Add Woodpecker CI/CD pipeline configuration
This commit is contained in:
@@ -0,0 +1,98 @@
|
|||||||
|
steps:
|
||||||
|
# Validate all compose files have valid syntax
|
||||||
|
validate:
|
||||||
|
image: docker:latest
|
||||||
|
commands:
|
||||||
|
- docker-compose config -f git.yaml > /dev/null
|
||||||
|
- echo "✓ git.yaml syntax valid"
|
||||||
|
volumes:
|
||||||
|
- /var/run/docker.sock:/var/run/docker.sock
|
||||||
|
when:
|
||||||
|
branch: main
|
||||||
|
|
||||||
|
# Deploy to Docker Swarm
|
||||||
|
deploy:
|
||||||
|
image: alpine:latest
|
||||||
|
commands:
|
||||||
|
- apk add --no-cache openssh-client
|
||||||
|
- mkdir -p ~/.ssh
|
||||||
|
- echo "$SSH_KEY" | base64 -d > ~/.ssh/id_rsa
|
||||||
|
- chmod 600 ~/.ssh/id_rsa
|
||||||
|
- ssh-keyscan -H docker-2.local >> ~/.ssh/known_hosts 2>/dev/null || true
|
||||||
|
|
||||||
|
# Copy compose files to swarm manager
|
||||||
|
- scp -o StrictHostKeyChecking=no -r *.yaml root@docker-2.local:/tmp/compose/
|
||||||
|
- scp -o StrictHostKeyChecking=no *.env root@docker-2.local:/tmp/compose/ || true
|
||||||
|
|
||||||
|
# Deploy stacks via SSH
|
||||||
|
- |
|
||||||
|
ssh -o StrictHostKeyChecking=no root@docker-2.local << 'DEPLOY'
|
||||||
|
cd /tmp/compose
|
||||||
|
docker stack deploy -c git.yaml git
|
||||||
|
echo "✓ Git stack deployed"
|
||||||
|
DEPLOY
|
||||||
|
secrets:
|
||||||
|
- ssh_key
|
||||||
|
when:
|
||||||
|
branch: main
|
||||||
|
event: push
|
||||||
|
|
||||||
|
# Verify deployment success
|
||||||
|
verify:
|
||||||
|
image: alpine:latest
|
||||||
|
commands:
|
||||||
|
- apk add --no-cache openssh-client
|
||||||
|
- mkdir -p ~/.ssh
|
||||||
|
- echo "$SSH_KEY" | base64 -d > ~/.ssh/id_rsa
|
||||||
|
- chmod 600 ~/.ssh/id_rsa
|
||||||
|
- ssh-keyscan -H docker-2.local >> ~/.ssh/known_hosts 2>/dev/null || true
|
||||||
|
|
||||||
|
# Check stack status
|
||||||
|
- |
|
||||||
|
ssh -o StrictHostKeyChecking=no root@docker-2.local << 'VERIFY'
|
||||||
|
echo "Git Stack Status:"
|
||||||
|
docker stack ps git
|
||||||
|
VERIFY
|
||||||
|
secrets:
|
||||||
|
- ssh_key
|
||||||
|
when:
|
||||||
|
branch: main
|
||||||
|
status: success
|
||||||
|
|
||||||
|
# Notify Teams on success
|
||||||
|
notify-success:
|
||||||
|
image: alpine:latest
|
||||||
|
commands:
|
||||||
|
- apk add --no-cache curl
|
||||||
|
- |
|
||||||
|
curl -X POST -H 'Content-Type: application/json' \
|
||||||
|
-d '{
|
||||||
|
"title": "✅ Compose Deploy Success",
|
||||||
|
"text": "homelab/compose-files deployed to Docker Swarm",
|
||||||
|
"themeColor": "00aa00"
|
||||||
|
}' \
|
||||||
|
"$TEAMS_WEBHOOK"
|
||||||
|
secrets:
|
||||||
|
- teams_webhook
|
||||||
|
when:
|
||||||
|
branch: main
|
||||||
|
status: success
|
||||||
|
|
||||||
|
# Notify Teams on failure
|
||||||
|
notify-failure:
|
||||||
|
image: alpine:latest
|
||||||
|
commands:
|
||||||
|
- apk add --no-cache curl
|
||||||
|
- |
|
||||||
|
curl -X POST -H 'Content-Type: application/json' \
|
||||||
|
-d '{
|
||||||
|
"title": "❌ Compose Deploy Failed",
|
||||||
|
"text": "homelab/compose-files deployment failed",
|
||||||
|
"themeColor": "ff0000"
|
||||||
|
}' \
|
||||||
|
"$TEAMS_WEBHOOK"
|
||||||
|
secrets:
|
||||||
|
- teams_webhook
|
||||||
|
when:
|
||||||
|
branch: main
|
||||||
|
status: failure
|
||||||
Reference in New Issue
Block a user