docker release GH action - deploy

Author: frantuma

.github/workflows/docker-release-3.0.yml

@@ -77,5 +77,119 @@ jobs:
           docker tag $DOCKER_GENERATOR_ROOT_FULL_IMAGE_NAME:${{ env.TAG }} $DOCKER_GENERATOR_FULL_IMAGE_NAME:${{ env.TAG }}-root
           echo "pushing $DOCKER_GENERATOR_FULL_IMAGE_NAME:${{ env.TAG }}-root"
           docker -D -l debug push $DOCKER_GENERATOR_FULL_IMAGE_NAME:${{ env.TAG }}-root
+      - name: deploy
+        run: |
+          echo "${{ env.TAG }}"
+
+          TOKEN="${{ secrets.RANCHER2_BEARER_TOKEN }}"
+          RANCHER_HOST="rancher.tools.swagger.io"
+          CLUSTER_ID="c-n8zp2"
+          NAMESPACE_NAME="swagger-oss"
+          K8S_OBJECT_TYPE="daemonsets"
+          K8S_OBJECT_NAME="swagger-generator-v3"
+          DEPLOY_IMAGE="swaggerapi/swagger-generator-v3:${{ env.TAG }}"
+
+          workloadStatus=""
+          getStatus() {
+              echo "Getting update status..."
+              if ! workloadStatus="$(curl -s -X GET \
+                -H "Authorization: Bearer ${TOKEN}" \
+                -H 'Content-Type: application/json' \
+                "https://${RANCHER_HOST}/k8s/clusters/${CLUSTER_ID}/apis/apps/v1/namespaces/${NAMESPACE_NAME}/${K8S_OBJECT_TYPE}/${K8S_OBJECT_NAME}/status")"
+              then
+                  echo 'ERROR - get status k8s API call failed!'
+                  echo "Exiting build"...
+                  exit 1
+              fi
+          }
+
+          # $1 = image to deploy
+          updateObject() {
+              local image="${1}"
+              echo "Updating image value..."
+
+              if ! curl -s -X PATCH \
+                -H "Authorization: Bearer ${TOKEN}" \
+                -H 'Content-Type: application/json-patch+json' \
+                "https://${RANCHER_HOST}/k8s/clusters/${CLUSTER_ID}/apis/apps/v1/namespaces/${NAMESPACE_NAME}/${K8S_OBJECT_TYPE}/${K8S_OBJECT_NAME}" \
+                -d "[{\"op\": \"replace\", \"path\": \"/spec/template/spec/containers/0/image\", \"value\": \"${image}\"}]"
+              then
+                  echo 'ERROR - image update k8s API call failed!'
+                  echo "Exiting build..."
+                  exit 1
+              fi
+          }
+
+
+          # Check that the TAG is valid
+          if [[ ${{ env.TAG }} =~ ^[vV]?[0-9]*\.[0-9]*\.[0-9]*$ ]]; then
+              echo ""
+              echo "This is a Valid TAG..."
+
+              # Get current image/tag in case we need to rollback
+              getStatus
+              ROLLBACK_IMAGE="$(echo "${workloadStatus}" | jq -r '.spec.template.spec.containers[0].image')"
+              echo ""
+              echo "Current image: ${ROLLBACK_IMAGE}"
+
+              # Update image and validate response
+              echo ""
+              updateObject "${DEPLOY_IMAGE}"
+              echo ""
+
+              echo ""
+              echo "Waiting for pods to start..."
+              echo ""
+              sleep 60s
+
+              # Get state of the k8s object. If numberReady == desiredNumberScheduled, consider the upgrade successful. Else raise error
+              getStatus
+                  status="$(echo "${workloadStatus}" | jq '.status')"
+              echo ""
+              echo "${status}"
+              echo ""
+
+              numberDesired="$(echo "${status}" | jq -r '.desiredNumberScheduled')"
+              numberReady="$(echo "${status}" | jq -r '.numberReady')"
+
+              if (( numberReady == numberDesired )); then
+                  echo "${K8S_OBJECT_NAME} has been upgraded to ${DEPLOY_IMAGE}"
+
+              # If pods are not starting, rollback the upgrade and exit the build with error
+              else
+                  echo "state = error...rolling back upgrade"
+                  updateObject "${ROLLBACK_IMAGE}"
+                  echo ""
+
+                  echo ""
+                  echo "Waiting for rollback pods to start..."
+                  echo ""
+                  sleep 60s
+
+                  getStatus
+                  status="$(echo "${workloadStatus}" | jq '.status')"
+                  echo ""
+                  echo "${status}"
+                  echo ""
+
+                  numberDesired="$(echo "${status}" | jq -r '.desiredNumberScheduled')"
+                  numberReady="$(echo "${status}" | jq -r '.numberReady')"
+
+                  if (( numberReady == numberDesired )); then
+                      echo "Rollback to ${ROLLBACK_IMAGE} completed."
+                  else
+                      echo "FATAL - rollback failed"
+                  fi
+                  echo "Exiting Build..."
+                  exit 1
+              fi
+
+          else
+              echo "This TAG is not in a valid format..."
+              echo "Exiting Build..."
+              exit 0
+          fi
+          echo "Exiting Build..."
+          exit 0
     env:
       TAG: ${{ github.event.inputs.tag }}