.gitverse/workflows/build-push.yaml - master - viktorphp/back-socket

.gitverse/workflows/build-push.yaml
87 строк4 KB
Иванов Виктор Евгеньевич
[master]: обновить action.yaml и build-push.yaml
19 май 2026, 00:33
19 май 2026, 00:339d0f889
name: Сборка и отправка образа Docker
on:
  push:
    branches:
      - master
env:
  EVOAR_URI: veres.cr.cloud.ru
  PROJECT_ID: 7a923a30-4411-42c4-919b-33da0e6594cb
jobs:
  build-push:
    name: Build and push to Evolution Artifact Registry
    runs-on: self-hosted
    container:
      image: catthehacker/ubuntu:act-latest
      options: --cpus=0.5 --memory=2G --net=bridge
    steps:
      - name: Debug ENV
        run: |
          echo "ProjectID -> '${{ env.PROJECT_ID }}'"
          echo "Registry -> '${{ env.EVOAR_URI }}'"
          echo "KeyID    -> '${{ secrets.EVOAR_KEYID && '***OK***' }}'"
          echo -n "${{ secrets.EVOAR_KEYID }}" | wc -c
          echo "KeySecret-> '${{ secrets.EVOAR_KEYSECRET && '***OK***' }}'" 
          echo -n "${{ secrets.EVOAR_KEYSECRET }}" | wc -c
          echo "${{ secrets.EVOAR_KEYSECRET }}" | docker login ${{ env.EVOAR_URI }} -u "${{ secrets.EVOAR_KEYID }}" --password-stdin

      - name: Checkout to the branch
        uses: https://github.com/actions/checkout@v3

      - name: Set up Docker buildx
        uses: https://github.com/docker/setup-buildx-action@v1

      - name: Log in to Evolution Artifact Registry
        uses: https://github.com/docker/login-action@v3
        with:
          registry: ${{ env.EVOAR_URI }}
          username: ${{ secrets.EVOAR_KEYID }}
          password: ${{ secrets.EVOAR_KEYSECRET }}
          debug: true

      - name: Build and push docker image to Evolution Artifact Registry
        id: build_push
        uses: https://github.com/docker/build-push-action@v4
        with:
          push: true
          platforms: linux/amd64
          provenance: false
          tags: ${{ env.EVOAR_URI }}/${{ github.repository }}:build-${{ github.sha }}
          file: ./Dockerfile
          context: .

      - name: Create or update Evolution Container App
        uses: ./.github/actions/evo-container-app-action
        with:
          project_id: ${{ env.PROJECT_ID }}
          client_id: ${{ secrets.EVOAR_KEYID }}
          client_secret: ${{ secrets.EVOAR_KEYSECRET }}
          registry_uri: ${{ env.EVOAR_URI }}
          image_name: ${{ github.repository }}:build-${{ github.sha }}
          name: veres-back
          port: ${{ secrets.PORT }}
          node_env: ${{ secrets.NODE_ENV }}
          db_host: ${{ secrets.DB_HOST }}
          db_port: ${{ secrets.DB_PORT }}
          db_username: ${{ secrets.DB_USERNAME }}
          db_password: ${{ secrets.DB_PASSWORD }}
          db_database: ${{ secrets.DB_DATABASE }}
          postgres_password: ${{ secrets.POSTGRES_PASSWORD }}
          pgadmin_default_email: ${{ secrets.PGADMIN_DEFAULT_EMAIL }}
          pgadmin_default_password: ${{ secrets.PGADMIN_DEFAULT_PASSWORD }}
          session_secret: ${{ secrets.SESSION_SECRET }}
          session_max_age: ${{ secrets.SESSION_MAX_AGE }}
          cookie_secure: ${{ secrets.COOKIE_SECURE }}
          cookie_same_site: ${{ secrets.COOKIE_SAME_SITE }}
          cookie_http_only: ${{ secrets.COOKIE_HTTP_ONLY }}
          cors_origin: ${{ secrets.CORS_ORIGIN }}
          jwt_secret: ${{ secrets.JWT_SECRET }}
          jwt_expires_in: ${{ secrets.JWT_EXPIRES_IN }}
          jwt_expires_in_ms: ${{ secrets.JWT_EXPIRES_IN_MS }}
          jwt_refresh_expires_in: ${{ secrets.JWT_REFRESH_EXPIRES_IN }}
          jwt_refresh_expires_in_ms: ${{ secrets.JWT_REFRESH_EXPIRES_IN_MS }}
          yandex_storage_endpoint: ${{ secrets.YANDEX_STORAGE_ENDPOINT }}
          yandex_storage_region: ${{ secrets.YANDEX_STORAGE_REGION }}
          yandex_storage_access_key_id: ${{ secrets.YANDEX_STORAGE_ACCESS_KEY_ID }}
          yandex_storage_secret_access_key: ${{ secrets.YANDEX_STORAGE_SECRET_ACCESS_KEY }}
          yandex_storage_bucket: ${{ secrets.YANDEX_STORAGE_BUCKET }}
          yandex_vision_api_key: ${{ secrets.YANDEX_VISION_API_KEY }}