bit-learning-fe/.github/workflows/deploy-dev-gitops.yml at main · Bit-Learning/bit-learning-fe · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
name: Deploy Dev via GitOps

on:
    workflow_dispatch:
    push:
        branches: [develop]
        paths:
            - "apps/web/**"
            - "apps/admin/**"
            - "packages/**"
            - "package.json"
            - "pnpm-lock.yaml"
            - "pnpm-workspace.yaml"
            - "turbo.json"
            - ".github/workflows/deploy-dev-gitops.yml"

concurrency:
    group: deploy-dev-gitops
    cancel-in-progress: true

permissions:
    contents: read
    packages: read

env:
    REGISTRY_NAMESPACE: hoangclw
    WEB_IMAGE: hoangclw/bitlearning-web
    ADMIN_IMAGE: hoangclw/bitlearning-admin
    GITOPS_REPOSITORY: lcaohoanq/bit-learning-gitops
    GITOPS_OVERLAY: apps/frontend/overlays/dev
    IMAGE_TAG: ${{ github.sha }}

jobs:
    build-push-and-update-gitops:
        name: Build, push, update GitOps
        runs-on: ubuntu-latest
        steps:
            - name: Checkout frontend
              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1

            - name: Login to Docker Hub
              uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
              with:
                  username: ${{ secrets.DOCKERHUB_USERNAME }}
                  password: ${{ secrets.DOCKERHUB_TOKEN }}

            - name: Build and push web image
              uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
              with:
                  context: .
                  file: apps/web/Dockerfile.prodV2
                  push: true
                  tags: |
                      ${{ env.WEB_IMAGE }}:${{ env.IMAGE_TAG }}
                      ${{ env.WEB_IMAGE }}:dev-latest
                  build-args: |
                      VITE_API_BASE_URL=${{ secrets.DEV_VITE_API_BASE_URL }}
                      VITE_API_TIMEOUT=${{ vars.DEV_VITE_API_TIMEOUT || '30000' }}
                      VITE_SITE_URL=${{ vars.DEV_VITE_SITE_URL }}
                      VITE_WS_URL=${{ secrets.DEV_VITE_WS_URL }}

            - name: Build and push admin image
              uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
              with:
                  context: .
                  file: apps/admin/Dockerfile.prodV2
                  push: true
                  tags: |
                      ${{ env.ADMIN_IMAGE }}:${{ env.IMAGE_TAG }}
                      ${{ env.ADMIN_IMAGE }}:dev-latest
                  build-args: |
                      VITE_API_BASE_URL=${{ secrets.DEV_VITE_API_BASE_URL }}
                      VITE_CLERK_PUBLISHABLE_KEY=${{ secrets.DEV_VITE_CLERK_PUBLISHABLE_KEY }}
                      VITE_MINIO_GAME_URL=${{ vars.DEV_VITE_MINIO_GAME_URL }}
                      VITE_MINIO_THUMBNAIL_URL=${{ vars.DEV_VITE_MINIO_THUMBNAIL_URL }}
                      VITE_PUBLIC_SITE_URL=${{ vars.DEV_VITE_PUBLIC_SITE_URL }}
                      VITE_WS_URL=${{ secrets.DEV_VITE_WS_URL }}

            - name: Checkout GitOps repository
              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
              with:
                  repository: ${{ env.GITOPS_REPOSITORY }}
                  path: gitops
                  ssh-key: ${{ secrets.GITOPS_DEPLOY_KEY }}

            - name: Update dev image tags
              working-directory: gitops
              run: |
                  set -euo pipefail
                  file="${GITOPS_OVERLAY}/kustomization.yaml"
                  python - <<'PY'
                  from pathlib import Path
                  import os

                  path = Path(os.environ["GITOPS_OVERLAY"]) / "kustomization.yaml"
                  tag = os.environ["IMAGE_TAG"]
                  text = path.read_text()
                  lines = text.splitlines()
                  current_image = None

                  for i, line in enumerate(lines):
                      stripped = line.strip()
                      if stripped.startswith("- name: "):
                          current_image = stripped.removeprefix("- name: ").strip()
                      elif stripped.startswith("newTag: ") and current_image in {
                          "hoangclw/bitlearning-web",
                          "hoangclw/bitlearning-admin",
                      }:
                          indent = line[: len(line) - len(line.lstrip())]
                          lines[i] = f"{indent}newTag: {tag}"

                  path.write_text("\n".join(lines) + "\n")
                  PY
                  git diff -- "${file}"

            - name: Commit and push GitOps update
              working-directory: gitops
              run: |
                  set -euo pipefail
                  git config user.name "github-actions[bot]"
                  git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
                  git add "${GITOPS_OVERLAY}/kustomization.yaml"
                  if git diff --cached --quiet; then
                    echo "GitOps image tags are already up to date."
                    exit 0
                  fi
                  git commit -m "chore(fe-dev): deploy ${IMAGE_TAG}"
                  git push