this repo has no description
Pipeline stuff
+72
-9
+39
.tangled/workflows/deploy-staging.yml
+39
.tangled/workflows/deploy-staging.yml
···
1
+
image: gcr.io/kaniko-project/executor:debug
2
+
engine: "kubernetes"
3
+
architecture: arm64
4
+
5
+
when:
6
+
- event: ["push"]
7
+
branch: ["main"]
8
+
9
+
steps:
10
+
- name: "Setup registry auth"
11
+
command: |
12
+
mkdir -p /kaniko/.docker
13
+
printf '{"auths":{"zot.sans-self.org":{"username":"%s","password":"%s"}}}' \
14
+
"$ZOT_USERNAME" "$ZOT_PASSWORD" > /kaniko/.docker/config.json
15
+
16
+
- name: "Build and push appview"
17
+
command: |
18
+
/kaniko/executor \
19
+
--dockerfile=Containerfile.appview \
20
+
--context=. \
21
+
--destination=zot.sans-self.org/opake/appview:staging \
22
+
--destination=zot.sans-self.org/opake/appview:staging-$TANGLED_COMMIT_SHA \
23
+
--cleanup
24
+
25
+
- name: "Build and push web"
26
+
command: |
27
+
/kaniko/executor \
28
+
--dockerfile=Containerfile.web \
29
+
--context=. \
30
+
--destination=zot.sans-self.org/opake/web:staging \
31
+
--destination=zot.sans-self.org/opake/web:staging-$TANGLED_COMMIT_SHA \
32
+
--build-arg=VITE_APPVIEW_URL=https://staging.opake.app \
33
+
--cleanup
34
+
35
+
- name: "Rollout restart staging"
36
+
command: |
37
+
wget -qO /tmp/kubectl "https://dl.k8s.io/release/v1.32.0/bin/linux/arm64/kubectl"
38
+
chmod +x /tmp/kubectl
39
+
/tmp/kubectl rollout restart deployment/opake-web deployment/opake-appview -n opake-staging
+12
-7
Containerfile.web
+12
-7
Containerfile.web
···
1
-
FROM rust:1.86-slim-bookworm AS wasm-builder
1
+
FROM oven/bun:1 AS web-deps
2
2
3
-
RUN cargo install wasm-pack
3
+
WORKDIR /build/web
4
+
COPY web/package.json web/bun.lock ./
5
+
RUN bun install --frozen-lockfile
6
+
7
+
FROM rust:1.88-slim-bookworm AS wasm-builder
8
+
9
+
RUN cargo install wasm-pack --locked
4
10
5
11
WORKDIR /build
6
12
COPY Cargo.toml Cargo.lock ./
···
8
14
9
15
RUN wasm-pack build crates/opake-wasm --target web --out-dir ../../web/src/wasm/opake-wasm --out-name opake
10
16
11
-
FROM oven/bun:1 AS web-builder
17
+
FROM web-deps AS web-builder
12
18
13
-
WORKDIR /build/web
14
-
COPY web/package.json web/bun.lock ./
15
-
RUN bun install --frozen-lockfile
19
+
ARG VITE_APPVIEW_URL=https://appview.opake.app
20
+
ENV VITE_APPVIEW_URL=$VITE_APPVIEW_URL
16
21
17
22
COPY web/ ./
18
23
COPY --from=wasm-builder /build/web/src/wasm/opake-wasm/ ./src/wasm/opake-wasm/
19
24
20
-
RUN bun run build
25
+
RUN bun run tsc && bun run vite build
21
26
22
27
FROM node:22-slim
23
28
-1
appview/.dockerignore
-1
appview/.dockerignore
appview/Dockerfile
Containerfile.appview
appview/Dockerfile
Containerfile.appview
+3
-1
appview/docker-compose.yml
docker-compose.yml
+3
-1
appview/docker-compose.yml
docker-compose.yml
+18
docker-compose.development.yaml
+18
docker-compose.development.yaml
···
1
+
services:
2
+
db:
3
+
image: postgres:17-alpine
4
+
environment:
5
+
POSTGRES_USER: postgres
6
+
POSTGRES_PASSWORD: postgres
7
+
ports:
8
+
- "5432:5432"
9
+
volumes:
10
+
- pgdata:/var/lib/postgresql/data
11
+
healthcheck:
12
+
test: ["CMD-SHELL", "pg_isready -U postgres"]
13
+
interval: 2s
14
+
timeout: 5s
15
+
retries: 5
16
+
17
+
volumes:
18
+
pgdata: