186 lines
8.2 KiB
YAML
186 lines
8.2 KiB
YAML
name: SFP Server Deployment
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
image_tag:
|
|
description: 'Docker image tag to deploy (overrides environment default, e.g., v1.2.3, latest, pr-123-dev)'
|
|
required: false
|
|
type: string
|
|
cli_version:
|
|
description: 'SFP CLI version to use (latest, or specific version like v48.3.0)'
|
|
required: false
|
|
default: 'latest'
|
|
|
|
jobs:
|
|
deploy-server:
|
|
name: 'deploy to ${{ matrix.environment }}'
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
environment: ${{ fromJson(vars.DEPLOYMENT_ENVIRONMENTS || '["development"]') }}
|
|
environment: ${{ matrix.environment }}
|
|
|
|
steps:
|
|
- name: Install SFP CLI on Runner
|
|
run: |
|
|
echo "📦 Installing SFP CLI on GitHub runner..."
|
|
|
|
# Download and install CLI from source.flxbl.io releases
|
|
CLI_VERSION="${{ github.event.inputs.cli_version || 'latest' }}"
|
|
|
|
if [ "$CLI_VERSION" = "latest" ]; then
|
|
# Get the latest release info
|
|
RELEASE_DATA=$(curl -s -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
|
|
"https://source.flxbl.io/api/v1/repos/flxbl/sfp-pro/releases/latest")
|
|
DEB_URL=$(echo "$RELEASE_DATA" | jq -r '.assets[] | select(.name | endswith("linux_amd64.deb")) | .browser_download_url')
|
|
else
|
|
# For specific version, get the deb filename from that release
|
|
RELEASE_DATA=$(curl -s -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
|
|
"https://source.flxbl.io/api/v1/repos/flxbl/sfp-pro/releases/tags/$CLI_VERSION")
|
|
DEB_URL=$(echo "$RELEASE_DATA" | jq -r '.assets[] | select(.name | endswith("linux_amd64.deb")) | .browser_download_url')
|
|
fi
|
|
|
|
echo "📦 Using CLI version: $CLI_VERSION"
|
|
echo "📦 Downloading from: $DEB_URL"
|
|
|
|
# Download and install the deb package
|
|
curl -L -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" "$DEB_URL" -o /tmp/sfp-pro.deb
|
|
sudo dpkg -i /tmp/sfp-pro.deb || sudo apt-get install -f -y
|
|
|
|
# Verify installation
|
|
sfp --version
|
|
|
|
echo "✅ SFP CLI installed successfully on runner"
|
|
|
|
- name: Install Supabase CLI
|
|
run: |
|
|
echo "📥 Installing Supabase CLI..."
|
|
|
|
# Download and install Supabase CLI DEB package
|
|
curl -L -o supabase.deb 'https://github.com/supabase/cli/releases/download/v2.23.4/supabase_2.23.4_linux_amd64.deb'
|
|
sudo dpkg -i supabase.deb || sudo apt-get install -f -y
|
|
|
|
# Verify installation
|
|
echo "✅ Verifying installation..."
|
|
supabase --version
|
|
echo "✅ Supabase CLI installed successfully"
|
|
|
|
- name: Setup SSH
|
|
run: |
|
|
# Create SSH directory and key file
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/deploy_key
|
|
chmod 600 ~/.ssh/deploy_key
|
|
|
|
# Add host to known_hosts to avoid prompts
|
|
ssh-keyscan -H ${{ vars.SSH_HOST }} >> ~/.ssh/known_hosts
|
|
|
|
|
|
- name: Deploy Server Update
|
|
id: deploy
|
|
env:
|
|
SUPABASE_DB_URL: ${{ secrets.SUPABASE_DB_URL }}
|
|
DOCKER_REGISTRY: source.flxbl.io
|
|
DOCKER_REGISTRY_TOKEN: ${{ secrets.GITEA_TOKEN }}
|
|
IMAGE_FQDN: source.flxbl.io/flxbl/sfp-server
|
|
run: |
|
|
echo "🚀 Starting deployment to ${{ matrix.environment }}..."
|
|
|
|
# Set deployment parameters from environment variables
|
|
TENANT="${{ vars.SFP_TENANT || 'sfp-server' }}"
|
|
SSH_HOST="${{ vars.SSH_HOST }}"
|
|
SSH_USER="${{ vars.SSH_USER || 'root' }}"
|
|
|
|
# Set image tag priority: input > environment variable > default (latest)
|
|
IMAGE_TAG="${{ github.event.inputs.image_tag || vars.IMAGE_TAG || 'latest' }}"
|
|
|
|
# Validate required secrets
|
|
if [ -z "$SUPABASE_DB_URL" ]; then
|
|
echo "❌ SUPABASE_DB_URL secret is required"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$DOCKER_REGISTRY_TOKEN" ]; then
|
|
echo "❌ GITEA_TOKEN secret is required for pulling images from source.flxbl.io"
|
|
exit 1
|
|
fi
|
|
|
|
echo "📦 Deploying to environment: ${{ matrix.environment }}"
|
|
echo "🐳 Docker registry: $DOCKER_REGISTRY"
|
|
echo "🖼️ Image FQDN: $IMAGE_FQDN"
|
|
echo "🏷️ Image tag: $IMAGE_TAG"
|
|
echo "🗄️ Database configured"
|
|
|
|
# Export environment variables for sfp server update
|
|
export SUPABASE_DB_URL="$SUPABASE_DB_URL"
|
|
export DOCKER_REGISTRY="$DOCKER_REGISTRY"
|
|
export DOCKER_REGISTRY_TOKEN="$DOCKER_REGISTRY_TOKEN"
|
|
export IMAGE_FQDN="$IMAGE_FQDN"
|
|
export IMAGE_TAG="$IMAGE_TAG"
|
|
|
|
# Deploy server using sfp server update (handles stop/start automatically)
|
|
echo "🔄 Deploying server..."
