Ashwin Sangem
4e20b52618
* Added Cloudrail according to instructions and existing examples * Adding Cloudrail according to documentation and examples * Oops * Add original Fortify on Demand workflow * Update Fortify on Demand workflow * Update Fortify on Demand supported languages * Add 3rd-party GitHub Actions disclaimer * Sysdig Secure Inline Scan with SARIF report to starter workflows * Added some extra comments, Github Actions V2 and changed env vars * Reviews from PR #1110 * Adding 'Dockerfile' to category list * Update according to PR review comments * File renames as requested in PR comments * Revert "Azure Data Factory CI starter workflow (#1111)" (#1146) This reverts commit7f30309cce. * use env variables for user-set values (#1117) Co-authored-by: Josh Gross <joshmgross@github.com> * Apply suggestions from nickfyson's code review Co-authored-by: Nick Fyson <nickfyson@github.com> * removing "deployment" templates from sync-ghes (#1127) * Update code-scanning/properties/sysdig-scan.properties.json Co-authored-by: Nick Fyson <nickfyson@github.com> * Update code-scanning/properties/sysdig-scan.properties.json Co-authored-by: Nick Fyson <nickfyson@github.com> * Changed svg logo * Rename sysdig.svg to sysdig-scan.svg * Switched svg logo (again) for a better fit * Rename fortify.json to fortify.properties.json * Correct character-case of "c" in Cloudrail * AWS template also used Docker * trigger on push instead of release (#1157) Co-authored-by: Josh Gross <joshmgross@github.com> * Added new templates for 3 clouds. * Revert "Added new templates for 3 clouds." This reverts commitc765d6316f. * Add workflow for Microsoft C++ Code Analysis * Updated action to meet guidelines * correct typo in msvc.properties.json Co-authored-by: Yoni Leitersdorf <y@indeni.com> Co-authored-by: Ruud Senden <ruud.senden@microfocus.com> Co-authored-by: Ruud Senden <8635138+rsenden@users.noreply.github.com> Co-authored-by: Manuel Boira Cuevas <manuel.boira@MacBook-Pro.local> Co-authored-by: manuelbcd <manuel.boira@sysdig.com> Co-authored-by: Nick Fyson <nickfyson@github.com> Co-authored-by: Sarah Edwards <skedwards88@github.com> Co-authored-by: Josh Gross <joshmgross@github.com> Co-authored-by: Aparna Ravindra <82894348+aparna-ravindra@users.noreply.github.com> Co-authored-by: manuelbcd <manuelbcd@gmail.com> Co-authored-by: Daniel Winsor <danwin@microsoft.com>
78 lines
2.6 KiB
YAML
78 lines
2.6 KiB
YAML
# This workflow will build a docker container, publish and deploy it to Tencent Kubernetes Engine (TKE) when there is a push to the $default-branch branch.
|
|
#
|
|
# To configure this workflow:
|
|
#
|
|
# 1. Ensure that your repository contains the necessary configuration for your Tencent Kubernetes Engine cluster,
|
|
# including deployment.yml, kustomization.yml, service.yml, etc.
|
|
#
|
|
# 2. Set up secrets in your workspace:
|
|
# - TENCENT_CLOUD_SECRET_ID with Tencent Cloud secret id
|
|
# - TENCENT_CLOUD_SECRET_KEY with Tencent Cloud secret key
|
|
# - TENCENT_CLOUD_ACCOUNT_ID with Tencent Cloud account id
|
|
# - TKE_REGISTRY_PASSWORD with TKE registry password
|
|
#
|
|
# 3. Change the values for the TKE_IMAGE_URL, TKE_REGION, TKE_CLUSTER_ID and DEPLOYMENT_NAME environment variables (below).
|
|
|
|
name: Tencent Kubernetes Engine
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- $default-branch
|
|
|
|
# Environment variables available to all jobs and steps in this workflow
|
|
env:
|
|
TKE_IMAGE_URL: ccr.ccs.tencentyun.com/demo/mywebapp
|
|
TKE_REGION: ap-guangzhou
|
|
TKE_CLUSTER_ID: cls-mywebapp
|
|
DEPLOYMENT_NAME: tke-test
|
|
|
|
jobs:
|
|
setup-build-publish-deploy:
|
|
name: Setup, Build, Publish, and Deploy
|
|
runs-on: ubuntu-latest
|
|
environment: production
|
|
steps:
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@v2
|
|
|
|
# Build
|
|
- name: Build Docker image
|
|
run: |
|
|
docker build -t ${TKE_IMAGE_URL}:${GITHUB_SHA} .
|
|
|
|
- name: Login TKE Registry
|
|
run: |
|
|
docker login -u ${{ secrets.TENCENT_CLOUD_ACCOUNT_ID }} -p '${{ secrets.TKE_REGISTRY_PASSWORD }}' ${TKE_IMAGE_URL}
|
|
|
|
# Push the Docker image to TKE Registry
|
|
- name: Publish
|
|
run: |
|
|
docker push ${TKE_IMAGE_URL}:${GITHUB_SHA}
|
|
|
|
- name: Set up Kustomize
|
|
run: |
|
|
curl -o kustomize --location https://github.com/kubernetes-sigs/kustomize/releases/download/v3.1.0/kustomize_3.1.0_linux_amd64
|
|
chmod u+x ./kustomize
|
|
|
|
- name: Set up ~/.kube/config for connecting TKE cluster
|
|
uses: TencentCloud/tke-cluster-credential-action@v1
|
|
with:
|
|
secret_id: ${{ secrets.TENCENT_CLOUD_SECRET_ID }}
|
|
secret_key: ${{ secrets.TENCENT_CLOUD_SECRET_KEY }}
|
|
tke_region: ${{ env.TKE_REGION }}
|
|
cluster_id: ${{ env.TKE_CLUSTER_ID }}
|
|
|
|
- name: Switch to TKE context
|
|
run: |
|
|
kubectl config use-context ${TKE_CLUSTER_ID}-context-default
|
|
|
|
# Deploy the Docker image to the TKE cluster
|
|
- name: Deploy
|
|
run: |
|
|
./kustomize edit set image ${TKE_IMAGE_URL}:${GITHUB_SHA}
|
|
./kustomize build . | kubectl apply -f -
|
|
kubectl rollout status deployment/${DEPLOYMENT_NAME}
|
|
kubectl get services -o wide
|