Zugang über das automatische Secret vor
- name: Prepare Kubernetes Access - name: Prepare Kubernetes Access
run: | run: |
echo "${{ secrets.KUBECONFIG_DATA }}" > ./kind_kubeconfig echo "${{ secrets.KUBECONFIG_DATA }}" > ./kind_kubeconfig
chmod 600 ./kind_kubeconfig chmod 600 ./kind_kubeconfig
# Das grosse Finale: Rollout des kompletten Helm-Charts
- name: Terraform Deploy - name: Terraform Deploy
run: | run: |
# Führt direkt das installierte Zentral-Binary aus!
terraform --version
terraform init terraform init
terraform apply -auto-approve -var="app_version=${{ github.sha }}" terraform apply -auto-approve -var="app_version=${{ github.sha }}"