@hed-hog/cli 0.0.109 → 0.0.111

package/dist/src/templates/deployment/workflow.deploy.yml.ejs

@@ -4,6 +4,11 @@ on:
     branches:
       - <%= config.deployBranch %>
   workflow_dispatch:
+    inputs:
+      apps:
+        description: 'Apps para deploy (ex: api, admin, api,admin) ou "all" para todos'
+        required: false
+        default: 'all'
 env:
   REGISTRY: <%= config.containerRegistry %>
   NAMESPACE: <%= config.namespace %>
@@ -18,6 +23,10 @@ env:
   NEXT_PUBLIC_API_BASE_URL: <%= config.apiDomain || '' %>
   INTERNAL_API_URL: <%= config.apiDomain || '' %>
 <% } %>
+<% (config.apps || []).filter(function(a) { return a !== 'api' && a !== 'admin'; }).forEach(function(app) { %>
+  # <%= app %> environment
+  <%= app.toUpperCase() %>_API_BASE_URL: <%= config.apiDomain || '' %>
+<% }); %>
 jobs:
   apply-cluster-config:
     name: Apply Kubernetes and Helm configs
@@ -53,6 +62,14 @@ jobs:
     name: Deploy API
     runs-on: ubuntu-latest
     needs: apply-cluster-config
+    if: >-
+      (github.event_name == 'push' &&
+       (!contains(github.event.head_commit.message, '[deploy:') ||
+        contains(github.event.head_commit.message, '[deploy:api]'))) ||
+      (github.event_name == 'workflow_dispatch' &&
+       (github.event.inputs.apps == '' ||
+        github.event.inputs.apps == 'all' ||
+        contains(github.event.inputs.apps, 'api')))
     # Required GitHub Secrets for API deployment:
     # - DATABASE_URL: PostgreSQL connection string (format: postgresql://user:pass@host:port/dbname)
     # - JWT_SECRET: 64-char hex string or base64 key for JWT signing
@@ -361,6 +378,19 @@ jobs:
 <% if ((config.apps || []).includes('api')) { %>
       - deploy-api
 <% } %>
+    if: >-
+      always() &&
+      needs.apply-cluster-config.result == 'success' &&
+<% if ((config.apps || []).includes('api')) { %>
+      (needs.deploy-api.result == 'success' || needs.deploy-api.result == 'skipped') &&
+<% } %>
+      ((github.event_name == 'push' &&
+        (!contains(github.event.head_commit.message, '[deploy:') ||
+         contains(github.event.head_commit.message, '[deploy:admin]'))) ||
+       (github.event_name == 'workflow_dispatch' &&
+        (github.event.inputs.apps == '' ||
+         github.event.inputs.apps == 'all' ||
+         contains(github.event.inputs.apps, 'admin'))))
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
@@ -534,3 +564,147 @@ jobs:
             doctl registry repository delete-manifest "${REGISTRY_NAME}/${REPOSITORY}" "${DIGEST}" --force
           done
 <% } %>
+<% (config.apps || []).filter(function(a) { return a !== 'api' && a !== 'admin'; }).forEach(function(app) { var appUpper = app.toUpperCase(); var appCapitalized = app.charAt(0).toUpperCase() + app.slice(1); %>
+  deploy-<%= app %>:
+    name: Deploy <%= appCapitalized %>
+    runs-on: ubuntu-latest
+    needs:
+      - apply-cluster-config
+<% if ((config.apps || []).includes('api')) { %>
+      - deploy-api
+<% } %>
+    if: >-
+      always() &&
+      needs.apply-cluster-config.result == 'success' &&
+<% if ((config.apps || []).includes('api')) { %>
+      (needs.deploy-api.result == 'success' || needs.deploy-api.result == 'skipped') &&
+<% } %>
+      ((github.event_name == 'push' &&
+        (!contains(github.event.head_commit.message, '[deploy:') ||
+         contains(github.event.head_commit.message, '[deploy:<%= app %>]'))) ||
+       (github.event_name == 'workflow_dispatch' &&
+        (github.event.inputs.apps == '' ||
+         github.event.inputs.apps == 'all' ||
+         contains(github.event.inputs.apps, '<%= app %>'))))
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+      - name: Install doctl
+        run: |
+          set -eu
+          DOCTL_VERSION="1.119.1"
+          curl -fsSL "https://github.com/digitalocean/doctl/releases/download/v${DOCTL_VERSION}/doctl-${DOCTL_VERSION}-linux-amd64.tar.gz" -o /tmp/doctl.tar.gz
+          tar -xzf /tmp/doctl.tar.gz -C /tmp
+          sudo mv /tmp/doctl /usr/local/bin/doctl
+          doctl version
+      - name: Authenticate doctl
+        run: doctl auth init -t '${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}'
+      - name: Validate DigitalOcean token
+        run: |
+          doctl auth validate
+          doctl account get
+      - name: Log in to Container Registry
+        run: doctl registry login --expiry-seconds 1200
+      - name: Build Docker image
+        run: |
+          docker build -t ${{ env.REGISTRY }}/<%= config.appName %>-<%= app %>:${{ github.sha }} \
+            --build-arg <%= appUpper %>_API_BASE_URL='${{ env.<%= appUpper %>_API_BASE_URL }}' \
