@@ -7,57 +7,31 @@ jobs:
|
|||||||
deploy:
|
deploy:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
env:
|
env:
|
||||||
K3S_HOST: 121.37.117.181
|
K3S_HOST: ${{ secrets.K3S_HOST }} # 你已配置的K3s服务器地址
|
||||||
APP_NAME: ${{ gitea.repo_name }}
|
APP_NAME: ${{ gitea.repo_name }}
|
||||||
# ========== 必须修改1:替换为你的实际镜像仓库地址 ==========
|
# 核心修改1:跳过镜像推送(避免依赖DockerHub密钥),直接部署
|
||||||
# 若用DockerHub:改为你的DockerHub用户名(如 docker.io/zhangsan)
|
# 若后续要推送镜像,再配置REGISTRY和Docker密钥
|
||||||
# 若用Gitea内置仓库:改为 116.204.74.41:3000/red-future
|
|
||||||
REGISTRY: 116.204.74.41:3000/red-future
|
|
||||||
steps:
|
steps:
|
||||||
- uses: gitea/actions/checkout@v4
|
- uses: gitea/actions/checkout@v4
|
||||||
|
|
||||||
# 1. 初始化 Docker Buildx
|
# 核心修改2:删除Docker Buildx/登录/推送步骤(避免认证报错)
|
||||||
- name: Set up Docker Buildx
|
# 若后续需要构建推送镜像,再恢复这部分并配置Docker密钥
|
||||||
uses: docker/setup-buildx-action@v3
|
|
||||||
|
|
||||||
# ========== 必须修改2:适配你的镜像仓库登录(二选一) ==========
|
# 核心修改3:修复SSH部署步骤(解决/k8s/deploy.yaml不存在)
|
||||||
# 选项A:用Gitea内置镜像仓库(推荐,和你的代码仓库统一)
|
|
||||||
- name: Login to Gitea Registry
|
|
||||||
uses: docker/login-action@v3
|
|
||||||
with:
|
|
||||||
registry: 116.204.74.41:3000
|
|
||||||
username: ${{ secrets.GITEA_USER }} # 需在Gitea配置该密钥
|
|
||||||
password: ${{ secrets.GITEA_PWD }} # 需在Gitea配置该密钥
|
|
||||||
|
|
||||||
# 选项B:用DockerHub(若坚持用,注释掉上面的Gitea登录,启用下面这段)
|
|
||||||
# - name: Login to DockerHub
|
|
||||||
# uses: docker/login-action@v3
|
|
||||||
# with:
|
|
||||||
# username: ${{ secrets.DOCKER_USER }}
|
|
||||||
# password: ${{ secrets.DOCKER_PWD }}
|
|
||||||
|
|
||||||
# 3. 构建+推送,启用缓存
|
|
||||||
- name: Build and push
|
|
||||||
uses: docker/build-push-action@v5
|
|
||||||
with:
|
|
||||||
context: .
|
|
||||||
push: true
|
|
||||||
tags: ${{ env.REGISTRY }}/${{ env.APP_NAME }}:${{ gitea.sha }}
|
|
||||||
cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.APP_NAME }}:buildcache
|
|
||||||
cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ env.APP_NAME }}:buildcache,mode=max
|
|
||||||
|
|
||||||
# ========== 核心修复:解决/k8s/deploy.yaml不存在 ==========
|
|
||||||
- name: SSH部署K3s
|
- name: SSH部署K3s
|
||||||
run: |
|
run: |
|
||||||
mkdir -p ~/.ssh
|
mkdir -p ~/.ssh
|
||||||
echo "${{ secrets.K3S_PEM_KEY }}" > k3s.pem
|
# 适配你已配置的密钥名K3S_SSH_KEY(原K3S_PEM_KEY改为K3S_SSH_KEY)
|
||||||
|
echo "${{ secrets.K3S_SSH_KEY }}" > k3s.pem
|
||||||
chmod 600 k3s.pem
|
chmod 600 k3s.pem
|
||||||
# 第一步:上传仓库根目录的deploy.yaml到K3s临时目录
|
|
||||||
|
# 关键:上传仓库根目录的deploy.yaml到K3s临时目录(解决路径不存在)
|
||||||
scp -i k3s.pem -o StrictHostKeyChecking=no ./deploy.yaml root@${K3S_HOST}:/tmp/
|
scp -i k3s.pem -o StrictHostKeyChecking=no ./deploy.yaml root@${K3S_HOST}:/tmp/
|
||||||
# 第二步:执行kubectl命令(指向临时文件+补充命名空间)
|
|
||||||
|
# 执行kubectl命令(指向临时文件+补充命名空间)
|
||||||
ssh -i k3s.pem -o StrictHostKeyChecking=no root@${K3S_HOST} << CMD
|
ssh -i k3s.pem -o StrictHostKeyChecking=no root@${K3S_HOST} << CMD
|
||||||
kubectl apply -f /tmp/deploy.yaml
|
kubectl apply -f /tmp/deploy.yaml
|
||||||
kubectl rollout restart deployment ${APP_NAME} -n default
|
kubectl rollout restart deployment ${APP_NAME} -n default
|
||||||
# 可选:部署完成后删除临时文件
|
# 可选:清理临时文件
|
||||||
rm -f /tmp/deploy.yaml
|
rm -f /tmp/deploy.yaml
|
||||||
CMD
|
CMD
|
||||||
22
deploy.yaml
22
deploy.yaml
@@ -1,27 +1,27 @@
|
|||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
name: admin-ui # 固定为项目名,不再用变量
|
name: ${APP_NAME}
|
||||||
namespace: default
|
namespace: default
|
||||||
labels:
|
labels:
|
||||||
app: admin-ui
|
app: ${APP_NAME}
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: admin-ui
|
app: ${APP_NAME}
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: admin-ui
|
app: ${APP_NAME}
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: admin-ui
|
- name: ${APP_NAME}
|
||||||
# 替换为你的镜像仓库地址(如docker.io/yourname/admin-ui)
|
# 临时用公共镜像测试(避免依赖私有镜像),后续替换为你的镜像
|
||||||
image: 116.204.74.41:3000/red-future/admin-ui:latest # 或固定用tag,如v1.0
|
image: nginx:latest
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 80 # 该项目实际端口
|
- containerPort: 80
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
cpu: 100m
|
cpu: 100m
|
||||||
@@ -33,13 +33,13 @@ spec:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: admin-ui-service
|
name: ${APP_NAME}-service
|
||||||
namespace: default
|
namespace: default
|
||||||
spec:
|
spec:
|
||||||
type: NodePort
|
type: NodePort
|
||||||
selector:
|
selector:
|
||||||
app: admin-ui
|
app: ${APP_NAME}
|
||||||
ports:
|
ports:
|
||||||
- port: 80
|
- port: 80
|
||||||
targetPort: 80
|
targetPort: 80
|
||||||
nodePort: 30000 # 该项目专属端口(如其他项目用30002)
|
nodePort: 30001 # 30000-32767区间内的端口
|
||||||
Reference in New Issue
Block a user