This commit is contained in:
121
.drone.yml
121
.drone.yml
@ -271,63 +271,112 @@ kind: pipeline
|
|||||||
type: kubernetes
|
type: kubernetes
|
||||||
name: keycloak-theme-pipeline
|
name: keycloak-theme-pipeline
|
||||||
|
|
||||||
# Триггер: запускать ТОЛЬКО при изменениях в keycloak-theme/
|
|
||||||
trigger:
|
trigger:
|
||||||
branch:
|
branch:
|
||||||
- main
|
- main
|
||||||
- master
|
- master
|
||||||
event:
|
event:
|
||||||
- push
|
- push
|
||||||
paths:
|
|
||||||
include:
|
volumes:
|
||||||
- keycloak-theme/**
|
- name: shared
|
||||||
exclude:
|
temp: {}
|
||||||
- keycloak-theme/README.md
|
|
||||||
- keycloak-theme/**/*.md
|
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
# --- Сборка Keycloak темы ---
|
# --- Шаг 1: Проверка изменений ---
|
||||||
- name: build-keycloak-theme
|
- name: check-changes
|
||||||
image: plugins/kaniko
|
image: alpine/git
|
||||||
settings:
|
volumes:
|
||||||
registry: registry.vigdorov.ru
|
- name: shared
|
||||||
repo: registry.vigdorov.ru/library/keycloak-team-planner
|
path: /shared
|
||||||
dockerfile: keycloak-theme/Dockerfile
|
commands:
|
||||||
context: keycloak-theme
|
- |
|
||||||
tags:
|
echo "🔍 Checking for changes in keycloak-theme/..."
|
||||||
- ${DRONE_COMMIT_SHA:0:7}
|
CHANGED_FILES=$(git diff --name-only HEAD~1 HEAD -- keycloak-theme/ 2>/dev/null | grep -v '\.md$' || true)
|
||||||
- "26.5.0"
|
if [ -z "$CHANGED_FILES" ]; then
|
||||||
- latest
|
echo "✅ No changes in keycloak-theme/ - will skip build and deploy"
|
||||||
username:
|
touch /shared/.skip
|
||||||
from_secret: HARBOR_USER
|
else
|
||||||
password:
|
echo "📝 Changed files:"
|
||||||
from_secret: HARBOR_PASSWORD
|
echo "$CHANGED_FILES"
|
||||||
no_push_metadata: true
|
echo "🔨 Will proceed with build and deploy"
|
||||||
|
fi
|
||||||
|
|
||||||
# --- Развертывание Keycloak темы ---
|
# --- Шаг 2: Сборка образа (только если есть изменения) ---
|
||||||
|
- name: build-keycloak-theme
|
||||||
|
image: gcr.io/kaniko-project/executor:debug
|
||||||
|
depends_on:
|
||||||
|
- check-changes
|
||||||
|
volumes:
|
||||||
|
- name: shared
|
||||||
|
path: /shared
|
||||||
|
environment:
|
||||||
|
HARBOR_USER:
|
||||||
|
from_secret: HARBOR_USER
|
||||||
|
HARBOR_PASSWORD:
|
||||||
|
from_secret: HARBOR_PASSWORD
|
||||||
|
commands:
|
||||||
|
- |
|
||||||
|
if [ -f /shared/.skip ]; then
|
||||||
|
echo "⏭️ Skipping build - no changes in keycloak-theme/"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
- |
|
||||||
|
echo "🔨 Building Keycloak theme image..."
