cat-shark/lpt-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 流水线显式指定kubeconfig并校验Secret

Browse Source
This commit is contained in:
admin
2026-08-02 11:05:54 +08:00
parent 33e7c9e0ef
commit f6adaed6c9
1 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/deploy.yml
+13 -8
View File
@@ -36,6 +36,11 @@ jobs:
mv kubectl /usr/local/bin/
echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig
chmod 600 /tmp/kubeconfig
if [ ! -s /tmp/kubeconfig ]; then
echo "ERROR: KUBECONFIG_B64 secret 为空，请先在 lpt-infra 仓库配置 Secret"
exit 1
fi
kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null
- name: Apply manifests
run: |
@@ -44,17 +49,17 @@ jobs:
case "$ENV" in
all)
echo "Applying dev/ ..."
kubectl apply -f dev/
kubectl --kubeconfig=/tmp/kubeconfig apply -f dev/
echo "Applying prod/ ..."
kubectl apply -f prod/
kubectl --kubeconfig=/tmp/kubeconfig apply -f prod/
;;
dev)
echo "Applying dev/ ..."
kubectl apply -f dev/
kubectl --kubeconfig=/tmp/kubeconfig apply -f dev/
;;
prod)
echo "Applying prod/ ..."
kubectl apply -f prod/
kubectl --kubeconfig=/tmp/kubeconfig apply -f prod/
;;
*)
echo "ERROR: unknown environment=$ENV"
@@ -68,13 +73,13 @@ jobs:
ENV="${{ inputs.environment }}"
case "$ENV" in
all)
kubectl get deploy,pods -n lpt-dev
kubectl get deploy,pods -n lpt-prod
kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-dev
kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-prod
;;
dev)
kubectl get deploy,pods -n lpt-dev
kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-dev
;;
prod)
kubectl get deploy,pods -n lpt-prod
kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-prod
;;
esac