when: - event: push branch: master clone: git: image: woodpeckerci/plugin-git settings: attempts: 5 backoff: 10s steps: - name: test image: docker.io/library/python:3.12-slim commands: - pip install uv - >- uv pip install --system --quiet ".[api,news,sentiment,trading,backtester,meet_kevin,dev]" - python -m pytest tests/ -v --tb=short -m "not integration" - name: build-service-image image: woodpeckerci/plugin-docker-buildx depends_on: - test settings: username: viktorbarzin password: from_secret: dockerhub-token repo: viktorbarzin/trading-bot-service dockerfile: docker/Dockerfile.service context: . build_args: - SERVICE_MODULE=api_gateway cache_from: viktorbarzin/trading-bot-service:latest # Semver tags: 0.1.${CI_PIPELINE_NUMBER}. Keel policy:patch is bounded # to patch-level bumps within 0.1.x, no surprise tag rewrites to # different major/minor. :latest kept for cache + bootstrap. tags: - "0.1.${CI_PIPELINE_NUMBER}" - latest - name: build-dashboard-image image: woodpeckerci/plugin-docker-buildx depends_on: - test settings: username: viktorbarzin password: from_secret: dockerhub-token repo: viktorbarzin/trading-bot-dashboard dockerfile: docker/Dockerfile.dashboard context: . cache_from: viktorbarzin/trading-bot-dashboard:latest tags: - "0.1.${CI_PIPELINE_NUMBER}" - latest - name: update-deployment image: docker.io/library/alpine depends_on: - build-service-image - build-dashboard-image commands: - apk add --no-cache curl jq - | TOKEN=$$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) SERVICE_IMAGE="viktorbarzin/trading-bot-service:0.1.${CI_PIPELINE_NUMBER}" DASHBOARD_IMAGE="viktorbarzin/trading-bot-dashboard:0.1.${CI_PIPELINE_NUMBER}" RESTART_AT=$$(date -u +%Y-%m-%dT%H:%M:%SZ) API="https://kubernetes:6443/apis/apps/v1/namespaces/trading-bot/deployments" # --- trading-bot-frontend: 2 containers --- echo "Patching trading-bot-frontend..." curl -sf -X PATCH "$$API/trading-bot-frontend" \ -H "Authorization: Bearer $$TOKEN" \ -H "Content-Type: application/strategic-merge-patch+json" \ -k -d "{ \"spec\":{ \"paused\":null, \"template\":{ \"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/restartedAt\":\"$$RESTART_AT\"}}, \"spec\":{\"containers\":[ {\"name\":\"dashboard\",\"image\":\"$$DASHBOARD_IMAGE\"}, {\"name\":\"api-gateway\",\"image\":\"$$SERVICE_IMAGE\"} ]} } } }" | jq '{name: .metadata.name, generation: .metadata.generation}' # --- trading-bot-workers: 6 containers (matches infra/stacks/trading-bot/main.tf) --- echo "Patching trading-bot-workers..." curl -sf -X PATCH "$$API/trading-bot-workers" \ -H "Authorization: Bearer $$TOKEN" \ -H "Content-Type: application/strategic-merge-patch+json" \ -k -d "{ \"spec\":{ \"paused\":null, \"template\":{ \"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/restartedAt\":\"$$RESTART_AT\"}}, \"spec\":{\"containers\":[ {\"name\":\"signal-generator\",\"image\":\"$$SERVICE_IMAGE\"}, {\"name\":\"learning-engine\",\"image\":\"$$SERVICE_IMAGE\"}, {\"name\":\"market-data\",\"image\":\"$$SERVICE_IMAGE\"}, {\"name\":\"meet-kevin-watcher\",\"image\":\"$$SERVICE_IMAGE\"}, {\"name\":\"kevin-signal-bridge\",\"image\":\"$$SERVICE_IMAGE\"}, {\"name\":\"trade-executor\",\"image\":\"$$SERVICE_IMAGE\"} ]} } } }" | jq '{name: .metadata.name, generation: .metadata.generation}' - name: verify-deploy image: docker.io/library/alpine depends_on: - update-deployment commands: - apk add --no-cache curl jq - | TOKEN=$$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) EXPECTED_SERVICE="viktorbarzin/trading-bot-service:0.1.