Erich Blume
be3cdad1cb
## Summary - Set `replicas: 2` with `maxUnavailable: 0` / `maxSurge: 1` on CV and Docs deployments so rolling updates never drop below 2 ready pods - Add PodDisruptionBudgets (`minAvailable: 1`) to protect against node drains and cluster maintenance - Add Fly.io cache purge step to `cv-deploy.yaml` workflow (docs already had this) so CV deploys don't serve stale cached content ## Deployment and Testing - [ ] `argocd app diff cv` / `argocd app diff docs` from branch - [ ] Deploy from branch: `argocd app set cv --revision feature/ha-cv-docs-zero-downtime && argocd app sync cv` - [ ] Verify 2 pods running: `kubectl get pods -n cv --context=minikube-indri` - [ ] Test rolling restart: `kubectl rollout restart deployment/cv -n cv --context=minikube-indri` - [ ] During rollout, confirm continuous availability via `curl -I https://cv.eblu.me` - [ ] After merge: reset ArgoCD to main, re-sync both apps Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/273
131 lines
4.3 KiB
YAML
131 lines
4.3 KiB
YAML
# CV Deploy Workflow
|
|
#
|
|
# Updates the CV deployment to a specific package version, commits
|
|
# the change, and syncs via ArgoCD.
|
|
#
|
|
# Usage:
|
|
# 1. Release a new CV package from the cv repo first
|
|
# 2. Go to Actions > Deploy CV > Run workflow
|
|
# 3. Enter the version to deploy, or leave as "latest"
|
|
|
|
name: Deploy CV
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
version:
|
|
description: 'CV package version to deploy (e.g., v1.0.0, or "latest")'
|
|
required: true
|
|
default: 'latest'
|
|
type: string
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: k8s
|
|
steps:
|
|
- name: Resolve version
|
|
id: version
|
|
run: |
|
|
INPUT_VERSION="${{ inputs.version }}"
|
|
|
|
if [ "$INPUT_VERSION" = "latest" ]; then
|
|
echo "Resolving latest CV package version..."
|
|
VERSION=$(curl -s "https://forge.ops.eblu.me/api/v1/packages/eblume?type=generic&q=cv" \
|
|
| jq -r '[.[] | select(.name == "cv")] | sort_by(.version) | last | .version // empty')
|
|
|
|
if [ -z "$VERSION" ]; then
|
|
echo "Error: No CV packages found"
|
|
exit 1
|
|
fi
|
|
echo "Resolved latest version: $VERSION"
|
|
else
|
|
VERSION="$INPUT_VERSION"
|
|
if [[ ! "$VERSION" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
|
echo "Error: Version must be in format vX.Y.Z (e.g., v1.0.0)"
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
# Verify the package exists
|
|
TARBALL="cv-${VERSION}.tar.gz"
|
|
PACKAGE_URL="https://forge.ops.eblu.me/api/packages/eblume/generic/cv/${VERSION}/${TARBALL}"
|
|
if ! curl -fsSL --head "$PACKAGE_URL" > /dev/null 2>&1; then
|
|
echo "Error: Package not found at $PACKAGE_URL"
|
|
echo "Run the 'Release CV' workflow in the cv repo first."
|
|
exit 1
|
|
fi
|
|
echo "Package verified: $PACKAGE_URL"
|
|
echo "version=$VERSION" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
|
|
|
|
- name: Update CV deployment
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.version }}"
|
|
TARBALL="cv-${VERSION}.tar.gz"
|
|
DEPLOYMENT_FILE="argocd/manifests/cv/deployment.yaml"
|
|
RELEASE_URL="https://forge.ops.eblu.me/api/packages/eblume/generic/cv/${VERSION}/${TARBALL}"
|
|
|
|
echo "Updating $DEPLOYMENT_FILE with CV_RELEASE_URL..."
|
|
yq -i "(.spec.template.spec.containers[0].env[] | select(.name == \"CV_RELEASE_URL\")).value = \"${RELEASE_URL}\"" "$DEPLOYMENT_FILE"
|
|
|
|
echo "Updated deployment:"
|
|
grep -A1 "CV_RELEASE_URL" "$DEPLOYMENT_FILE"
|
|
|
|
- name: Commit release changes
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.version }}"
|
|
|
|
git config user.name "Forgejo Actions"
|
|
git config user.email "actions@forge.ops.eblu.me"
|
|
|
|
git add argocd/manifests/cv/deployment.yaml
|
|
|
|
if git diff --cached --quiet; then
|
|
echo "No changes to commit (already at $VERSION)"
|
|
else
|
|
git commit -m "Update CV release to $VERSION
|
|
|
|
[skip ci]"
|
|
git push origin HEAD:main
|
|
echo "Changes committed and pushed"
|
|
fi
|
|
|
|
- name: Deploy CV
|
|
env:
|
|
ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
|
|
run: |
|
|
echo "Syncing CV app via ArgoCD..."
|
|
|
|
argocd app sync cv \
|
|
--server argocd.ops.eblu.me \
|
|
--grpc-web \
|
|
--prune
|
|
|
|
argocd app wait cv \
|
|
--server argocd.ops.eblu.me \
|
|
--grpc-web \
|
|
--timeout 120
|
|
|
|
echo "CV app synced successfully!"
|
|
|
|
- name: Purge Fly.io proxy cache
|
|
env:
|
|
FLY_API_TOKEN: ${{ secrets.FLY_DEPLOY_TOKEN }}
|
|
run: |
|
|
echo "Purging nginx cache on Fly.io proxy..."
|
|
fly ssh console -a blumeops-proxy -C "sh -c 'rm -rf /tmp/cache && nginx -s reload'"
|
|
echo "Cache purged"
|
|
|
|
- name: Summary
|
|
run: |
|
|
VERSION="${{ steps.version.outputs.version }}"
|
|
echo "================================================"
|
|
echo "CV Deployed: $VERSION"
|
|
echo "================================================"
|
|
echo ""
|
|
echo "CV should now be live at:"
|
|
echo " https://cv.ops.eblu.me/"
|