Makussu/bunkerweb
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

temp stop push to private repo

Browse Source
This commit is contained in:
bunkerity 2022-06-03 18:14:47 +02:00
parent 6f28708c10
commit 1af2264fab
1 changed files with 38 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

73
.github/workflows/prod.yml vendored
View File

@ -39,10 +39,10 @@ jobs:
context: . context: .
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: 10.20.1.1:5000/bw-prod:latest,bunkerity/bunkerweb:latest,bunkerity/bunkerweb:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb:latest tags: 10.20.1.1:5000/bw-tests:latest,bunkerity/bunkerweb:latest,bunkerity/bunkerweb:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb:latest
cache-to: type=registry,ref=10.20.1.1:5000/bw-prod:buildcache,mode=max cache-to: type=registry,ref=10.20.1.1:5000/bw-tests:buildcache,mode=max
- name: Push BW test image - name: Push BW test image
run: docker push 10.20.1.1:5000/bw-prod:latest run: docker push 10.20.1.1:5000/bw-tests:latest
- name: Build autoconf test image - name: Build autoconf test image
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -51,10 +51,10 @@ jobs:
file: autoconf/Dockerfile file: autoconf/Dockerfile
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: 10.20.1.1:5000/bw-autoconf-prod:latest,${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-autoconf:latest tags: 10.20.1.1:5000/bw-autoconf-tests:latest,${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-autoconf:latest,bunkerity/bunkerweb-autoconf:latest
cache-to: type=registry,ref=10.20.1.1:5000/bw-autoconf-prod:buildcache,mode=max cache-to: type=registry,ref=10.20.1.1:5000/bw-autoconf-tests:buildcache,mode=max
- name: Push autoconf test image - name: Push autoconf test image
run: docker push 10.20.1.1:5000/bw-autoconf-prod:latest run: docker push 10.20.1.1:5000/bw-autoconf-tests:latest
- name: Build UI test image - name: Build UI test image
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -63,10 +63,10 @@ jobs:
file: ui/Dockerfile file: ui/Dockerfile
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: 10.20.1.1:5000/bw-ui-prod:latest,${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-ui:latest tags: 10.20.1.1:5000/bw-ui-tests:latest,${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-ui:latest,bunkerity/bunkerweb-ui:latest
cache-to: type=registry,ref=10.20.1.1:5000/bw-ui-prod:buildcache,mode=max cache-to: type=registry,ref=10.20.1.1:5000/bw-ui-tests:buildcache,mode=max
- name: Push UI test image - name: Push UI test image
run: docker push 10.20.1.1:5000/bw-ui-prod:latest run: docker push 10.20.1.1:5000/bw-ui-tests:latest
- name: Build BW test DEB (ubuntu) - name: Build BW test DEB (ubuntu)
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -75,7 +75,7 @@ jobs:
file: linux/Dockerfile-ubuntu file: linux/Dockerfile-ubuntu
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: bw-ubuntu-prod:latest tags: bw-ubuntu-tests:latest
- name: Build BW test DEB (debian) - name: Build BW test DEB (debian)
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -84,7 +84,7 @@ jobs:
file: linux/Dockerfile-debian file: linux/Dockerfile-debian
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: bw-debian-prod:latest tags: bw-debian-tests:latest
- name: Build BW test RPM (centos) - name: Build BW test RPM (centos)
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -93,7 +93,7 @@ jobs:
file: linux/Dockerfile-centos file: linux/Dockerfile-centos
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: bw-centos-prod:latest tags: bw-centos-tests:latest
- name: Build BW test RPM (fedora) - name: Build BW test RPM (fedora)
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -102,7 +102,7 @@ jobs:
file: linux/Dockerfile-fedora file: linux/Dockerfile-fedora
platforms: linux/amd64 platforms: linux/amd64
load: true load: true
tags: bw-fedora-prod:latest tags: bw-fedora-tests:latest
# Check CVE # Check CVE
security: security:
@ -113,7 +113,7 @@ jobs:
- name: Check security vulnerabilities for BW - name: Check security vulnerabilities for BW
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:
