-
Notifications
You must be signed in to change notification settings - Fork 0
96 lines (86 loc) · 3.89 KB
/
deploy.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
name: Deploy
on:
push:
branches: [ master, james/test ]
permissions: read-all
jobs:
deploy_to_dev3:
name: Deploy to dev3
environment: dev3
runs-on: ubuntu-latest
#if: github.ref == 'refs/heads/master'
steps:
- name: Check out the repo
uses: actions/checkout@v4
- name: Install SSH key
uses: shimataro/ssh-key-action@d4fffb50872869abe2d9a9098a6d9c5aa7d16be4 # v2
with:
key: ${{ secrets.SSH_PRIVATE_KEY }}
name: id_ed25519 # optional
known_hosts: ${{ secrets.SSH_KNOWN_HOSTS }}
if_key_exists: fail # replace / ignore / fail; optional (defaults to fail)
- name: Setup WireGuard
run: |
sudo apt install wireguard
echo "${{ secrets.WIREGUARD_PRIVATE_KEY }}" > privatekey
sudo ip link add dev wg1 type wireguard
sudo ip address add dev wg1 ${{ secrets.WIREGUARD_OVERLAY_NETWORK_IP }} peer ${{ secrets.SSH_TARGET_IP }}
sudo wg set wg1 listen-port 48123 private-key privatekey peer ${{ secrets.WIREGUARD_PEER_PUBLIC_KEY }} allowed-ips 0.0.0.0/0 endpoint ${{ secrets.WIREGUARD_ENDPOINT }}
sudo ip link set up dev wg1
- name: Install Helm Chart
run: |
scp ${{ secrets.SSH_USER }}@${{ secrets.SSH_TARGET_IP }}:~/.kube/config ./
helm upgrade \
--install \
--kubeconfig ./config \
--kube-apiserver https://${{ secrets.SSH_TARGET_IP }}:6443 \
-n ${{ vars.APP_NAMESPACE }} \
--create-namespace \
wiki \
bookstack-helm \
-f ./bookstack-helm/values.yaml \
--set bookstack.db.username="${{ secrets.DB_USERNAME }}" \
--set bookstack.db.password="${{ secrets.DB_PASSWORD }}" \
--set bookstack.db.root_password="${{ secrets.ROOT_PASSWORD }}" \
--set bookstack.mail.username="${{ secrets.MAIL_USERNAME }}" \
--set bookstack.mail.password="${{ secrets.MAIL_PASSWORD }}"
deploy_to_prod1:
name: Deploy to prod 1
environment: prod1
runs-on: ubuntu-latest
if: github.ref == 'refs/heads/master'
steps:
- name: Check out the repo
uses: actions/checkout@v4
- name: Install SSH key
uses: shimataro/ssh-key-action@d4fffb50872869abe2d9a9098a6d9c5aa7d16be4 # v2
with:
key: ${{ secrets.SSH_PRIVATE_KEY }}
name: id_ed25519 # optional
known_hosts: ${{ secrets.SSH_KNOWN_HOSTS }}
if_key_exists: fail # replace / ignore / fail; optional (defaults to fail)
- name: Setup WireGuard
run: |
sudo apt install wireguard
echo "${{ secrets.WIREGUARD_PRIVATE_KEY }}" > privatekey
sudo ip link add dev wg2 type wireguard
sudo ip address add dev wg2 ${{ secrets.WIREGUARD_OVERLAY_NETWORK_IP }} peer ${{ secrets.SSH_TARGET_IP }}
sudo wg set wg2 listen-port 48123 private-key privatekey peer ${{ secrets.WIREGUARD_PEER_PUBLIC_KEY }} allowed-ips 0.0.0.0/0 endpoint ${{ secrets.WIREGUARD_ENDPOINT }}
sudo ip link set up dev wg2
- name: Install Helm Chart
run: |
scp ${{ secrets.SSH_USER }}@${{ secrets.SSH_TARGET_IP }}:~/.kube/config ./
helm upgrade \
--install \
--kubeconfig ./config \
--kube-apiserver https://${{ secrets.SSH_TARGET_IP }}:6443 \
-n ${{ vars.APP_NAMESPACE }} \
--create-namespace \
wiki \
bookstack-helm \
-f ./bookstack-helm/values.yaml \
--set bookstack.db.username="${{ secrets.DB_USERNAME }}" \
--set bookstack.db.password="${{ secrets.DB_PASSWORD }}" \
--set bookstack.db.root_password="${{ secrets.ROOT_PASSWORD }}" \
--set bookstack.mail.username="${{ secrets.MAIL_USERNAME }}" \
--set bookstack.mail.password="${{ secrets.MAIL_PASSWORD }}"