不使用latest标签
All checks were successful
CI/CD Pipeline for mengning.com.cn / build (push) Successful in 1m48s
All checks were successful
CI/CD Pipeline for mengning.com.cn / build (push) Successful in 1m48s
This commit is contained in:
@@ -44,7 +44,7 @@ spec:
|
|||||||
targetPort: http
|
targetPort: http
|
||||||
template:
|
template:
|
||||||
type: stateless
|
type: stateless
|
||||||
image: ${DOCKER_REGISTRY_ADDRESS}/${DOCKER_REPOSITORY_ARTIFACT}:latest
|
image: ${DOCKER_REGISTRY_ADDRESS}/${DOCKER_REPOSITORY_ARTIFACT}:${DOCKER_IMAGE_TAG}
|
||||||
ports:
|
ports:
|
||||||
- name: http
|
- name: http
|
||||||
port: 80
|
port: 80
|
||||||
|
|||||||
@@ -46,6 +46,7 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
DOCKER_REGISTRY_ADDRESS: ${{ vars.DOCKER_REGISTRY_ADDRESS }}
|
DOCKER_REGISTRY_ADDRESS: ${{ vars.DOCKER_REGISTRY_ADDRESS }}
|
||||||
DOCKER_REPOSITORY_ARTIFACT: ${{ vars.DOCKER_REPOSITORY_ARTIFACT }}
|
DOCKER_REPOSITORY_ARTIFACT: ${{ vars.DOCKER_REPOSITORY_ARTIFACT }}
|
||||||
|
DOCKER_IMAGE_TAG: ${{ gitea.sha }}
|
||||||
TLS_CERTIFICATE: ${{ secrets.TLS_CERTIFICATE }}
|
TLS_CERTIFICATE: ${{ secrets.TLS_CERTIFICATE }}
|
||||||
TLS_PRIVATE_KEY: ${{ secrets.TLS_PRIVATE_KEY }}
|
TLS_PRIVATE_KEY: ${{ secrets.TLS_PRIVATE_KEY }}
|
||||||
run: |
|
run: |
|
||||||
@@ -56,7 +57,7 @@ jobs:
|
|||||||
kubectl config set-context remote-context --cluster=remote-cluster --user=token-user
|
kubectl config set-context remote-context --cluster=remote-cluster --user=token-user
|
||||||
kubectl config use-context remote-context
|
kubectl config use-context remote-context
|
||||||
|
|
||||||
# 创建或更新 TLS Secret(在 istio-system 命名空间)1
|
# 创建或更新 TLS Secret
|
||||||
# Secret 名称: mengningsoftware-tls
|
# Secret 名称: mengningsoftware-tls
|
||||||
echo "$TLS_CERTIFICATE" > /tmp/tls.crt
|
echo "$TLS_CERTIFICATE" > /tmp/tls.crt
|
||||||
echo "$TLS_PRIVATE_KEY" > /tmp/tls.key
|
echo "$TLS_PRIVATE_KEY" > /tmp/tls.key
|
||||||
@@ -68,7 +69,7 @@ jobs:
|
|||||||
rm -f /tmp/tls.crt /tmp/tls.key
|
rm -f /tmp/tls.crt /tmp/tls.key
|
||||||
|
|
||||||
# 替换 Application YAML 中的镜像地址变量并应用
|
# 替换 Application YAML 中的镜像地址变量并应用
|
||||||
sed "s|\${DOCKER_REGISTRY_ADDRESS}|${DOCKER_REGISTRY_ADDRESS}|g; s|\${DOCKER_REPOSITORY_ARTIFACT}|${DOCKER_REPOSITORY_ARTIFACT}|g" \
|
sed "s|\${DOCKER_REGISTRY_ADDRESS}|${DOCKER_REGISTRY_ADDRESS}|g; s|\${DOCKER_REPOSITORY_ARTIFACT}|${DOCKER_REPOSITORY_ARTIFACT}|g; s|\${DOCKER_IMAGE_TAG}|${DOCKER_IMAGE_TAG}|g" \
|
||||||
.gitea/workflows/application.yaml > /tmp/application-crd.yaml
|
.gitea/workflows/application.yaml > /tmp/application-crd.yaml
|
||||||
|
|
||||||
# 删除旧的 Application CRD(如果存在,忽略错误)
|
# 删除旧的 Application CRD(如果存在,忽略错误)
|
||||||
|
|||||||
Reference in New Issue
Block a user