Github Action自動化部署到kubernetes

# Compile code
FROM docker.io/library/golang:alpine as builder
WORKDIR /app

COPY . .
RUN go mod download &&\
    go build -o app

# Build image by compiled binary
FROM docker.io/library/alpine
WORKDIR /app
COPY --from=builder /app/app .

EXPOSE 3000

ENTRYPOINT ["./app"]

apiVersion: v1
kind: Service
metadata:
  name: api-backend  # Service name
spec:
  type: LoadBalancer  # 使用cloud的loadbalancer分配ip
  ports:
  - port: 3000  # Service開放的port (預設target port也會被設為相同)
  selector:
    app: api-backend  # 此Service作用於哪些pod的
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: api-backend-deploy  # Deployment name
spec:
  replicas: 1  # 此Deployment要維持幾個pod
  selector:
    matchLabels:
      app: api-backend
  template:
    metadata:
      labels:
        app: api-backend
    spec:
      nodeSelector:
        "beta.kubernetes.io/os": linux
      containers:
      - name: api-backend
        image: tgbotreg.azurecr.io/api-backend:v1.0
        env:
        - name: DB_CONN  # ENV in container
          valueFrom:
            secretKeyRef:
              name: mariadb-conn  # 哪個secret
              key: dbconn  # secret中的哪個key
        ports:
        - containerPort: 3000
          name: api-port

secretGenerator:
- name: mariadb-conn
  literals:
  - dbconn=root:yourpassword@tcp(api-mariadb:3306)/nation

resources:
  - api-deploy.yaml
namespace: api-backend  # 加入namespace到resource指定的yaml中

apiVersion: v1
data:
  dbconn: cm9vdDphYmJjY2NkZGRkQHRjcChhcGktbWFyaWFkYjozMzA2KS9uYXRpb24=
kind: Secret
metadata:
  name: mariadb-conn
  namespace: api-backend
type: Opaque

```yaml
# Event that trigger this workflow
on: 
  release:
    types: [published, edited]
    branches:
      - main

# Environment variables available to all jobs and steps in this workflow
env:
  REGISTRY_NAME: tgbotReg
  CLUSTER_NAME: tgbot
  CLUSTER_RESOURCE_GROUP: Telegram-Bot
  NAMESPACE: api-backend
  APP_NAME: api-backend
  
jobs:
  build:  # jobs name (defined by your self)
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@main
    
    # Connect to Azure Container Registry (ACR)
    - uses: azure/docker-login@v1
      with:
        login-server: ${{ env.REGISTRY_NAME }}.azurecr.io
        username: ${{ secrets.REGISTRY_USERNAME }} 
        password: ${{ secrets.REGISTRY_PASSWORD }}
    
    # Container build and push to a Azure Container Registry (ACR)
    - run: |
        docker build . -t ${{ env.REGISTRY_NAME }}.azurecr.io/${{ env.APP_NAME }}:${{ github.sha }}
        docker push ${{ env.REGISTRY_NAME }}.azurecr.io/${{ env.APP_NAME }}:${{ github.sha }}
    
    # Set the target Azure Kubernetes Service (AKS) cluster. 
    - uses: azure/aks-set-context@v1
      with:
        creds: '${{ secrets.AZURE_CREDENTIALS }}'
        cluster-name: ${{ env.CLUSTER_NAME }}
        resource-group: ${{ env.CLUSTER_RESOURCE_GROUP }}
    
    # Create namespace if doesn't exist
    - run: |
        kubectl create namespace ${{ env.NAMESPACE }} --dry-run=client -o json | kubectl apply -f -
    
    # Replace image tag in deployment.yml
    - run: |
        sed -i "s/LATEST_TAG/${{ github.sha }}/" manifests/deployment.yml
    
    # Deploy app to AKS
    - uses: azure/k8s-deploy@v1
      with:
        manifests: |
          manifests/deployment.yml
          manifests/service.yml
        images: |
          ${{ env.REGISTRY_NAME }}.azurecr.io/${{ env.APP_NAME }}:${{ github.sha }}
        # imagepullsecrets: |
        #   ${{ env.SECRET }}
        namespace: ${{ env.NAMESPACE }}

apiVersion: apps/v1
kind: Deployment
metadata:
  name: api-backend-deploy
  namespace: api-backend
spec:
  replicas: 1
  selector:
    matchLabels:
      app: api-backend
  template:
    metadata:
      labels:
        app: api-backend
    spec:
      containers:
      - env:
        - name: DB_CONN
          valueFrom:
            secretKeyRef:
              key: dbconn
              name: mariadb-conn
        image: tgbotreg.azurecr.io/api-backend:LATEST_TAG
        name: api-backend
        ports:
        - containerPort: 3000
          name: api-port
      nodeSelector:
        beta.kubernetes.io/os: linux

apiVersion: v1
kind: Service
metadata:
  name: api-backend
  namespace: api-backend
spec:
  ports:
  - port: 3000
  selector:
    app: api-backend
  type: LoadBalancer