ci: skip canary deploy, kubeconfig, and k8s promotion (RBAC not ready) (#41)
CI / CI (push) Successful in 3m15s

- Remove kubectl install from dependencies (nothing uses it now)
- Skip Setup kubeconfig step
- Comment out k8s rolling update promotion
- Tag :latest still works (docker tag+push, no kubectl)
- Re-enable when ci-tekton-trigger SA has pod create/delete RBAC

---------

Co-authored-by: Admin Bot <[email protected]>
Reviewed-on: #41
This commit was merged in pull request #41.
This commit is contained in:
2026-09-26 12:20:12 +00:00
co-authored by Admin Bot
parent ad5ba583ac
commit ea7bd8336b
+7 -12
View File
@@ -21,9 +21,6 @@ jobs:
run: | run: |
apt-get update apt-get update
apt-get install -y docker.io curl nodejs apt-get install -y docker.io curl nodejs
curl -sLO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
chmod +x kubectl && mv kubectl /usr/local/bin/
kubectl version --client
- name: Checkout code - name: Checkout code
uses: actions/checkout@v4 uses: actions/checkout@v4
@@ -63,7 +60,7 @@ jobs:
# (Temporal, Gotify). Tests run against its pod IP directly. # (Temporal, Gotify). Tests run against its pod IP directly.
# Zero downtime: production pods untouched until tests pass. # Zero downtime: production pods untouched until tests pass.
- name: Setup kubeconfig - name: Setup kubeconfig
if: github.event_name == 'push' && github.ref == 'refs/heads/main' if: false # SKIP: only needed for canary deploy, RBAC not ready
run: | run: |
mkdir -p ~/.kube mkdir -p ~/.kube
echo "${KUBECONFIG_B64}" | base64 -d > ~/.kube/config echo "${KUBECONFIG_B64}" | base64 -d > ~/.kube/config
@@ -173,14 +170,12 @@ jobs:
# ── Zero-downtime promotion ────────────────────────────── # ── Zero-downtime promotion ──────────────────────────────
# kubectl set image triggers a rolling update: new pods come up # kubectl set image triggers a rolling update: new pods come up
# before old pods are terminated. Production traffic uninterrupted. # before old pods are terminated. Production traffic uninterrupted.
- name: Promote — rolling update # TODO: Re-enable rolling update when kubeconfig/RBAC is ready
if: github.event_name == 'push' && github.ref == 'refs/heads/main' # - name: Promote — rolling update
run: | # if: github.event_name == 'push' && github.ref == 'refs/heads/main'
SHA="${{ steps.sha.outputs.short_sha }}" # run: |
kubectl set image deployment/api-gateway \ # kubectl set image deployment/api-gateway api-gateway="${IMAGE}:${SHA}" -n api
api-gateway="${IMAGE}:${SHA}" -n api # kubectl rollout status deployment/api-gateway -n api --timeout=120s
kubectl rollout status deployment/api-gateway -n api --timeout=120s
echo "✓ Rolling update complete: ${IMAGE}:${SHA}"
- name: Tag :latest (informational) - name: Tag :latest (informational)
if: github.event_name == 'push' && github.ref == 'refs/heads/main' if: github.event_name == 'push' && github.ref == 'refs/heads/main'