80 lines
2.7 KiB
YAML
80 lines
2.7 KiB
YAML
on:
|
|
push:
|
|
branches:
|
|
- dev
|
|
jobs:
|
|
validate:
|
|
runs-on: docker
|
|
defaults:
|
|
run:
|
|
shell: sh
|
|
env:
|
|
DOCKER_HOST: tcp://172.17.0.1:2375
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Validate manifests
|
|
run: |
|
|
kubeconform \
|
|
-strict \
|
|
-summary \
|
|
-ignore-missing-schemas \
|
|
-schema-location default \
|
|
-schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
|
|
./manifests/
|
|
|
|
- name: Create test cluster
|
|
run: |
|
|
k3d cluster create test --wait
|
|
|
|
- name: Install ArgoCD
|
|
run: |
|
|
kubectl create namespace argocd
|
|
kubectl apply -n argocd --server-side -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
|
|
kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.27.0/controller.yaml
|
|
kubectl wait --for=condition=available --timeout=180s \
|
|
deployment/argocd-server \
|
|
deployment/argocd-repo-server \
|
|
deployment/argocd-applicationset-controller \
|
|
-n argocd
|
|
kubectl wait --for=condition=available --timeout=60s \
|
|
deployment/sealed-secrets-controller -n kube-system
|
|
until kubectl get secret argocd-initial-admin-secret -n argocd 2>/dev/null; do
|
|
echo "Waiting for argocd-initial-admin-secret..."; sleep 3
|
|
done
|
|
|
|
- name: Import SealedSecrets key
|
|
env:
|
|
SEALED_SECRETS_KEY: ${{ secrets.SEALED_SECRETS_KEY }}
|
|
run: |
|
|
echo "$SEALED_SECRETS_KEY" | kubectl apply -f -
|
|
kubectl rollout restart deployment/sealed-secrets-controller -n kube-system
|
|
kubectl rollout status deployment/sealed-secrets-controller -n kube-system --timeout=60s
|
|
|
|
- name: Apply ArgoCD apps
|
|
run: |
|
|
kubectl apply -f apps/
|
|
|
|
- name: Login to ArgoCD
|
|
run: |
|
|
argocd login argocd-server.argocd.svc.cluster.local \
|
|
--plaintext \
|
|
--grpc-web \
|
|
--username admin \
|
|
--password $(kubectl get secret argocd-initial-admin-secret -n argocd -o jsonpath="{.data.password}" | base64 -d)
|
|
|
|
- name: Wait for ArgoCD sync
|
|
run: |
|
|
APPS=$(argocd app list -o name)
|
|
argocd app sync --async $APPS
|
|
argocd app wait --health --timeout 300 $APPS
|
|
|
|
- name: Wait for all deployments
|
|
run: |
|
|
kubectl wait --for=condition=available --timeout=300s deployment --all --all-namespaces
|
|
|
|
- name: Cleanup
|
|
if: always()
|
|
run: |
|
|
k3d cluster delete test
|