commit 25abba8 把 config.template 里 imAdminApi/imInternalApi/imConfigApi
三段的 baseUrl/serviceId/serviceName/secret 从硬编码改成了环境变量占位符,
但 deploy workflow 没有跟着传这几个 secret。这次改动和 im-server 那边
commit 7193ba2 是同一批,im-server 侧已经因为漏传导致容器反复重启(本次
故障);这几个 secret 已经在 Gitea 里配好,提前补上避免下次部署 im-manager
时重演同样的问题。
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
43 lines
1.6 KiB
YAML
43 lines
1.6 KiB
YAML
name: Deploy im-manager (Blue-Green)
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
image_tag:
|
|
description: '镜像tag,留空则使用commit短哈希'
|
|
required: false
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: deploy-host
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: 确定镜像tag
|
|
id: vars
|
|
run: |
|
|
TAG="${{ github.event.inputs.image_tag }}"
|
|
[ -z "$TAG" ] && TAG=$(git rev-parse --short HEAD)
|
|
echo "tag=$TAG" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: 构建镜像(前端+后端一体,自包含多阶段构建)
|
|
run: docker build -t im-manager:${{ steps.vars.outputs.tag }} .
|
|
|
|
- name: 蓝绿部署
|
|
env:
|
|
MYSQL_DSN: ${{ secrets.MYSQL_DSN }}
|
|
REDIS_ADDR: ${{ secrets.REDIS_ADDR }}
|
|
REDIS_DB: ${{ secrets.REDIS_DB }}
|
|
REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }}
|
|
TOKEN_SECRET_KEY: ${{ secrets.TOKEN_SECRET_KEY }}
|
|
IM_ADMIN_API_BASE_URL: ${{ secrets.IM_ADMIN_API_BASE_URL }}
|
|
IM_ADMIN_API_SERVICE_ID: ${{ secrets.IM_ADMIN_API_SERVICE_ID }}
|
|
IM_ADMIN_API_SECRET: ${{ secrets.IM_ADMIN_API_SECRET }}
|
|
IM_INTERNAL_API_BASE_URL: ${{ secrets.IM_INTERNAL_API_BASE_URL }}
|
|
IM_INTERNAL_API_SERVICE_NAME: ${{ secrets.IM_INTERNAL_API_SERVICE_NAME }}
|
|
IM_INTERNAL_API_SECRET: ${{ secrets.IM_INTERNAL_API_SECRET }}
|
|
IM_CONFIG_API_SERVICE_NAME: ${{ secrets.IM_CONFIG_API_SERVICE_NAME }}
|
|
IM_CONFIG_API_SECRET: ${{ secrets.IM_CONFIG_API_SECRET }}
|
|
run: |
|
|
IMAGE=im-manager:${{ steps.vars.outputs.tag }} /opt/apps/im-manager/deploy.sh
|