${CI_PIPELINE_NUMBER}" EXPECTED_DASHBOARD="viktorbarzin/trading-bot-dashboard:0.1.${CI_PIPELINE_NUMBER}" BASE_API="https://kubernetes:6443/api/v1/namespaces/trading-bot/pods" DEPLOY_API="https://kubernetes:6443/apis/apps/v1/namespaces/trading-bot/deployments" for DEPLOY in trading-bot-frontend trading-bot-workers; do echo "Verifying $$DEPLOY..." PODS_API="$$BASE_API?labelSelector=app%3D$$DEPLOY" if [ "$$DEPLOY" = "trading-bot-frontend" ]; then EXPECTED_IMAGE="$$EXPECTED_DASHBOARD" else EXPECTED_IMAGE="$$EXPECTED_SERVICE" fi DEPLOY_STATUS=$$(curl -sfk "$$DEPLOY_API/$$DEPLOY" \ -H "Authorization: Bearer $$TOKEN" \ -H "Accept: application/json") echo " Deployment status: replicas=$$(echo "$$DEPLOY_STATUS" | jq -r '.status.replicas // 0') updated=$$(echo "$$DEPLOY_STATUS" | jq -r '.status.updatedReplicas // 0') ready=$$(echo "$$DEPLOY_STATUS" | jq -r '.status.readyReplicas // 0')" FOUND=0 for i in $$(seq 1 60); do RAW=$$(curl -sfk "$$PODS_API" \ -H "Authorization: Bearer $$TOKEN" \ -H "Accept: application/json") if [ "$$i" -eq 1 ] || [ "$$i" -eq 10 ] || [ "$$i" -eq 30 ]; then echo " DEBUG (attempt $$i): All pods for $$DEPLOY:" echo "$$RAW" | jq -r '[.items[] | { name: .metadata.name, ready: ([.status.containerStatuses[]? | .ready] | all), phase: .status.phase, restarts: ([.status.containerStatuses[]? | .restartCount] | add // 0) }] | .[] | " \(.name) ready=\(.ready) phase=\(.phase) restarts=\(.restarts)"' 2>/dev/null || echo " (no pods or parse error)" fi RESULT=$$(echo "$$RAW" | \ jq --arg img "$$EXPECTED_IMAGE" '[.items[] | select( ([.status.containerStatuses[]? | .ready] | all) and (.spec.containers[]? | .image | endswith($$img)) ) | {name: .metadata.name, started: .status.startTime}]') COUNT=$$(echo "$$RESULT" | jq 'length' 2>/dev/null || echo 0) echo " Attempt $$i/60: $$COUNT pod(s) ready with image matching $$EXPECTED_IMAGE" if [ "$$COUNT" -gt 0 ] 2>/dev/null; then echo "$$RESULT" | jq -r '.[] | " \(.name) started=\(.started)"' echo "$$DEPLOY is live!" FOUND=1 break fi sleep 5 done if [ "$$FOUND" -ne 1 ]; then echo " FINAL DEBUG: All pods for $$DEPLOY:" echo "$$RAW" | jq -r '[.items[] | { name: .metadata.name, ready: ([.status.containerStatuses[]? | .ready] | all), phase: .status.phase, restarts: ([.status.containerStatuses[]? | .restartCount] | add // 0) }] | .[] | " \(.name) ready=\(.ready) phase=\(.phase) restarts=\(.restarts)"' 2>/dev/null || echo " (no pods or parse error)" echo "ERROR: No new ready pod for $$DEPLOY with image $$EXPECTED_IMAGE appeared within 5 minutes" exit 1 fi done - name: slack image: plugins/slack depends_on: - verify-deploy settings: webhook: from_secret: slack-webhook-url channel: general when: - status: [success, failure]