225 lines
8.4 KiB
YAML
225 lines
8.4 KiB
YAML
when:
|
|
- event: push
|
|
branch: master
|
|
|
|
clone:
|
|
git:
|
|
image: woodpeckerci/plugin-git
|
|
settings:
|
|
attempts: 5
|
|
backoff: 10s
|
|
|
|
steps:
|
|
- name: test
|
|
image: python:3.12-slim
|
|
commands:
|
|
- python -m venv .venv
|
|
- .venv/bin/pip install --quiet --upgrade pip
|
|
- >-
|
|
.venv/bin/pip install --quiet ".[api,news,sentiment,trading,backtester,dev]"
|
|
- .venv/bin/pytest tests/ -v --tb=short -m "not integration"
|
|
|
|
- name: build-service-image
|
|
image: plugins/docker
|
|
depends_on:
|
|
- test
|
|
environment:
|
|
DOCKER_BUILDKIT: 1
|
|
settings:
|
|
username: viktorbarzin
|
|
password:
|
|
from_secret: dockerhub-token
|
|
repo: viktorbarzin/trading-bot-service
|
|
dockerfile: docker/Dockerfile.service
|
|
context: .
|
|
build_args:
|
|
- EXTRAS=api,news,sentiment,trading,backtester
|
|
- SERVICE_MODULE=api_gateway
|
|
cache_from:
|
|
- viktorbarzin/trading-bot-service:latest
|
|
tags:
|
|
- "build-${CI_PIPELINE_NUMBER}"
|
|
|
|
- name: build-dashboard-image
|
|
image: plugins/docker
|
|
depends_on:
|
|
- test
|
|
environment:
|
|
DOCKER_BUILDKIT: 1
|
|
settings:
|
|
username: viktorbarzin
|
|
password:
|
|
from_secret: dockerhub-token
|
|
repo: viktorbarzin/trading-bot-dashboard
|
|
dockerfile: docker/Dockerfile.dashboard
|
|
context: .
|
|
build_args:
|
|
- NGINX_CONF=docker/nginx-k8s.conf
|
|
cache_from:
|
|
- viktorbarzin/trading-bot-dashboard:latest
|
|
tags:
|
|
- "build-${CI_PIPELINE_NUMBER}"
|
|
|
|
- name: publish-images
|
|
image: alpine
|
|
depends_on:
|
|
- build-service-image
|
|
- build-dashboard-image
|
|
environment:
|
|
DOCKERHUB_TOKEN:
|
|
from_secret: dockerhub-token
|
|
commands:
|
|
- apk add --no-cache skopeo
|
|
- |
|
|
for REPO in trading-bot-service trading-bot-dashboard; do
|
|
skopeo copy \
|
|
--src-creds "viktorbarzin:$DOCKERHUB_TOKEN" \
|
|
--dest-creds "viktorbarzin:$DOCKERHUB_TOKEN" \
|
|
"docker://docker.io/viktorbarzin/${REPO}:build-${CI_PIPELINE_NUMBER}" \
|
|
"docker://docker.io/viktorbarzin/${REPO}:${CI_PIPELINE_NUMBER}"
|
|
skopeo copy \
|
|
--src-creds "viktorbarzin:$DOCKERHUB_TOKEN" \
|
|
--dest-creds "viktorbarzin:$DOCKERHUB_TOKEN" \
|
|
"docker://docker.io/viktorbarzin/${REPO}:build-${CI_PIPELINE_NUMBER}" \
|
|
"docker://docker.io/viktorbarzin/${REPO}:latest"
|
|
done
|
|
|
|
- name: update-deployment
|
|
image: alpine
|
|
depends_on:
|
|
- publish-images
|
|
commands:
|
|
- apk add --no-cache curl jq
|
|
- |
|
|
TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
|
SERVICE_IMAGE="viktorbarzin/trading-bot-service:${CI_PIPELINE_NUMBER}"
|
|
DASHBOARD_IMAGE="viktorbarzin/trading-bot-dashboard:${CI_PIPELINE_NUMBER}"
|
|
RESTART_AT=$(date -u +%Y-%m-%dT%H:%M:%SZ)
|
|
API="https://kubernetes:6443/apis/apps/v1/namespaces/trading-bot/deployments"
|
|
|
|
# --- trading-bot-frontend: 2 containers ---
|
|
echo "Patching trading-bot-frontend..."
|
|
curl -sf -X PATCH "$API/trading-bot-frontend" \
|
|
-H "Authorization: Bearer $TOKEN" \
|
|
-H "Content-Type: application/strategic-merge-patch+json" \
|
|
-k -d "{
|
|
\"spec\":{
|
|
\"paused\":null,
|
|
\"template\":{
|
|
\"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/restartedAt\":\"$RESTART_AT\"}},
|
|
\"spec\":{\"containers\":[
|
|
{\"name\":\"dashboard\",\"image\":\"$DASHBOARD_IMAGE\"},
|
|
{\"name\":\"api-gateway\",\"image\":\"$SERVICE_IMAGE\"}
|
|
]}
|
|
}
|
|
}
|
|
}" | jq '{name: .metadata.name, generation: .metadata.generation}'
|
|
|
|
# --- trading-bot-workers: 6 containers ---
|
|
echo "Patching trading-bot-workers..."
