-
Notifications
You must be signed in to change notification settings - Fork 94
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Create azure-kubernetes-service-kustomize.yml
Signed-off-by: oil-bleach-re-el-idited <[email protected]>
- Loading branch information
1 parent
ee6b2c9
commit 8df8256
Showing
1 changed file
with
121 additions
and
0 deletions.
There are no files selected for viewing
121 changes: 121 additions & 0 deletions
121
.github/workflows/azure-kubernetes-service-kustomize.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,121 @@ | ||
# This workflow will build and push an application to a Azure Kubernetes Service (AKS) cluster when you push your code | ||
# | ||
# This workflow assumes you have already created the target AKS cluster and have created an Azure Container Registry (ACR) | ||
# The ACR should be attached to the AKS cluster | ||
# For instructions see: | ||
# - https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal | ||
# - https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-portal | ||
# - https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli#configure-acr-integration-for-existing-aks-clusters | ||
# - https://github.com/Azure/aks-create-action | ||
# | ||
# To configure this workflow: | ||
# | ||
# 1. Set the following secrets in your repository (instructions for getting these | ||
# https://docs.microsoft.com/en-us/azure/developer/github/connect-from-azure?tabs=azure-cli%2Clinux): | ||
# - AZURE_CLIENT_ID | ||
# - AZURE_TENANT_ID | ||
# - AZURE_SUBSCRIPTION_ID | ||
# | ||
# 2. Set the following environment variables (or replace the values below): | ||
# - AZURE_CONTAINER_REGISTRY (name of your container registry / ACR) | ||
# - CONTAINER_NAME (name of the container image you would like to push up to your ACR) | ||
# - RESOURCE_GROUP (where your cluster is deployed) | ||
# - CLUSTER_NAME (name of your AKS cluster) | ||
# - IMAGE_PULL_SECRET_NAME (name of the ImagePullSecret that will be created to pull your ACR image) | ||
# | ||
# 3. Choose the appropriate render engine for the bake step https://github.com/Azure/k8s-bake. The config below assumes Kustomize. | ||
# Set your kustomizationPath and kubectl-version to suit your configuration. | ||
# - KUSTOMIZE_PATH (the path where your Kustomize manifests are located) | ||
# | ||
# For more information on GitHub Actions for Azure, refer to https://github.com/Azure/Actions | ||
# For more samples to get started with GitHub Action workflows to deploy to Azure, refer to https://github.com/Azure/actions-workflow-samples | ||
# For more options with the actions used below please refer to https://github.com/Azure/login | ||
|
||
name: Build and deploy an app to AKS with Kustomize | ||
|
||
on: | ||
push: | ||
branches: ["main.c"] | ||
workflow_dispatch: | ||
|
||
env: | ||
AZURE_CONTAINER_REGISTRY: "your-azure-container-registry" | ||
CONTAINER_NAME: "your-container-name" | ||
RESOURCE_GROUP: "your-resource-group" | ||
CLUSTER_NAME: "your-cluster-name" | ||
KUSTOMIZE_PATH: "your-kustomize-path" | ||
|
||
jobs: | ||
buildImage: | ||
permissions: | ||
contents: read | ||
id-token: write | ||
runs-on: ubuntu-latest | ||
steps: | ||
# Checks out the repository this file is in | ||
- uses: actions/checkout@v4 | ||
|
||
# Logs in with your Azure credentials | ||
- name: Azure login | ||
uses: azure/[email protected] | ||
with: | ||
client-id: ${{ secrets.AZURE_CLIENT_ID }} | ||
tenant-id: ${{ secrets.AZURE_TENANT_ID }} | ||
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | ||
|
||
# Builds and pushes an image up to your Azure Container Registry | ||
- name: Build and push image to ACR | ||
run: | | ||
az acr build --image ${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io/${{ env.CONTAINER_NAME }}:${{ github.sha }} --registry ${{ env.AZURE_CONTAINER_REGISTRY }} -g ${{ env.RESOURCE_GROUP }} . | ||
deploy: | ||
permissions: | ||
actions: read | ||
contents: read | ||
id-token: write | ||
runs-on: ubuntu-latest | ||
needs: [buildImage] | ||
steps: | ||
# Checks out the repository this file is in | ||
- uses: actions/checkout@v4 | ||
|
||
# Logs in with your Azure credentials | ||
- name: Azure login | ||
uses: azure/[email protected] | ||
with: | ||
client-id: ${{ secrets.AZURE_CLIENT_ID }} | ||
tenant-id: ${{ secrets.AZURE_TENANT_ID }} | ||
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | ||
|
||
# Use kubelogin to configure your kubeconfig for Azure auth | ||
- name: Set up kubelogin for non-interactive login | ||
uses: azure/use-kubelogin@v1 | ||
with: | ||
kubelogin-version: 'v0.0.25' | ||
|
||
# Retrieves your Azure Kubernetes Service cluster's kubeconfig file | ||
- name: Get K8s context | ||
uses: azure/aks-set-context@v3 | ||
with: | ||
resource-group: ${{ env.RESOURCE_GROUP }} | ||
cluster-name: ${{ env.CLUSTER_NAME }} | ||
admin: 'false' | ||
use-kubelogin: 'true' | ||
|
||
# Runs Kustomize to create manifest files | ||
- name: Bake deployment | ||
uses: azure/k8s-bake@v2 | ||
with: | ||
renderEngine: "kustomize" | ||
kustomizationPath: ${{ env.KUSTOMIZE_PATH }} | ||
kubectl-version: latest | ||
id: bake | ||
|
||
# Deploys application based on manifest files from previous step | ||
- name: Deploy application | ||
uses: Azure/k8s-deploy@v4 | ||
with: | ||
action: deploy | ||
manifests: ${{ steps.bake.outputs.manifestsBundle }} | ||
images: | | ||
${{ env.AZURE_CONTAINER_REGISTRY }}.azurecr.io/${{ env.CONTAINER_NAME }}:${{ github.sha }} |