Start standalone frontend service

2026-10-14 09:46:00 +02:00
parent 9c23371363
commit 6335f86f65
16 changed files with 572 additions and 2 deletions
@@ -0,0 +1,147 @@
+name: Build and publish frontend
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  publish:
+    runs-on: large
+    if: ${{ !startsWith(github.ref, 'refs/heads/') || !contains(github.event.head_commit.message, '[auto-version-bump]') }}
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITEA_TOKEN }}
+          persist-credentials: true
+
+      - name: Verify release version and frontend source
+        shell: bash
+        run: |
+          set -euo pipefail
+          python3 scripts/bump-version.py --check
+          scripts/check-frontend.sh
+
+      - name: Ensure Helm is available
+        shell: bash
+        env:
+          HELM_VERSION: v3.17.3
+        run: |
+          set -euo pipefail
+          if command -v helm >/dev/null 2>&1; then
+            helm version --short
+            exit 0
+          fi
+          mkdir -p "$HOME/.local/bin" "$RUNNER_TEMP/helm"
+          archive="$RUNNER_TEMP/helm/helm-${HELM_VERSION}-linux-amd64.tar.gz"
+          curl -fsSLo "$archive" "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz"
+          curl -fsSLo "$archive.sha256sum" "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz.sha256sum"
+          (cd "$RUNNER_TEMP/helm" && sha256sum -c "$(basename "$archive").sha256sum")
+          tar -xzf "$archive" -C "$RUNNER_TEMP/helm"
+          install "$RUNNER_TEMP/helm/linux-amd64/helm" "$HOME/.local/bin/helm"
+          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+
+      - name: Lint and render chart
+        shell: bash
+        run: |
+          set -euo pipefail
+          helm lint deploy/helm/ai-spel-frontend
+          helm template ai-spel-frontend deploy/helm/ai-spel-frontend \
+            --namespace ai-spel > "$RUNNER_TEMP/frontend-manifest.yaml"
+          grep -q 'kind: Deployment' "$RUNNER_TEMP/frontend-manifest.yaml"
+          grep -q 'kind: Service' "$RUNNER_TEMP/frontend-manifest.yaml"
+
+      - name: Build and push commit image
+        if: startsWith(github.ref, 'refs/heads/')
+        shell: bash
+        env:
+          HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }}
+          HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}
+        run: |
+          set -euo pipefail
+          printf '%s' "$HARBOR_PASSWORD" | docker login harbor.k3s.k0.nu \
+            --username "$HARBOR_USERNAME" --password-stdin
+          unset HARBOR_PASSWORD
+          version="$(cat VERSION)"
+          tag="harbor.k3s.k0.nu/ai-spel/frontend:edge-${GITHUB_SHA:0:12}"
+          docker build --platform linux/amd64 --pull \
+            --build-arg "FRONTEND_VERSION=$version" --tag "$tag" .
+          docker image push "$tag"
+
+      - name: Bump patch version and create release tag
+        id: bump
+        if: startsWith(github.ref, 'refs/heads/')
+        shell: bash
+        run: |
+          set -euo pipefail
+          git fetch origin main --quiet
+          test "$(git rev-parse origin/main)" = "$GITHUB_SHA" || {
+            echo 'main advanced during this workflow; a newer push will run the release step'
+            exit 1
+          }
+          version="$(python3 scripts/bump-version.py)"
+          git config user.name "Gitea Actions"
+          git config user.email "actions@users.noreply.gitea"
+          git add VERSION deploy/helm/ai-spel-frontend/Chart.yaml
+          git commit -m "Release $version [auto-version-bump]"
+          git tag -a "v$version" -m "v$version"
+          git push origin HEAD:main "refs/tags/v$version"
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+
+      - name: Publish versioned image, chart, and manifest
+        if: ${{ startsWith(github.ref, 'refs/tags/') || steps.bump.outputs.version != '' }}
+        shell: bash
+        env:
+          AUTO_RELEASE_VERSION: ${{ steps.bump.outputs.version }}
+          HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }}
+          HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}
+          ORAS_VERSION: 1.2.3
+        run: |
+          set -euo pipefail
+          version="$(cat VERSION)"
+          test -n "$version"
+          if [[ "$GITHUB_REF" == refs/tags/* ]]; then
+            test "$GITHUB_REF_NAME" = "v$version"
+          else
+            test "$AUTO_RELEASE_VERSION" = "$version"
+          fi
+          python3 scripts/bump-version.py --check
+          printf '%s' "$HARBOR_PASSWORD" | docker login harbor.k3s.k0.nu \
+            --username "$HARBOR_USERNAME" --password-stdin
+          image="harbor.k3s.k0.nu/ai-spel/frontend:$version"
+          docker build --platform linux/amd64 --pull \
+            --build-arg "FRONTEND_VERSION=$version" --tag "$image" .
+          docker image push "$image"
+
+          publish_dir="$(mktemp -d)"
+          trap 'rm -rf "$publish_dir"' EXIT
+          helm lint deploy/helm/ai-spel-frontend
+          helm package deploy/helm/ai-spel-frontend --destination "$publish_dir" \
+            --version "$version" --app-version "$version"
+          helm push "$publish_dir/ai-spel-frontend-$version.tgz" \
+            oci://harbor.k3s.k0.nu/ai-spel
+          helm template ai-spel-frontend "$publish_dir/ai-spel-frontend-$version.tgz" \
+            --namespace ai-spel > "$publish_dir/frontend-manifest.yaml"
+
+          mkdir -p "$RUNNER_TEMP/oras"
+          archive="$RUNNER_TEMP/oras/oras_${ORAS_VERSION}_linux_amd64.tar.gz"
+          curl -fsSLo "$archive" \
+            "https://github.com/oras-project/oras/releases/download/v${ORAS_VERSION}/oras_${ORAS_VERSION}_linux_amd64.tar.gz"
+          echo 'b4efc97a91f471f323f193ea4b4d63d8ff443ca3aab514151a30751330852827  '"$archive" | sha256sum -c -
+          tar -xzf "$archive" -C "$RUNNER_TEMP/oras" oras
+          export PATH="$RUNNER_TEMP/oras:$PATH"
+          printf '%s' "$HARBOR_PASSWORD" | oras login harbor.k3s.k0.nu \
+            --username "$HARBOR_USERNAME" --password-stdin
+          unset HARBOR_PASSWORD
+          (
+            cd "$publish_dir"
+            oras push --artifact-type application/vnd.ai-spel.frontend-manifest.v1 \
+              "harbor.k3s.k0.nu/ai-spel/frontend-manifest:$version" \
+              "frontend-manifest.yaml:application/yaml"
+          )