Skip to content

Feature/cai #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
YilingCAI merged 16 commits into from
Mar 24, 2026
Merged

Feature/cai #20

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
5080d6f
fix workflow env
YilingCAI Mar 20, 2026
75ba591
setup
YilingCAI Mar 23, 2026
0486a02
fix AWS auth
YilingCAI Mar 23, 2026
4988815
fix gitops env
YilingCAI Mar 23, 2026
61a203c
fix gitops env
YilingCAI Mar 23, 2026
71a5a3e
fix gitops env
YilingCAI Mar 23, 2026
1d79c40
fix gitops env
YilingCAI Mar 23, 2026
c27a240
fix gitops env
YilingCAI Mar 23, 2026
5658004
fix gitops env
YilingCAI Mar 23, 2026
e02fbf2
fix postgre auth
YilingCAI Mar 23, 2026
5fa826d
fix postgre auth
YilingCAI Mar 23, 2026
0574335
fix startup
YilingCAI Mar 23, 2026
431247d
fix(backend): add sslmode=require for RDS SSL connections
YilingCAI Mar 23, 2026
4f7e1cc
fix(frontend): use nginx-unprivileged to avoid chown permission error…
YilingCAI Mar 23, 2026
5602ad2
fix(frontend): use relative API base URL instead of localhost:8000
YilingCAI Mar 23, 2026
737d5b2
new project settup
YilingCAI Mar 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .github/actions/aws-auth/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,8 @@ runs:
aws-region: ${{ inputs.aws-region }}
role-session-name: ${{ inputs.session-name }}
role-duration-seconds: ${{ inputs.duration-seconds }}
audience: sts.amazonaws.com
unset-current-credentials: true

- name: Get AWS Account ID
id: aws-account
Expand Down
63 changes: 35 additions & 28 deletions .github/actions/deploy-env/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,9 @@ inputs:
gitops-repo:
description: "Owner/name of the GitOps repository"
required: true
target-environment:
description: "EKs env"
required: true

# ── K8s / AWS ─────────────────────────────────────────────────────────────
eks-cluster-name:
Expand Down Expand Up @@ -101,33 +104,9 @@ inputs:
runs:
using: "composite"
steps:
# ── 1. Update GitOps repo ───────────────────────────────────────────────
- name: "Checkout GitOps repo"
uses: actions/checkout@v4
with:
repository: ${{ inputs.gitops-repo }}
token: ${{ inputs.gitops-deploy-token }}
path: _gitops

- name: "Patch image tag (${{ inputs.gitops-env }} → ${{ inputs.image-tag }})"
shell: bash
run: |
docker run --rm --user root -v "$PWD/_gitops:/gitops" mikefarah/yq:4 \
e '.backend.image.tag = "${{ inputs.image-tag }}" | .frontend.image.tag = "${{ inputs.image-tag }}"' \
-i /gitops/environments/${{ inputs.gitops-env }}/values.yaml

- name: "Commit & push GitOps change"
shell: bash
run: |
cd _gitops
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add environments/${{ inputs.gitops-env }}/values.yaml
git diff --cached --quiet && echo "No changes to commit" && exit 0
git commit -m "chore(deploy): ${{ inputs.gitops-env }} image tag ${{ inputs.image-tag }} [skip ci]"
git push origin main

# ── 2. Authenticate with AWS ────────────────────────────────────────────
# ── 1. Authenticate with AWS & write K8s secret FIRST ──────────────────
# Must happen before the gitops commit so that pods starting in response
# to the ArgoCD sync always find a secret with the correct DATABASE_HOST.
- name: "Authenticate with AWS"
uses: ./.github/actions/aws-auth
with:
Expand All @@ -141,7 +120,7 @@ runs:
--name ${{ inputs.eks-cluster-name }} \
--region ${{ inputs.aws-region }}

# ── 3. Upsert K8s DB secret ─────────────────────────────────────────────
# ── 2. Upsert K8s DB secret ─────────────────────────────────────────────
- name: "Upsert DB credentials secret"
shell: bash
run: |
Expand All @@ -154,6 +133,34 @@ runs:
--from-literal=password=${{ inputs.db-password }} \
--dry-run=client -o yaml | kubectl apply -f -

# ── 3. Update GitOps repo (triggers ArgoCD sync) ────────────────────────
# K8s secret is already correct above — pods that start from this sync
# will find DATABASE_HOST populated immediately.
- name: "Checkout GitOps repo"
uses: actions/checkout@v4
with:
repository: ${{ inputs.gitops-repo }}
token: ${{ inputs.gitops-deploy-token }}
path: _gitops

- name: "Patch image tag (${{ inputs.gitops-env }} → ${{ inputs.image-tag }})"
shell: bash
run: |
docker run --rm --user root -v "$PWD/_gitops:/gitops" mikefarah/yq:4 \
e '.backend.image.tag = "${{ inputs.image-tag }}" | .frontend.image.tag = "${{ inputs.image-tag }}"' \
-i /gitops/environments/${{ inputs.target-environment }}/values.yaml

- name: "Commit & push GitOps change"
shell: bash
run: |
cd _gitops
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add environments/${{ inputs.target-environment }}/values.yaml
git diff --cached --quiet && echo "No changes to commit" && exit 0
git commit -m "chore(deploy): ${{ inputs.gitops-env }} image tag ${{ inputs.image-tag }} [skip ci]"
git push origin main

# ── 4. Wait for ArgoCD Healthy + Synced ────────────────────────────────
- name: "Wait for ArgoCD sync (${{ inputs.argocd-app-name }})"
shell: bash
Expand Down
Loading
Loading