Dockerfile: use netcat-openbsd #101
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build & Staging | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| env: | |
| CONTAINER_REGISTRY: ghcr.io | |
| CONTAINER_REGISTRY_USER: ${{ secrets.GHCR_CONTAINER_REGISTRY_USER }} | |
| CONTAINER_REGISTRY_PASSWORD: ${{ secrets.GHCR_TOKEN }} | |
| CONTAINER_REGISTRY_REPO: ghcr.io/city-of-helsinki/${{ github.event.repository.name }} | |
| REPO_NAME: ${{ github.event.repository.name }} | |
| KUBECONFIG_RAW: ${{ secrets.KUBECONFIG_RAW_STAGING }} | |
| BUILD_ARTIFACT_FOLDER: 'build_artifacts' | |
| SERVICE_ARTIFACT_FOLDER: 'service_artifacts' | |
| APP_MIGRATE_COMMAND: /app/.prod/on_deploy.sh | |
| K8S_REQUEST_CPU: 50m | |
| K8S_REQUEST_RAM: 250Mi | |
| K8S_LIMIT_CPU: 600m | |
| K8S_LIMIT_RAM: 300Mi | |
| K8S_REPLICACOUNT: 2 | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| name: Build | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Build | |
| uses: andersinno/kolga-build-action@v2 | |
| staging: | |
| runs-on: ubuntu-latest | |
| needs: build | |
| name: Staging | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - uses: andersinno/kolga-setup-action@v2 | |
| - name: Deploy | |
| uses: andersinno/kolga-deploy-action@v2 | |
| with: | |
| track: 'staging' | |
| env: | |
| K8S_NAMESPACE: ${{ secrets.K8S_NAMESPACE_STAGING }} | |
| ENVIRONMENT_URL: https://${{ secrets.ENVIRONMENT_URL_STAGING }} | |
| K8S_SECRET_ALLOWED_HOSTS: "*" | |
| K8S_SECRET_DEBUG: 0 | |
| K8S_SECRET_SECRET_KEY: ${{ secrets.GH_QA_DJANGO_SECRET_KEY }} | |
| K8S_SECRET_SKIP_DATABASE_CHECK: 1 | |
| K8S_SECRET_ALLOW_EMBEDDING_IN_FRAME: 0 | |
| K8S_SECRET_SOCIAL_AUTH_FACEBOOK_KEY: ${{ secrets.SOCIAL_AUTH_FACEBOOK_KEY }} | |
| K8S_SECRET_SOCIAL_AUTH_FACEBOOK_SECRET: ${{ secrets.SOCIAL_AUTH_FACEBOOK_SECRET }} | |
| K8S_SECRET_SOCIAL_AUTH_GITHUB_KEY: ${{ secrets.SOCIAL_AUTH_GITHUB_KEY }} | |
| K8S_SECRET_SOCIAL_AUTH_GITHUB_SECRET: ${{ secrets.SOCIAL_AUTH_GITHUB_SECRET }} | |
| K8S_SECRET_SOCIAL_AUTH_GOOGLE_KEY: ${{ secrets.SOCIAL_AUTH_GOOGLE_KEY }} | |
| K8S_SECRET_SOCIAL_AUTH_GOOGLE_SECRET: ${{ secrets.SOCIAL_AUTH_GOOGLE_SECRET }} | |
| K8S_SECRET_SOCIAL_AUTH_HELUSERNAME_KEY: ${{ secrets.SOCIAL_AUTH_HELUSERNAME_KEY }} | |
| K8S_SECRET_SOCIAL_AUTH_HELUSERNAME_OIDC_ENDPOINT: ${{ secrets.SOCIAL_AUTH_HELUSERNAME_OIDC_ENDPOINT }} | |
| K8S_SECRET_SOCIAL_AUTH_HELUSERNAME_SECRET: ${{ secrets.SOCIAL_AUTH_HELUSERNAME_SECRET }} | |
| K8S_SECRET_SOCIAL_AUTH_TUNNISTAMO_KEY: ${{ secrets.SOCIAL_AUTH_TUNNISTAMO_KEY }} | |
| K8S_SECRET_SOCIAL_AUTH_TUNNISTAMO_OIDC_ENDPOINT: ${{ secrets.SOCIAL_AUTH_TUNNISTAMO_OIDC_ENDPOINT }} | |
| K8S_SECRET_SOCIAL_AUTH_TUNNISTAMO_SECRET: ${{ secrets.SOCIAL_AUTH_TUNNISTAMO_SECRET }} | |
| K8S_SECRET_DATABASE_HOST: ${{ secrets.K8S_SECRET_DATABASE_HOST_STAGING }} | |
| K8S_SECRET_DATABASE_URL: ${{ secrets.K8S_SECRET_DATABASE_URL_STAGING }} | |
| K8S_SECRET_DATABASE_PORT: ${{ secrets.K8S_SECRET_DATABASE_PORT_STAGING }} | |
| K8S_SECRET_DATABASE_DB: ${{ secrets.K8S_SECRET_DATABASE_DB_STAGING }} | |
| K8S_SECRET_DATABASE_USERNAME: ${{ secrets.K8S_SECRET_DATABASE_USERNAME_STAGING }} | |
| K8S_SECRET_DATABASE_PASSWORD: ${{ secrets.K8S_SECRET_DATABASE_PASSWORD_STAGING }} |