53 lines
1.4 KiB
YAML
53 lines
1.4 KiB
YAML
on:
|
|
workflow_call:
|
|
inputs:
|
|
tag:
|
|
required: false
|
|
type: string
|
|
default: latest
|
|
debug:
|
|
required: false
|
|
type: boolean
|
|
default: false
|
|
environment:
|
|
type: string
|
|
required: true
|
|
host:
|
|
type: string
|
|
required: true
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: gpu
|
|
env:
|
|
TAG: ${{ inputs.tag }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@master
|
|
- name: Yandex Cloud Login
|
|
uses: yc-actions/yc-cr-login@v2
|
|
with:
|
|
yc-sa-json-credentials: ${{ secrets.YC_SA_JSON_CREDENTIALS }}
|
|
- name: Import Secrets
|
|
uses: hashicorp/vault-action@v2
|
|
id: vault
|
|
with:
|
|
url: https://vault.hublab.ru/
|
|
method: approle
|
|
roleId: ${{ secrets.VAULT_ROLE_ID }}
|
|
secretId: ${{ secrets.VAULT_SECRET_ID }}
|
|
secrets: |
|
|
hub/data/tach/${{ inputs.environment }}/base * | PFX_;
|
|
hub/data/tach/${{ inputs.environment }}/${{github.event.repository.name}} * | PFX_;
|
|
- name: Save envs
|
|
run: |
|
|
for var in $(env| grep '^PFX_'); do echo "${var:4} >> .env"; done
|
|
export .env
|
|
echo 1111
|
|
cat .env
|
|
- name: Deploy
|
|
env:
|
|
DOCKER_HOST: tcp://${{ inputs.host }}:2376
|
|
run: |
|
|
docker compose pull
|
|
docker compose up -d |