34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
name: 全局K3s部署
|
||
on:
|
||
push:
|
||
branches: [master]
|
||
|
||
jobs:
|
||
deploy:
|
||
runs-on: ubuntu-latest
|
||
env:
|
||
# 从组织级Secrets读取，不用在仓库重复配置
|
||
K3S_HOST: ${{ secrets.K3S_HOST }}
|
||
APP_NAME: ${{ gitea.repo_name }}
|
||
steps:
|
||
- name: 拉取代码
|
||
uses: actions/checkout@v4
|
||
|
||
- name: SSH部署K3s
|
||
run: |
|
||
mkdir -p ~/.ssh
|
||
# 写入组织配置的SSH私钥
|
||
echo "${{ secrets.K3S_SSH_KEY }}" > k3s.pem
|
||
chmod 600 k3s.pem
|
||
# 调试：验证私钥是否正确写入
|
||
echo "私钥文件权限："
|
||
ls -l k3s.pem
|
||
echo "私钥头部（仅前5行）："
|
||
head -5 k3s.pem
|
||
# 测试连接（会输出服务器主机名和kubectl版本）
|
||
ssh -i k3s.pem -o StrictHostKeyChecking=no -o ConnectTimeout=10 root@${K3S_HOST} "hostname && kubectl version --client"
|
||
# 正式执行部署命令
|
||
ssh -i k3s.pem -o StrictHostKeyChecking=no root@${K3S_HOST} << CMD
|
||
kubectl apply -f /k8s/deploy.yaml
|
||
kubectl rollout restart deployment ${APP_NAME}
|
||
CMD |