hz
f3a2e65627
Docs, local release tooling (tools/), and the GDScript test suite (never executed by this pipeline, and irrelevant to the API image, the exported web build, or k8s manifests) don't need a full deploy. workflow_dispatch still allows a manual run for any of these if ever needed.
47 lines
1.4 KiB
YAML
47 lines
1.4 KiB
YAML
name: Deploy STEP3 PRD
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- production
|
|
paths-ignore:
|
|
- '**.md'
|
|
- 'tools/**'
|
|
- 'tests/**'
|
|
workflow_dispatch: {}
|
|
|
|
concurrency:
|
|
group: step3-prd
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: self-hosted
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Configure kubeconfig
|
|
env:
|
|
KUBECONFIG_CONTENT: ${{ secrets.KUBECONFIG }}
|
|
run: |
|
|
if [ -n "$KUBECONFIG_CONTENT" ]; then
|
|
mkdir -p /tmp/kube
|
|
printf '%s\n' "$KUBECONFIG_CONTENT" > /tmp/kube/config
|
|
echo "KUBECONFIG=/tmp/kube/config" >> "$GITHUB_ENV"
|
|
fi
|
|
|
|
- name: Deploy PRD
|
|
env:
|
|
DEPLOYMENT_ENVIRONMENT: prd
|
|
KUBE_NAMESPACE: step3-prd
|
|
PUBLIC_API_ORIGIN: https://s3q.ranaze.com
|
|
MONGODB_CONNECTION_STRING: ${{ secrets.PRD_MONGODB_CONNECTION_STRING }}
|
|
AUTH_JWT_KEY: ${{ secrets.PRD_AUTH_JWT_KEY }}
|
|
INTERNAL_PURGE_SECRET: ${{ secrets.PRD_INTERNAL_PURGE_SECRET }}
|
|
STRIPE_SECRET_KEY: ${{ secrets.PRD_STRIPE_SECRET_KEY }}
|
|
STRIPE_WEBHOOK_SECRET: ${{ secrets.PRD_STRIPE_WEBHOOK_SECRET }}
|
|
GOOGLE_CLIENT_ID: ${{ secrets.PRD_GOOGLE_CLIENT_ID }}
|
|
GOOGLE_CLIENT_SECRET: ${{ secrets.PRD_GOOGLE_CLIENT_SECRET }}
|
|
run: bash .gitea/scripts/deploy-environment.sh
|