+            -f apps/<%= app %>/Dockerfile apps/<%= app %>/
+      - name: Push Docker image (sha)
+        run: |
+          docker push ${{ env.REGISTRY }}/<%= config.appName %>-<%= app %>:${{ github.sha }}
+      - name: Push Docker image (latest)
+        run: |
+          docker tag ${{ env.REGISTRY }}/<%= config.appName %>-<%= app %>:${{ github.sha }} \
+            ${{ env.REGISTRY }}/<%= config.appName %>-<%= app %>:latest
+          docker push ${{ env.REGISTRY }}/<%= config.appName %>-<%= app %>:latest
+      - name: Save DigitalOcean kubeconfig
+        run: doctl kubernetes cluster kubeconfig save ${{ env.K8S_CLUSTER_ID }}
+      - name: Ensure <%= app %> config exists
+        run: |
+          kubectl create configmap <%= config.appName %>-<%= app %>-config \
+            -n ${{ env.NAMESPACE }} \
+            --from-literal=<%= appUpper %>_API_BASE_URL='${{ env.<%= appUpper %>_API_BASE_URL }}' \
+            --dry-run=client -o yaml | kubectl apply -f -
+      - name: Deploy to Kubernetes
+        run: |
+          kubectl set image deployment/<%= config.appName %>-<%= app %> \
+            <%= config.appName %>-<%= app %>=${{ env.REGISTRY }}/<%= config.appName %>-<%= app %>:${{ github.sha }} \
+            -n ${{ env.NAMESPACE }}
+          kubectl rollout status deployment/<%= config.appName %>-<%= app %> -n ${{ env.NAMESPACE }} --timeout=5m || (
+            echo "--- Rollout timed out. Pod status:"
+            kubectl get pods -l app=<%= config.appName %>-<%= app %> -n ${{ env.NAMESPACE }}
+            echo "--- Recent events:"
+            kubectl describe deployment/<%= config.appName %>-<%= app %> -n ${{ env.NAMESPACE }} | tail -20
+            POD_NAME=$(kubectl get pods -l app=<%= config.appName %>-<%= app %> -n ${{ env.NAMESPACE }} --sort-by=.metadata.creationTimestamp -o name | tail -n 1 | cut -d/ -f2)
+            if [ -n "$POD_NAME" ]; then
+              echo "--- Describe newest pod: $POD_NAME"
+              kubectl describe pod "$POD_NAME" -n ${{ env.NAMESPACE }}
+              echo "--- Current logs from $POD_NAME:"
+              kubectl logs "$POD_NAME" -n ${{ env.NAMESPACE }} --tail=120 || true
+            fi
+            exit 1
+          )
+      - name: Cleanup old registry manifests (<%= appCapitalized %>)
+        run: |
+          set -eu
+          REGISTRY_NAME="${REGISTRY##*/}"
+          REPOSITORY="<%= config.appName %>-<%= app %>"
+          DIGEST_REGEX='^sha256:[a-f0-9]{64}$'
+          
+          echo "Inspecting repository ${REPOSITORY} in registry ${REGISTRY_NAME}"
+          
+          TAG_ROWS="$(doctl registry repository list-tags "${REGISTRY_NAME}/${REPOSITORY}" --format Tag,ManifestDigest --no-header || true)"
+          
+          if [ -z "${TAG_ROWS}" ]; then
+            echo "No tags found for ${REPOSITORY}; skipping cleanup."
+            exit 0
+          fi
+          
+          CURRENT_DIGEST="$(printf '%s\n' "${TAG_ROWS}" | awk -v target="${{ github.sha }}" -v regex="${DIGEST_REGEX}" '
+            $1 == target {
+              for (i = 1; i <= NF; i++) {
+                if ($i ~ regex) {
+                  print $i;
+                  exit;
+                }
+              }
+            }
+          ')"
+          
+          if [ -z "${CURRENT_DIGEST}" ]; then
+            echo "::error::Unable to determine current manifest digest for ${REPOSITORY}:${{ github.sha }}"
+            exit 1
+          fi
+          
+          OLD_DIGESTS="$(printf '%s\n' "${TAG_ROWS}" | awk -v keep="${CURRENT_DIGEST}" -v regex="${DIGEST_REGEX}" '
+            {
+              for (i = 1; i <= NF; i++) {
+                if ($i ~ regex && $i != keep) {
+                  print $i;
+                }
+              }
+            }
+          ' | sort -u)"
+          
+          if [ -z "${OLD_DIGESTS}" ]; then
+            echo "No old manifests to delete for ${REPOSITORY}."
+            exit 0
+          fi
+          
+          echo "Deleting old manifests from ${REPOSITORY}:"
+          printf '%s\n' "${OLD_DIGESTS}"
+          
+          printf '%s\n' "${OLD_DIGESTS}" | while IFS= read -r DIGEST; do
+            if [ -z "${DIGEST}" ]; then
+              continue
+            fi
+
+            if ! printf '%s\n' "${DIGEST}" | grep -Eq "${DIGEST_REGEX}"; then
+              echo "Skipping invalid digest candidate: ${DIGEST}"
+              continue
+            fi
+            
+            doctl registry repository delete-manifest "${REGISTRY_NAME}/${REPOSITORY}" "${DIGEST}" --force
+          done
+<% }); %>