|
|
curl -sf -X PATCH "$API/trading-bot-workers" \
|
|
-H "Authorization: Bearer $TOKEN" \
|
|
-H "Content-Type: application/strategic-merge-patch+json" \
|
|
-k -d "{
|
|
\"spec\":{
|
|
\"paused\":null,
|
|
\"template\":{
|
|
\"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/restartedAt\":\"$RESTART_AT\"}},
|
|
\"spec\":{\"containers\":[
|
|
{\"name\":\"news-fetcher\",\"image\":\"$SERVICE_IMAGE\"},
|
|
{\"name\":\"sentiment-analyzer\",\"image\":\"$SERVICE_IMAGE\"},
|
|
{\"name\":\"signal-generator\",\"image\":\"$SERVICE_IMAGE\"},
|
|
{\"name\":\"trade-executor\",\"image\":\"$SERVICE_IMAGE\"},
|
|
{\"name\":\"learning-engine\",\"image\":\"$SERVICE_IMAGE\"},
|
|
{\"name\":\"market-data\",\"image\":\"$SERVICE_IMAGE\"}
|
|
]}
|
|
}
|
|
}
|
|
}" | jq '{name: .metadata.name, generation: .metadata.generation}'
|
|
|
|
- name: verify-deploy
|
|
image: alpine
|
|
depends_on:
|
|
- update-deployment
|
|
commands:
|
|
- apk add --no-cache curl jq
|
|
- |
|
|
TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
|
|
EXPECTED_SERVICE="viktorbarzin/trading-bot-service:${CI_PIPELINE_NUMBER}"
|
|
EXPECTED_DASHBOARD="viktorbarzin/trading-bot-dashboard:${CI_PIPELINE_NUMBER}"
|
|
BASE_API="https://kubernetes:6443/api/v1/namespaces/trading-bot/pods"
|
|
DEPLOY_API="https://kubernetes:6443/apis/apps/v1/namespaces/trading-bot/deployments"
|
|
|
|
for DEPLOY in trading-bot-frontend trading-bot-workers; do
|
|
echo "Verifying $DEPLOY..."
|
|
PODS_API="$BASE_API?labelSelector=app%3D$DEPLOY"
|
|
|
|
if [ "$DEPLOY" = "trading-bot-frontend" ]; then
|
|
EXPECTED_IMAGE="$EXPECTED_DASHBOARD"
|
|
else
|
|
EXPECTED_IMAGE="$EXPECTED_SERVICE"
|
|
fi
|
|
|
|
DEPLOY_STATUS=$(curl -sfk "$DEPLOY_API/$DEPLOY" \
|
|
-H "Authorization: Bearer $TOKEN" \
|
|
-H "Accept: application/json")
|
|
echo " Deployment status: replicas=$(echo "$DEPLOY_STATUS" | jq -r '.status.replicas // 0') updated=$(echo "$DEPLOY_STATUS" | jq -r '.status.updatedReplicas // 0') ready=$(echo "$DEPLOY_STATUS" | jq -r '.status.readyReplicas // 0')"
|
|
|
|
FOUND=0
|
|
for i in $(seq 1 60); do
|
|
RAW=$(curl -sfk "$PODS_API" \
|
|
-H "Authorization: Bearer $TOKEN" \
|
|
-H "Accept: application/json")
|
|
|
|
if [ "$i" -eq 1 ] || [ "$i" -eq 10 ] || [ "$i" -eq 30 ]; then
|
|
echo " DEBUG (attempt $i): All pods for $DEPLOY:"
|
|
echo "$RAW" | jq -r '[.items[] | {
|
|
name: .metadata.name,
|
|
ready: ([.status.containerStatuses[]? | .ready] | all),
|
|
phase: .status.phase,
|
|
restarts: ([.status.containerStatuses[]? | .restartCount] | add // 0)
|
|
}] | .[] | " \(.name) ready=\(.ready) phase=\(.phase) restarts=\(.restarts)"' 2>/dev/null || echo " (no pods or parse error)"
|
|
fi
|
|
|
|
RESULT=$(echo "$RAW" | \
|
|
jq --arg img "$EXPECTED_IMAGE" '[.items[] | select(
|
|
([.status.containerStatuses[]? | .ready] | all) and
|
|
(.spec.containers[]? | .image | endswith($img))
|
|
) | {name: .metadata.name, started: .status.startTime}]')
|
|
|
|
COUNT=$(echo "$RESULT" | jq 'length' 2>/dev/null || echo 0)
|
|
echo " Attempt $i/60: $COUNT pod(s) ready with image matching $EXPECTED_IMAGE"
|
|
|
|
if [ "$COUNT" -gt 0 ] 2>/dev/null; then
|
|
echo "$RESULT" | jq -r '.[] | " \(.name) started=\(.started)"'
|
|
echo "$DEPLOY is live!"
|
|
FOUND=1
|
|
break
|
|
fi
|
|
|
|
sleep 5
|
|
done
|
|
|
|
if [ "$FOUND" -ne 1 ]; then
|
|
echo " FINAL DEBUG: All pods for $DEPLOY:"
|
|
echo "$RAW" | jq -r '[.items[] | {
|
|
name: .metadata.name,
|
|
ready: ([.status.containerStatuses[]? | .ready] | all),
|
|
phase: .status.phase,
|
|
restarts: ([.status.containerStatuses[]? | .restartCount] | add // 0)
|
|
}] | .[] | " \(.name) ready=\(.ready) phase=\(.phase) restarts=\(.restarts)"' 2>/dev/null || echo " (no pods or parse error)"
|
|
echo "ERROR: No new ready pod for $DEPLOY with image $EXPECTED_IMAGE appeared within 5 minutes"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
- name: slack
|
|
image: woodpeckerci/plugin-slack
|
|
depends_on:
|
|
- verify-deploy
|
|
settings:
|
|
webhook:
|
|
from_secret: slack-webhook-url
|
|
channel: general
|
|
when:
|
|
- status: [success, failure]
|