Story Crater Bot
f8b19d9f55
Use CI_RUNNER and CI_RUNNER_SECRET for repo clone authentication. Embed credentials in git clone URL: https://user:token@host/repo.git Removes dependency on GITHUB_TOKEN (GitHub-specific) and improves Forgejo compatibility.
65 lines
2.0 KiB
YAML
65 lines
2.0 KiB
YAML
name: ArgoCD Sync on Main
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- 'k8s/**'
|
|
|
|
jobs:
|
|
argocd-sync:
|
|
runs-on: docker
|
|
steps:
|
|
- name: Checkout
|
|
run: |
|
|
CLONE_URL="https://${{ secrets.CI_RUNNER }}:${{ secrets.CI_RUNNER_SECRET }}@${{ gitea.repository_clone_url | replace 'https://', '' }}"
|
|
git clone --depth 1 "$CLONE_URL" .
|
|
git fetch origin ${{ gitea.ref }}:current-branch
|
|
git checkout current-branch
|
|
|
|
- name: Install ArgoCD CLI
|
|
run: |
|
|
curl -sSL -o /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64
|
|
chmod +x /usr/local/bin/argocd
|
|
|
|
- name: Configure ArgoCD Access
|
|
env:
|
|
ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
|
|
ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
|
|
run: |
|
|
echo "Configured ArgoCD credentials"
|
|
|
|
- name: Sync Root Application
|
|
env:
|
|
ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
|
|
ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
|
|
run: |
|
|
echo "=== Syncing homelab-root ==="
|
|
argocd app sync homelab-root --force
|
|
argocd app wait homelab-root --timeout 5m
|
|
|
|
- name: Check Sync Status
|
|
env:
|
|
ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
|
|
ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
|
|
run: |
|
|
echo "=== ArgoCD Applications Status ==="
|
|
argocd app list -o table
|
|
|
|
# Verify root app is synced
|
|
STATUS=$(argocd app get homelab-root -o jsonpath='{.status.syncStatus}')
|
|
if [ "$STATUS" != "Synced" ]; then
|
|
echo "❌ Root app sync failed: $STATUS"
|
|
exit 1
|
|
fi
|
|
echo "✓ Root app synced successfully"
|
|
|
|
- name: Health Check
|
|
env:
|
|
ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
|
|
ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
|
|
run: |
|
|
echo "=== Checking Application Health ==="
|
|
argocd app get homelab-root -o wide
|