cat-shark/lpt-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 流水线显式指定kubeconfig并校验Secret

Browse Source
This commit is contained in:
admin
2026-08-02 11:05:54 +08:00
parent 33e7c9e0ef
commit f6adaed6c9
1 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/deploy.yml
+13 -8
View File
@@ -36,6 +36,11 @@ jobs:
mv kubectl /usr/local/bin/ mv kubectl /usr/local/bin/
echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig echo "${{ secrets.KUBECONFIG_B64 }}" | base64 -d > /tmp/kubeconfig
chmod 600 /tmp/kubeconfig chmod 600 /tmp/kubeconfig
if [ ! -s /tmp/kubeconfig ]; then
echo "ERROR: KUBECONFIG_B64 secret 为空，请先在 lpt-infra 仓库配置 Secret"
exit 1
fi
kubectl --kubeconfig=/tmp/kubeconfig config view --minify >/dev/null
- name: Apply manifests - name: Apply manifests
run: | run: |
@@ -44,17 +49,17 @@ jobs:
case "$ENV" in case "$ENV" in
all) all)
echo "Applying dev/ ..." echo "Applying dev/ ..."
kubectl apply -f dev/ kubectl --kubeconfig=/tmp/kubeconfig apply -f dev/
echo "Applying prod/ ..." echo "Applying prod/ ..."
kubectl apply -f prod/ kubectl --kubeconfig=/tmp/kubeconfig apply -f prod/
;; ;;
dev) dev)
echo "Applying dev/ ..." echo "Applying dev/ ..."
kubectl apply -f dev/ kubectl --kubeconfig=/tmp/kubeconfig apply -f dev/
;; ;;
prod) prod)
echo "Applying prod/ ..." echo "Applying prod/ ..."
kubectl apply -f prod/ kubectl --kubeconfig=/tmp/kubeconfig apply -f prod/
;; ;;
*) *)
echo "ERROR: unknown environment=$ENV" echo "ERROR: unknown environment=$ENV"
@@ -68,13 +73,13 @@ jobs:
ENV="${{ inputs.environment }}" ENV="${{ inputs.environment }}"
case "$ENV" in case "$ENV" in
all) all)
kubectl get deploy,pods -n lpt-dev kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-dev
kubectl get deploy,pods -n lpt-prod kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-prod
;; ;;
dev) dev)
kubectl get deploy,pods -n lpt-dev kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-dev
;; ;;
prod) prod)
kubectl get deploy,pods -n lpt-prod kubectl --kubeconfig=/tmp/kubeconfig get deploy,pods -n lpt-prod
;; ;;
esac esac