Skip to content

F/metrics

F/metrics #100

name: hetzner production workflow
on:
pull_request:
branches:
- main
- develop
push:
branches:
- main
- develop
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch:
env:
VALUE_FILE: public-api-prd/deployment.yaml
REGISTRY: quay.io/bot_detector/public-api
ENVIRONMENT: prd
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
lock_file:
runs-on: [self-hosted, "hetzner"]
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v3
- run: uv lock --locked
linting:
runs-on: [self-hosted, "hetzner"]
needs: [lock_file]
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v3
- run: uvx ruff check .
formatting:
runs-on: [self-hosted, "hetzner"]
needs: [lock_file]
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v3
- run: uvx ruff format --check .
# type_consistency:
# runs-on: [self-hosted, "hetzner"]
# needs: [lock_file]
# steps:
# - uses: actions/checkout@v4
# - uses: ./.github/actions/setup
# - run: uv run pyright
tests:
runs-on: [self-hosted, "hetzner"]
needs: [linting, formatting]
env:
ENV: "DVP"
DATABASE_URL: "mysql+aiomysql://root:root_bot_buster@mysql:3306/playerdata"
KAFKA_HOST: "localhost:9092"
POOL_RECYCLE: 60
POOL_TIMEOUT: 30
steps:
- uses: actions/checkout@v4
- name: Install uv
uses: astral-sh/setup-uv@v3
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version-file: ".python-version"
- name: Setup Docker Containers
run: |
docker-compose --verbose up --build -d
- name: Check API is Up
uses: cygnetdigital/[email protected]
with:
url: "http://localhost:5000/docs"
responseCode: "200,500"
timeout: 120000 # wait up to 120 seconds
interval: 5000 # poll every 5 seconds
- run: uv run pytest -v --durations=0 --cov --cov-report=xml
# This workflow contains two jobs: build_image and update_image_version
build_image:
runs-on: [self-hosted, "hetzner"]
needs: [tests]
# Run only on manual trigger
if: ${{ github.event_name == 'workflow_dispatch' }}
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- name: git checkout
uses: actions/checkout@v3
- name: Set vars
id: vars
run: |
echo "GIT_HASH=$(git rev-parse --short "$GITHUB_SHA")" >> $GITHUB_OUTPUT
- name: Docker Build
run: |
docker build . --file Dockerfile --network=host -t "${REGISTRY}:${{ steps.vars.outputs.GIT_HASH }}" --target production --build-arg api_port=5000 --build-arg root_path=""
- name: Login to Quay registry
run: echo "${{ secrets.QUAY_REGISTERY_PASSWORD }}" | docker login -u "bot_detector+quay_robot" quay.io --password-stdin
- name: Tag image
run: |
docker tag "${REGISTRY}:${{ steps.vars.outputs.GIT_HASH }}" "${REGISTRY}:${ENVIRONMENT}"
- name: Docker Push image to Quay registry
run: |
docker push "${REGISTRY}:${{ steps.vars.outputs.GIT_HASH }}"
docker push "${REGISTRY}:${ENVIRONMENT}"
update_image_version:
runs-on: [self-hosted, "hetzner"]
needs: build_image
# Run only on manual trigger
if: ${{ github.event_name == 'workflow_dispatch' }}
steps:
- name: Checkout Target Repository
uses: actions/checkout@v3
with:
repository: Bot-detector/bot-detector-k8s
- name: Set vars
id: vars
run: |
echo "GIT_HASH=$(git rev-parse --short "$GITHUB_SHA")" >> $GITHUB_OUTPUT
- name: Update Image Version
uses: fjogeleit/yaml-update-action@main
with:
repository: Bot-detector/bot-detector-k8s
valueFile: ${{ env.VALUE_FILE }}
token: "${{ secrets.HETZNER_ACTIONS_RUNNER_TOKEN }}"
commitChange: true
title: "${{ env.VALUE_FILE }}_${{ steps.vars.outputs.GIT_HASH }}"
branch: "${{ env.VALUE_FILE }}_${{ steps.vars.outputs.GIT_HASH }}"
targetBranch: develop
masterBranchName: develop
createPR: true
changes: |
{
"spec.template.spec.containers[0].image": "${{ env.REGISTRY }}:${{ steps.vars.outputs.GIT_HASH }}"
}