fix ci
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
2026-01-15 12:26:40 +03:00
parent 1b95fd9e55
commit b270345e77

View File

@ -271,63 +271,112 @@ kind: pipeline
type: kubernetes type: kubernetes
name: keycloak-theme-pipeline name: keycloak-theme-pipeline
# Триггер: запускать ТОЛЬКО при изменениях в keycloak-theme/
trigger: trigger:
branch: branch:
- main - main
- master - master
event: event:
- push - push
paths:
include: volumes:
- keycloak-theme/** - name: shared
exclude: temp: {}
- keycloak-theme/README.md
- keycloak-theme/**/*.md
steps: steps:
# --- Сборка Keycloak темы --- # --- Шаг 1: Проверка изменений ---
- name: build-keycloak-theme - name: check-changes
image: plugins/kaniko image: alpine/git
settings: volumes:
registry: registry.vigdorov.ru - name: shared
repo: registry.vigdorov.ru/library/keycloak-team-planner path: /shared
dockerfile: keycloak-theme/Dockerfile commands:
context: keycloak-theme - |
tags: echo "🔍 Checking for changes in keycloak-theme/..."
- ${DRONE_COMMIT_SHA:0:7} CHANGED_FILES=$(git diff --name-only HEAD~1 HEAD -- keycloak-theme/ 2>/dev/null | grep -v '\.md$' || true)
- "26.5.0" if [ -z "$CHANGED_FILES" ]; then
- latest echo "✅ No changes in keycloak-theme/ - will skip build and deploy"
username: touch /shared/.skip
from_secret: HARBOR_USER else
password: echo "📝 Changed files:"
from_secret: HARBOR_PASSWORD echo "$CHANGED_FILES"
no_push_metadata: true echo "🔨 Will proceed with build and deploy"
fi
# --- Развертывание Keycloak темы --- # --- Шаг 2: Сборка образа (только если есть изменения) ---
- name: build-keycloak-theme
image: gcr.io/kaniko-project/executor:debug
depends_on:
- check-changes
volumes:
- name: shared
path: /shared
environment:
HARBOR_USER:
from_secret: HARBOR_USER
HARBOR_PASSWORD:
from_secret: HARBOR_PASSWORD
commands:
- |
if [ -f /shared/.skip ]; then
echo "⏭️ Skipping build - no changes in keycloak-theme/"
exit 0
fi
- |
echo "🔨 Building Keycloak theme image..."
export IMAGE_TAG=$(echo $DRONE_COMMIT_SHA | cut -c1-7)
export REGISTRY="registry.vigdorov.ru"
export REPO="$REGISTRY/library/keycloak-team-planner"
# Создаём конфиг для kaniko
mkdir -p /kaniko/.docker
echo "{\"auths\":{\"$REGISTRY\":{\"username\":\"$HARBOR_USER\",\"password\":\"$HARBOR_PASSWORD\"}}}" > /kaniko/.docker/config.json
/kaniko/executor \
--dockerfile=keycloak-theme/Dockerfile \
--context=dir:///drone/src/keycloak-theme \
--destination=$REPO:$IMAGE_TAG \
--destination=$REPO:26.5.0 \
--destination=$REPO:latest \
--cache=false
echo "✅ Image built: $REPO:$IMAGE_TAG"
# --- Шаг 3: Деплой (только если есть изменения) ---
- name: deploy-keycloak-theme - name: deploy-keycloak-theme
image: alpine/k8s:1.28.2 image: alpine/k8s:1.28.2
depends_on: depends_on:
- build-keycloak-theme - build-keycloak-theme
volumes:
- name: shared
path: /shared
environment: environment:
KUBE_CONFIG_CONTENT: KUBE_CONFIG_CONTENT:
from_secret: KUBE_CONFIG from_secret: KUBE_CONFIG
commands: commands:
- mkdir -p ~/.kube
- echo "$KUBE_CONFIG_CONTENT" > ~/.kube/config
- chmod 600 ~/.kube/config
- sed -i "s|https://127.0.0.1:6443|https://10.10.10.100:6443|g" ~/.kube/config
- export KEYCLOAK_NAMESPACE="auth"
- export IMAGE_TAG="${DRONE_COMMIT_SHA:0:7}"
- export KEYCLOAK_IMAGE="registry.vigdorov.ru/library/keycloak-team-planner:$IMAGE_TAG"
- kubectl cluster-info
- kubectl set image statefulset/keycloak-keycloakx keycloak=$KEYCLOAK_IMAGE -n $KEYCLOAK_NAMESPACE
- echo "📋 Waiting for rollout..."
- | - |
if [ -f /shared/.skip ]; then
echo "⏭️ Skipping deploy - no changes in keycloak-theme/"
exit 0
fi
- |
echo "🚀 Deploying Keycloak theme..."
mkdir -p ~/.kube
echo "$KUBE_CONFIG_CONTENT" > ~/.kube/config
chmod 600 ~/.kube/config
sed -i "s|https://127.0.0.1:6443|https://10.10.10.100:6443|g" ~/.kube/config
export KEYCLOAK_NAMESPACE="auth"
export IMAGE_TAG=$(echo $DRONE_COMMIT_SHA | cut -c1-7)
export KEYCLOAK_IMAGE="registry.vigdorov.ru/library/keycloak-team-planner:$IMAGE_TAG"
kubectl cluster-info
kubectl set image statefulset/keycloak-keycloakx keycloak=$KEYCLOAK_IMAGE -n $KEYCLOAK_NAMESPACE
echo "📋 Waiting for rollout..."
if ! kubectl rollout status statefulset/keycloak-keycloakx -n $KEYCLOAK_NAMESPACE --timeout=180s; then if ! kubectl rollout status statefulset/keycloak-keycloakx -n $KEYCLOAK_NAMESPACE --timeout=180s; then
echo "❌ Rollout failed! Collecting diagnostics..." echo "❌ Rollout failed! Collecting diagnostics..."
kubectl get pods -n $KEYCLOAK_NAMESPACE -l app.kubernetes.io/name=keycloakx -o wide kubectl get pods -n $KEYCLOAK_NAMESPACE -l app.kubernetes.io/name=keycloakx -o wide
kubectl describe statefulset keycloak-keycloakx -n $KEYCLOAK_NAMESPACE kubectl describe statefulset keycloak-keycloakx -n $KEYCLOAK_NAMESPACE
exit 1 exit 1
fi fi
- echo "✅ Keycloak theme deployed (image:$IMAGE_TAG)" echo "✅ Keycloak theme deployed (image:$IMAGE_TAG)"