Initial commit: contents-api-agent with 1 tools - .gitea/workflows/ci-cd.yaml
CI-CD-AKS-Agent / build_and_deploy (push) Has been cancelled
CI-CD-AKS-Agent / build_and_deploy (push) Has been cancelled
This commit is contained in:
@@ -0,0 +1,222 @@
|
||||
name: CI-CD-AKS-Agent
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: ["main"]
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
build_and_deploy:
|
||||
runs-on: self-hosted
|
||||
|
||||
env:
|
||||
ACR_LOGIN_SERVER: ${{ secrets.ACR_LOGIN_SERVER }}
|
||||
ACR_USERNAME: ${{ secrets.ACR_USERNAME }}
|
||||
ACR_PASSWORD: ${{ secrets.ACR_PASSWORD }}
|
||||
AZ_CLIENT_ID: ${{ secrets.AZ_CLIENT_ID }}
|
||||
AZ_CLIENT_SECRET: ${{ secrets.AZ_CLIENT_SECRET }}
|
||||
AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
|
||||
AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
|
||||
AZ_RG: ${{ secrets.AZ_RG }}
|
||||
AZ_AKS: ${{ secrets.AZ_AKS }}
|
||||
AZURE_DNS_ZONE: ${{ secrets.AZURE_DNS_ZONE }}
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install Azure CLI
|
||||
run: |
|
||||
if ! command -v az &> /dev/null; then
|
||||
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
|
||||
fi
|
||||
|
||||
- name: Install kubectl
|
||||
run: |
|
||||
if ! command -v kubectl &> /dev/null; then
|
||||
ARCH=$(uname -m)
|
||||
case $ARCH in
|
||||
x86_64) ARCH="amd64" ;;
|
||||
aarch64|arm64) ARCH="arm64" ;;
|
||||
esac
|
||||
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/${ARCH}/kubectl"
|
||||
sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
|
||||
rm kubectl
|
||||
fi
|
||||
|
||||
- name: Build Docker image (ARM64)
|
||||
run: |
|
||||
docker build -t $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:${{ github.sha }} .
|
||||
docker tag $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:${{ github.sha }} $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:latest
|
||||
|
||||
- name: Login to ACR
|
||||
run: |
|
||||
echo "$ACR_PASSWORD" | docker login $ACR_LOGIN_SERVER -u "$ACR_USERNAME" --password-stdin
|
||||
|
||||
- name: Push Docker image
|
||||
run: |
|
||||
docker push $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:${{ github.sha }}
|
||||
docker push $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:latest
|
||||
|
||||
echo "✅ 镜像已推送: $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:latest"
|
||||
|
||||
- name: Login Azure
|
||||
run: |
|
||||
az login --service-principal \
|
||||
-u "$AZ_CLIENT_ID" \
|
||||
-p "$AZ_CLIENT_SECRET" \
|
||||
--tenant "$AZ_TENANT_ID"
|
||||
az account set --subscription "$AZ_SUBSCRIPTION_ID"
|
||||
|
||||
- name: Get AKS Credentials
|
||||
run: |
|
||||
az aks get-credentials \
|
||||
--resource-group "$AZ_RG" \
|
||||
--name "$AZ_AKS" \
|
||||
--overwrite-existing
|
||||
|
||||
- name: Setup ACR Pull Secret
|
||||
run: |
|
||||
# 创建 Agent 专用命名空间
|
||||
kubectl create namespace agent-contents-api-agent --dry-run=client -o yaml | kubectl apply -f -
|
||||
|
||||
# 创建或更新 ACR 拉取 Secret
|
||||
kubectl create secret docker-registry acr-secret \
|
||||
--docker-server=$ACR_LOGIN_SERVER \
|
||||
--docker-username=$ACR_USERNAME \
|
||||
--docker-password=$ACR_PASSWORD \
|
||||
-n agent-contents-api-agent --dry-run=client -o yaml | kubectl apply -f -
|
||||
|
||||
- name: Deploy to AKS
|
||||
run: |
|
||||
# 删除旧的 deployment（如果存在）
|
||||
kubectl delete deployment contents-api-agent -n agent-contents-api-agent --ignore-not-found=true
|
||||
|
||||
# 创建 deployment YAML
|
||||
cat <<EOF | kubectl apply -f -
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: contents-api-agent
|
||||
namespace: agent-contents-api-agent
|
||||
labels:
|
||||
app: contents-api-agent
|
||||
managed-by: gitea-cicd
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app: contents-api-agent
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: contents-api-agent
|
||||
spec:
|
||||
imagePullSecrets:
|
||||
- name: acr-secret
|
||||
nodeSelector:
|
||||
kubernetes.io/arch: arm64
|
||||
tolerations:
|
||||
- key: "kubernetes.io/arch"
|
||||
operator: "Equal"
|
||||
value: "arm64"
|
||||
effect: "NoSchedule"
|
||||
containers:
|
||||
- name: contents-api-agent
|
||||
image: $ACR_LOGIN_SERVER/ai-agents/contents-api-agent:${{ github.sha }}
|
||||
ports:
|
||||
- containerPort: 8000
|
||||
env:
|
||||
- name: OPENAI_BASE_URL
|
||||
value: "https://litellm.graystone-fb459c5d.southeastasia.azurecontainerapps.io/v1"
|
||||
- name: MODEL_NAME
|
||||
value: "taiji/gpt-4o-mini"
|
||||
resources:
|
||||
requests:
|
||||
cpu: "100m"
|
||||
memory: "128Mi"
|
||||
limits:
|
||||
cpu: "500m"
|
||||
memory: "512Mi"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8000
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 8000
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 10
|
||||
EOF
|
||||
|
||||
# 创建 Service
|
||||
cat <<EOF | kubectl apply -f -
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: contents-api-agent-service
|
||||
namespace: agent-contents-api-agent
|
||||
spec:
|
||||
type: LoadBalancer
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 8000
|
||||
selector:
|
||||
app: contents-api-agent
|
||||
EOF
|
||||
|
||||
- name: Wait for Deployment
|
||||
run: |
|
||||
kubectl rollout status deployment/contents-api-agent -n agent-contents-api-agent --timeout=180s || {
|
||||
echo "=== Deployment 状态 ==="
|
||||
kubectl get deployment contents-api-agent -n agent-contents-api-agent -o wide
|
||||
echo "=== Pod 状态 ==="
|
||||
kubectl get pods -l app=contents-api-agent -n agent-contents-api-agent -o wide
|
||||
echo "=== Pod 事件 ==="
|
||||
kubectl describe pods -l app=contents-api-agent -n agent-contents-api-agent | tail -30
|
||||
exit 1
|
||||
}
|
||||
|
||||
echo "=== 部署成功 ==="
|
||||
kubectl get svc contents-api-agent-service -n agent-contents-api-agent
|
||||
|
||||
# 等待 LoadBalancer IP
|
||||
echo "等待 LoadBalancer IP..."
|
||||
for i in {1..30}; do
|
||||
EXTERNAL_IP=$(kubectl get svc contents-api-agent-service -n agent-contents-api-agent -o jsonpath='{.status.loadBalancer.ingress[0].ip}' 2>/dev/null)
|
||||
if [ -n "$EXTERNAL_IP" ]; then
|
||||
echo "✅ Agent LoadBalancer IP: $EXTERNAL_IP"
|
||||
echo "EXTERNAL_IP=$EXTERNAL_IP" >> $GITHUB_ENV
|
||||
break
|
||||
fi
|
||||
sleep 10
|
||||
done
|
||||
|
||||
- name: Create DNS Record
|
||||
if: env.EXTERNAL_IP != ''
|
||||
run: |
|
||||
echo "创建 DNS 记录: contents-api-agent.$AZURE_DNS_ZONE -> $EXTERNAL_IP"
|
||||
|
||||
# 获取 Azure 访问令牌
|
||||
ACCESS_TOKEN=$(az account get-access-token --query accessToken -o tsv)
|
||||
|
||||
# 创建 DNS A 记录
|
||||
DNS_URL="https://management.azure.com/subscriptions/$AZ_SUBSCRIPTION_ID/resourceGroups/$AZ_RG/providers/Microsoft.Network/dnsZones/$AZURE_DNS_ZONE/A/contents-api-agent?api-version=2018-05-01"
|
||||
|
||||
curl -X PUT "$DNS_URL" \
|
||||
-H "Authorization: Bearer $ACCESS_TOKEN" \
|
||||
-H "Content-Type: application/json" \
|
||||
-d '{
|
||||
"properties": {
|
||||
"TTL": 300,
|
||||
"ARecords": [{"ipv4Address": "'"$EXTERNAL_IP"'"}]
|
||||
}
|
||||
}'
|
||||
|
||||
echo ""
|
||||
echo "✅ DNS 记录创建成功!"
|
||||
echo "🌐 Agent 访问地址: http://contents-api-agent.$AZURE_DNS_ZONE"
|
||||
echo "🌐 Agent IP 地址: http://$EXTERNAL_IP"
|
||||
|
||||
Reference in New Issue
Block a user