|
||||||
|
export IMAGE_TAG=$(echo $DRONE_COMMIT_SHA | cut -c1-7)
|
||||||
|
export REGISTRY="registry.vigdorov.ru"
|
||||||
|
export REPO="$REGISTRY/library/keycloak-team-planner"
|
||||||
|
|
||||||
|
# Создаём конфиг для kaniko
|
||||||
|
mkdir -p /kaniko/.docker
|
||||||
|
echo "{\"auths\":{\"$REGISTRY\":{\"username\":\"$HARBOR_USER\",\"password\":\"$HARBOR_PASSWORD\"}}}" > /kaniko/.docker/config.json
|
||||||
|
|
||||||
|
/kaniko/executor \
|
||||||
|
--dockerfile=keycloak-theme/Dockerfile \
|
||||||
|
--context=dir:///drone/src/keycloak-theme \
|
||||||
|
--destination=$REPO:$IMAGE_TAG \
|
||||||
|
--destination=$REPO:26.5.0 \
|
||||||
|
--destination=$REPO:latest \
|
||||||
|
--cache=false
|
||||||
|
|
||||||
|
echo "✅ Image built: $REPO:$IMAGE_TAG"
|
||||||
|
|
||||||
|
# --- Шаг 3: Деплой (только если есть изменения) ---
|
||||||
- name: deploy-keycloak-theme
|
- name: deploy-keycloak-theme
|
||||||
image: alpine/k8s:1.28.2
|
image: alpine/k8s:1.28.2
|
||||||
depends_on:
|
depends_on:
|
||||||
- build-keycloak-theme
|
- build-keycloak-theme
|
||||||
|
volumes:
|
||||||
|
- name: shared
|
||||||
|
path: /shared
|
||||||
environment:
|
environment:
|
||||||
KUBE_CONFIG_CONTENT:
|
KUBE_CONFIG_CONTENT:
|
||||||
from_secret: KUBE_CONFIG
|
from_secret: KUBE_CONFIG
|
||||||
commands:
|
commands:
|
||||||
- mkdir -p ~/.kube
|
|
||||||
- echo "$KUBE_CONFIG_CONTENT" > ~/.kube/config
|
|
||||||
- chmod 600 ~/.kube/config
|
|
||||||
- sed -i "s|https://127.0.0.1:6443|https://10.10.10.100:6443|g" ~/.kube/config
|
|
||||||
- export KEYCLOAK_NAMESPACE="auth"
|
|
||||||
- export IMAGE_TAG="${DRONE_COMMIT_SHA:0:7}"
|
|
||||||
- export KEYCLOAK_IMAGE="registry.vigdorov.ru/library/keycloak-team-planner:$IMAGE_TAG"
|
|
||||||
- kubectl cluster-info
|
|
||||||
- kubectl set image statefulset/keycloak-keycloakx keycloak=$KEYCLOAK_IMAGE -n $KEYCLOAK_NAMESPACE
|
|
||||||
- echo "📋 Waiting for rollout..."
|
|
||||||
- |
|
- |
|
||||||
|
if [ -f /shared/.skip ]; then
|
||||||
|
echo "⏭️ Skipping deploy - no changes in keycloak-theme/"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
- |
|
||||||
|
echo "🚀 Deploying Keycloak theme..."
|
||||||
|
mkdir -p ~/.kube
|
||||||
|
echo "$KUBE_CONFIG_CONTENT" > ~/.kube/config
|
||||||
|
chmod 600 ~/.kube/config
|
||||||
|
sed -i "s|https://127.0.0.1:6443|https://10.10.10.100:6443|g" ~/.kube/config
|
||||||
|
|
||||||
|
export KEYCLOAK_NAMESPACE="auth"
|
||||||
|
export IMAGE_TAG=$(echo $DRONE_COMMIT_SHA | cut -c1-7)
|
||||||
|
export KEYCLOAK_IMAGE="registry.vigdorov.ru/library/keycloak-team-planner:$IMAGE_TAG"
|
||||||
|
|
||||||
|
kubectl cluster-info
|
||||||
|
kubectl set image statefulset/keycloak-keycloakx keycloak=$KEYCLOAK_IMAGE -n $KEYCLOAK_NAMESPACE
|
||||||
|
|
||||||
|
echo "📋 Waiting for rollout..."
|
||||||
if ! kubectl rollout status statefulset/keycloak-keycloakx -n $KEYCLOAK_NAMESPACE --timeout=180s; then
|
if ! kubectl rollout status statefulset/keycloak-keycloakx -n $KEYCLOAK_NAMESPACE --timeout=180s; then
|
||||||
echo "❌ Rollout failed! Collecting diagnostics..."
|
echo "❌ Rollout failed! Collecting diagnostics..."
|
||||||
kubectl get pods -n $KEYCLOAK_NAMESPACE -l app.kubernetes.io/name=keycloakx -o wide
|
kubectl get pods -n $KEYCLOAK_NAMESPACE -l app.kubernetes.io/name=keycloakx -o wide
|
||||||
kubectl describe statefulset keycloak-keycloakx -n $KEYCLOAK_NAMESPACE
|
kubectl describe statefulset keycloak-keycloakx -n $KEYCLOAK_NAMESPACE
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
- echo "✅ Keycloak theme deployed (image:$IMAGE_TAG)"
|
echo "✅ Keycloak theme deployed (image:$IMAGE_TAG)"
|
||||||
|
|||||||
Reference in New Issue
Block a user