image-ref: 10.20.1.1:5000/bw-prod:latest image-ref: 10.20.1.1:5000/bw-tests:latest
format: table format: table
exit-code: 1 exit-code: 1
ignore-unfixed: false ignore-unfixed: false
@ -122,7 +122,7 @@ jobs:
- name: Check security vulnerabilities for autoconf - name: Check security vulnerabilities for autoconf
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:
image-ref: 10.20.1.1:5000/bw-autoconf-prod:latest image-ref: 10.20.1.1:5000/bw-autoconf-tests:latest
format: table format: table
exit-code: 1 exit-code: 1
ignore-unfixed: false ignore-unfixed: false
@ -131,7 +131,7 @@ jobs:
- name: Check security vulnerabilities for UI - name: Check security vulnerabilities for UI
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:
image-ref: 10.20.1.1:5000/bw-ui-prod:latest image-ref: 10.20.1.1:5000/bw-ui-tests:latest
format: table format: table
exit-code: 1 exit-code: 1
ignore-unfixed: false ignore-unfixed: false
@ -209,8 +209,9 @@ jobs:
context: . context: .
platforms: linux/amd64,linux/386 platforms: linux/amd64,linux/386
push: true push: true
tags: bunkerity/bunkerweb:latest,bunkerity/bunkerweb:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb:latest tags: bunkerity/bunkerweb:latest,bunkerity/bunkerweb:${{ env.VERSION }}
cache-from: type=registry,ref=10.20.1.1:5000/bw-prod:buildcache #tags: bunkerity/bunkerweb:latest,bunkerity/bunkerweb:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb:latest
cache-from: type=registry,ref=10.20.1.1:5000/bw-tests:buildcache
- name: Build and push BW autoconf image - name: Build and push BW autoconf image
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -218,8 +219,9 @@ jobs:
context: . context: .
platforms: linux/amd64,linux/386 platforms: linux/amd64,linux/386
push: true push: true
tags: bunkerity/bunkerweb-autoconf:latest,bunkerity/bunkerweb-autoconf:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-autoconf:latest tags: bunkerity/bunkerweb-autoconf:latest,bunkerity/bunkerweb-autoconf:${{ env.VERSION }}
cache-from: type=registry,ref=10.20.1.1:5000/bw-autoconf-prod:buildcache #tags: bunkerity/bunkerweb-autoconf:latest,bunkerity/bunkerweb-autoconf:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-autoconf:latest
cache-from: type=registry,ref=10.20.1.1:5000/bw-autoconf-tests:buildcache
- name: Build and push BW UI image - name: Build and push BW UI image
uses: docker/build-push-action@v2 uses: docker/build-push-action@v2
@ -227,8 +229,9 @@ jobs:
context: . context: .
platforms: linux/amd64,linux/386 platforms: linux/amd64,linux/386
push: true push: true
tags: bunkerity/bunkerweb-ui:latest,bunkerity/bunkerweb-ui:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-ui:latest tags: bunkerity/bunkerweb-ui:latest,bunkerity/bunkerweb-ui:${{ env.VERSION }}
cache-from: type=registry,ref=10.20.1.1:5000/bw-ui-prod:buildcache #tags: bunkerity/bunkerweb-ui:latest,bunkerity/bunkerweb-ui:${{ env.VERSION }},${{ secrets.PRIVATE_REGISTRY }}/bunkerweb-ui:latest
cache-from: type=registry,ref=10.20.1.1:5000/bw-ui-tests:buildcache
# Push to prod registries (ARM) # Push to prod registries (ARM)
push-arm: push-arm:
@ -284,22 +287,22 @@ jobs:
tags: bunkerity/bunkerweb-ui:latest,bunkerity/bunkerweb-ui:${{ env.VERSION }} tags: bunkerity/bunkerweb-ui:latest,bunkerity/bunkerweb-ui:${{ env.VERSION }}
# Deploy to prod infrastructure # Deploy to prod infrastructure
deploy: # deploy:
needs: push # needs: push
runs-on: [self-hosted, X64] # runs-on: [self-hosted, X64]
steps: # steps:
- name: Checkout source code # - name: Checkout source code
uses: actions/checkout@v3 # uses: actions/checkout@v3
- name: k8s login (prod) # - name: k8s login (prod)
uses: azure/k8s-set-context@v2 # uses: azure/k8s-set-context@v2
with: # with:
method: kubeconfig # method: kubeconfig
kubeconfig: ${{ secrets.KUBE_CONFIG_PROD }} # kubeconfig: ${{ secrets.KUBE_CONFIG_PROD }}
- name: k8s deploy (prod) # - name: k8s deploy (prod)
run: kubectl rollout restart deployment bunkerweb-controller && kubectl rollout restart daemonset bunkerweb # run: kubectl rollout restart deployment bunkerweb-controller && kubectl rollout restart daemonset bunkerweb
# Push DEB/RPM to packagecloud # Push DEB/RPM to packagecloud
push-linux: push-linux: