워크플로우

secrets:
  - DATABASE_URL                  # 문자열 형태는 required: true가 적용돼요
  - name: DEPLOY_KEY
    required: true
    scope: [deploy]               # id가 deploy인 step에만 주입돼요
  - name: SLACK_WEBHOOK
    required: false

steps:
  - id: build
    name: 빌드
    run: |
      echo "commit=$(git rev-parse HEAD)" >> "$DEPLITE_OUTPUT"
      echo "size=42" >> "$DEPLITE_OUTPUT"
 
outputs:
  - name: commit
    type: string
    from: build.commit
  - name: size
    type: number
    from: build.size

- name: report
  run: |
    cat > "$DEPLITE_OUTPUT_DIR/result.json" <<'JSON'
    {"deployedRef":"main-7f3a9b","url":"https://app.example.com"}
    JSON

- name: build-and-attach
  run: |
    ./build.sh > "$DEPLITE_OUTPUT_DIR/app.apk"
    cat > "$DEPLITE_OUTPUT_DIR/result.json" <<'JSON'
    {"version":"1.4.0","artifact":{"$file":"app.apk"}}
    JSON

{ "artifact": { "$file": "report.tar.gz" } }                 // 치환됨
{ "artifact": { "$file": "report.tar.gz", "note": "x" } }    // 치환 안 됨

{
  "__type": "FileRef",
  "id": "9f1c…",
  "filename": "report.tar.gz",
  "contentType": "application/octet-stream",
  "size": 20481
}

name: backup-pg
timeout-minutes: 60
secrets:
  - PGPASSWORD
  - AWS_SECRET_ACCESS_KEY
env:
  PGHOST: db.internal
  PGPORT: "5432"
  PGUSER: backup
  PGDATABASE: prod
steps:
  - name: connectivity-check
    run: psql -c "SELECT 1" > /dev/null
    env:
      PGPASSWORD: $DEPLITE_SECRET_PGPASSWORD
    timeout-minutes: 1
  - name: dump
    run: pg_dump --no-owner --clean | gzip > /tmp/backup.sql.gz
    env:
      PGPASSWORD: $DEPLITE_SECRET_PGPASSWORD
    timeout-minutes: 30
  - name: upload
    run: |
      aws s3 cp /tmp/backup.sql.gz \
        s3://backups/pg/$(date +%F).sql.gz
    timeout-minutes: 15
  - name: cleanup
    run: rm -f /tmp/backup.sql.gz
    continue-on-error: true

name: deploy-myapp
timeout-minutes: 25
env:
  IMAGE: registry.example.com/myapp
secrets:
  - REGISTRY_PASSWORD
steps:
  - name: build
    run: docker build -t "$IMAGE:$DEPLITE_PARAM_REF" .
    timeout-minutes: 12
  - name: push
    run: |
      echo "$DEPLITE_SECRET_REGISTRY_PASSWORD" | docker login -u deploy --password-stdin registry.example.com
      docker push "$IMAGE:$DEPLITE_PARAM_REF"
    timeout-minutes: 8
  - name: rollout
    run: |
      kubectl set image deployment/myapp myapp="$IMAGE:$DEPLITE_PARAM_REF"
      kubectl rollout status deployment/myapp --timeout=5m
    timeout-minutes: 6
  - id: report
    name: report
    run: |
      DEP_URL=$(kubectl get ingress myapp -o jsonpath='{.spec.rules[0].host}')
      echo "deployedRef=$DEPLITE_PARAM_REF" >> "$DEPLITE_OUTPUT"
      echo "url=https://$DEP_URL" >> "$DEPLITE_OUTPUT"
outputs:
  - name: deployedRef
    type: string
    from: report.deployedRef
  - name: url
    type: string
    from: report.url

name: etl-orders
timeout-minutes: 45
secrets:
  - SHOPIFY_TOKEN
  - SNOWFLAKE_PWD
env:
  WINDOW_HOURS: "24"
steps:
  - name: extract
    run: |
      curl -H "X-Shopify-Access-Token: $DEPLITE_SECRET_SHOPIFY_TOKEN" \
        "https://store.myshopify.com/admin/api/2024-01/orders.json?updated_at_min=$(date -d '24 hours ago' -Iseconds)" \
        > /tmp/orders.json
    timeout-minutes: 15
  - name: transform
    run: python3 /opt/etl/transform.py /tmp/orders.json /tmp/orders.parquet
    timeout-minutes: 10
  - name: load
    run: python3 /opt/etl/load_snowflake.py /tmp/orders.parquet
    env:
      SNOWFLAKE_USER: deplite
      SNOWFLAKE_ACCOUNT: ab12345.us-east-1
    timeout-minutes: 20

name: healthcheck
timeout-minutes: 5
steps:
  - name: probe
    run: |
      if ! curl -fsS https://app.example.com/health > /dev/null; then
        echo "UNHEALTHY"
        exit 1
      fi
      echo "OK"
  - name: restart-if-failed
    run: kubectl rollout restart deployment/myapp
    continue-on-error: true

name: spin-up-debug
timeout-minutes: 15
steps:
  - id: launch
    name: launch
    verbose: true
    run: |
      ID=$(docker run -d --rm -p 0:3000 myapp:debug)
      HOST_PORT=$(docker port "$ID" 3000 | awk -F: '{print $2}')
      echo "containerId=$ID" >> "$DEPLITE_OUTPUT"
      echo "url=http://debug.internal:$HOST_PORT" >> "$DEPLITE_OUTPUT"
outputs:
  - name: containerId
    type: string
    from: launch.containerId
  - name: url
    type: string
    from: launch.url