ci: deploy dev infra [rebuild]

This commit is contained in:
Stephan D
2026-03-17 01:21:29 +01:00
parent 85ae6254a0
commit 9e91a9f90c
43 changed files with 390 additions and 105 deletions

View File

@@ -81,8 +81,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -76,8 +76,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -76,8 +76,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -77,8 +77,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -75,8 +75,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -49,8 +49,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: frontend-tests
image: ghcr.io/cirruslabs/flutter:stable

View File

@@ -81,8 +81,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -82,8 +82,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -76,8 +76,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -80,8 +80,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -76,8 +76,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -69,8 +69,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -67,8 +67,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -80,8 +80,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -76,8 +76,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -43,7 +43,7 @@ steps:
- install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa
- . ./ci/scripts/common/runtime_env.sh
- load_runtime_env_bundle "$(resolve_runtime_env_name)"
- export NATS_USER="$(./ci/vlt kv_get kv sendico/nats user)"
- export NATS_PASSWORD="$(./ci/vlt kv_get kv sendico/nats password)"
- export NATS_USER="$(sh ci/scripts/common/runtime_kv_get.sh kv_get kv sendico/nats user 2>/dev/null || CI_VAULT_SOURCE=external ./ci/vlt kv_get kv sendico/nats user)"
- export NATS_PASSWORD="$(sh ci/scripts/common/runtime_kv_get.sh kv_get kv sendico/nats password 2>/dev/null || CI_VAULT_SOURCE=external ./ci/vlt kv_get kv sendico/nats password)"
- bash ci/prod/scripts/bootstrap/network.sh
- bash ci/prod/scripts/deploy/nats.sh

View File

@@ -79,8 +79,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -77,8 +77,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -77,8 +77,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -77,8 +77,7 @@ steps:
- set -euo pipefail
- apk add --no-cache bash coreutils openssh-keygen curl sed python3
- sh ci/scripts/common/fetch_deploy_ssh_key.sh secrets/SSH_KEY
- ./ci/vlt kv_get kv registry user > secrets/REGISTRY_USER
- ./ci/vlt kv_get kv registry password > secrets/REGISTRY_PASSWORD
- sh ci/scripts/common/fetch_registry_creds.sh
- name: build-image
image: gcr.io/kaniko-project/executor:debug

View File

@@ -31,6 +31,10 @@ steps:
- name: deploy
image: alpine:latest
depends_on: [ secrets ]
environment:
VAULT_ADDR: { from_secret: VAULT_ADDR }
VAULT_ROLE_ID: { from_secret: VAULT_APP_ROLE }
VAULT_SECRET_ID: { from_secret: VAULT_SECRET_ID }
commands:
- set -euo pipefail
- apk add --no-cache bash openssh-client rsync coreutils curl sed python3