|
|
sfp server update --tenant "$TENANT" --docker-tag "$IMAGE_TAG" --ssh-connection "$SSH_USER@$SSH_HOST" --identity-file ~/.ssh/deploy_key
|
|
|
|
# Wait for startup
|
|
echo "⏳ Waiting for server to start..."
|
|
sleep 30
|
|
|
|
echo "✅ Deployment completed"
|
|
|
|
- name: Post-Deployment Health Check
|
|
id: health_check
|
|
run: |
|
|
echo "🔍 Running post-deployment health checks..."
|
|
|
|
# Get environment configuration
|
|
TENANT="${{ vars.SFP_TENANT || 'sfp-server' }}"
|
|
SSH_HOST="${{ vars.SSH_HOST }}"
|
|
SSH_USER="${{ vars.SSH_USER || 'root' }}"
|
|
|
|
# Wait for services to be ready
|
|
timeout 300 bash -c 'until sfp server status --tenant "'"$TENANT"'" --ssh-connection "'"$SSH_USER@$SSH_HOST"'" --identity-file ~/.ssh/deploy_key --json | grep -A 100 "^{$" | jq -e "all(.result.services[]; .state == \"running\")" > /dev/null; do sleep 5; done'
|
|
|
|
# Detailed status check
|
|
STATUS_RESULT=$(sfp server status --tenant "$TENANT" --ssh-connection "$SSH_USER@$SSH_HOST" --identity-file ~/.ssh/deploy_key --json | grep -A 100 "^{$")
|
|
|
|
if echo "$STATUS_RESULT" | jq -e 'all(.result.services[]; .state == "running")' > /dev/null; then
|
|
echo "✅ All services are running after deployment"
|
|
echo "healthy=true" >> $GITHUB_OUTPUT
|
|
|
|
# Get new version
|
|
NEW_VERSION=$(sfp server status --tenant "$TENANT" --ssh-connection "$SSH_USER@$SSH_HOST" --identity-file ~/.ssh/deploy_key --json | jq -r '.version')
|
|
echo "new_version=$NEW_VERSION" >> $GITHUB_OUTPUT
|
|
echo "📦 New version: $NEW_VERSION"
|
|
else
|
|
echo "❌ Some services are not running"
|
|
echo "healthy=false" >> $GITHUB_OUTPUT
|
|
exit 1
|
|
fi
|
|
|
|
deployment-summary:
|
|
name: 'deployment summary'
|
|
needs: [deploy-server]
|
|
if: always()
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Generate Summary
|
|
run: |
|
|
echo "## 🚀 SFP Server Deployment Summary" >> $GITHUB_STEP_SUMMARY
|
|
echo "" >> $GITHUB_STEP_SUMMARY
|
|
echo "**Image Tag:** ${{ github.event.inputs.image_tag || 'Environment default or latest' }}" >> $GITHUB_STEP_SUMMARY
|
|
echo "**Environments:** ${{ vars.DEPLOYMENT_ENVIRONMENTS || '[\"development\"]' }}" >> $GITHUB_STEP_SUMMARY
|
|
echo "**CLI Version:** ${{ github.event.inputs.cli_version || 'latest' }}" >> $GITHUB_STEP_SUMMARY
|
|
echo "**Triggered By:** @${{ github.actor }}" >> $GITHUB_STEP_SUMMARY
|
|
echo "**Timestamp:** $(date -u '+%Y-%m-%d %H:%M:%S UTC')" >> $GITHUB_STEP_SUMMARY
|
|
echo "" >> $GITHUB_STEP_SUMMARY
|
|
|
|
if [ "${{ needs.deploy-server.result }}" == "success" ]; then
|
|
echo "✅ **Deployment:** Success across all environments" >> $GITHUB_STEP_SUMMARY
|
|
else
|
|
echo "❌ **Deployment:** Failed (check individual environment results)" >> $GITHUB_STEP_SUMMARY
|
|
fi
|
|
echo "" >> $GITHUB_STEP_SUMMARY
|
|
echo "🔗 **Workflow:** [${{ github.run_id }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})" >> $GITHUB_STEP_SUMMARY |