6d7cd108d3
Some checks failed
Deploy Hugo Blog to k3s / build-and-deploy (push) Failing after 23s
- Use Podman (daemonless) instead of Docker for building images - kubeconfig stored as Gitea secret KUBECONFIG_B64 - RBAC: hugo-deployer SA for k8s API access - Gitea Registry enabled for container storage
78 lines
2.3 KiB
YAML
78 lines
2.3 KiB
YAML
name: Deploy Hugo Blog to k3s
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
REGISTRY: git.luochen570.cn
|
|
IMAGE: luochen570/hugo-blog
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Hugo
|
|
uses: peaceiris/actions-hugo@v3
|
|
with:
|
|
hugo-version: '0.161.1'
|
|
extended: true
|
|
|
|
- name: Hugo Build
|
|
run: hugo --minify
|
|
|
|
- name: Install Podman
|
|
run: |
|
|
apt-get update -qq
|
|
apt-get install -y -qq podman fuse-overlayfs
|
|
# Configure Podman for Gitea Registry
|
|
mkdir -p /etc/containers/registries.conf.d
|
|
cat > /etc/containers/registries.conf.d/gitea-registry.conf <<REGCFG
|
|
[[registry]]
|
|
location = "${{ env.REGISTRY }}"
|
|
insecure = true
|
|
REGCFG
|
|
|
|
- name: Build and Push with Podman
|
|
env:
|
|
REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
|
|
run: |
|
|
# Login to Gitea Registry
|
|
echo "$REGISTRY_TOKEN" | \
|
|
podman login ${{ env.REGISTRY }} -u luochen570 --password-stdin
|
|
|
|
# Build image (daemonless!)
|
|
podman build -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }} .
|
|
podman tag ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }} \
|
|
${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
|
|
|
|
# Push
|
|
podman push ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }}
|
|
podman push ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
|
|
|
|
- name: Deploy to k3s
|
|
env:
|
|
KUBECONFIG_B64: ${{ secrets.KUBECONFIG_B64 }}
|
|
run: |
|
|
# Decode kubeconfig
|
|
echo "$KUBECONFIG_B64" | base64 -d > /tmp/kubeconfig.json
|
|
|
|
# Download kubectl
|
|
curl -fsSLO "https://dl.k8s.io/release/v1.32.0/bin/linux/amd64/kubectl"
|
|
chmod +x kubectl
|
|
|
|
# Rollout new image
|
|
./kubectl --kubeconfig /tmp/kubeconfig.json \
|
|
set image deployment/hugo-blog -n hugo \
|
|
nginx=${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }}
|
|
|
|
./kubectl --kubeconfig /tmp/kubeconfig.json \
|
|
rollout status deployment/hugo-blog -n hugo --timeout=120s
|