5195d32568
All checks were successful
Build and Deploy DevOpsDash / build-image (push) Successful in 30s
- Add service_name and image_tag variables to nomad job
- Use ${var.image_tag} in image ref instead of hardcoded 'latest'
- CI now passes git SHA as -var='image_tag=<sha>' to nomad job run
- Align Traefik tags with DevOpsMCP pattern (service_name var, rate limiting)
- Add canary update strategy and reschedule block
- Move service block to group level (nomad best practice)
141 lines
3.2 KiB
HCL
141 lines
3.2 KiB
HCL
variable "service_name" {
|
|
description = "Service name for consistent naming"
|
|
type = string
|
|
default = "devops-dash"
|
|
}
|
|
|
|
variable "image_tag" {
|
|
description = "Docker image tag to deploy"
|
|
type = string
|
|
default = "latest"
|
|
}
|
|
|
|
job "devops-dash" {
|
|
datacenters = ["dc1"]
|
|
type = "service"
|
|
|
|
meta {
|
|
uuid = uuidv4()
|
|
service_name = var.service_name
|
|
}
|
|
|
|
update {
|
|
stagger = "30s"
|
|
max_parallel = 1
|
|
auto_revert = true
|
|
progress_deadline = "15m"
|
|
}
|
|
|
|
group "devops-dash" {
|
|
count = 1
|
|
|
|
constraint {
|
|
attribute = "${node.unique.name}"
|
|
value = "autobox.i80.dk"
|
|
}
|
|
|
|
update {
|
|
canary = 1
|
|
auto_promote = true
|
|
min_healthy_time = "15s"
|
|
healthy_deadline = "10m"
|
|
progress_deadline = "15m"
|
|
auto_revert = true
|
|
}
|
|
|
|
network {
|
|
port "http" {}
|
|
}
|
|
|
|
reschedule {
|
|
attempts = 5
|
|
interval = "10m"
|
|
delay = "30s"
|
|
delay_function = "exponential"
|
|
max_delay = "120s"
|
|
unlimited = false
|
|
}
|
|
|
|
# host volume disabled until autobox is configured.
|
|
# To enable: add to /etc/nomad.d/client.hcl on autobox:
|
|
# host_volume "devops-mcp-data" {
|
|
# path = "/opt/devops-mcp/data"
|
|
# read_only = false
|
|
# }
|
|
# Then: mkdir -p /opt/devops-mcp/data && systemctl restart nomad
|
|
#
|
|
# volume "devops-mcp-data" {
|
|
# type = "host"
|
|
# read_only = true
|
|
# source = "devops-mcp-data"
|
|
# }
|
|
|
|
service {
|
|
provider = "consul"
|
|
name = var.service_name
|
|
port = "http"
|
|
|
|
tags = [
|
|
"traefik.enable=true",
|
|
"traefik.http.routers.${var.service_name}.rule=Host(`dash.i80.dk`)",
|
|
"traefik.http.routers.${var.service_name}.tls=true",
|
|
"traefik.http.middlewares.${var.service_name}-limit.ratelimit.burst=20",
|
|
"traefik.http.middlewares.${var.service_name}-limit.ratelimit.period=1m",
|
|
"traefik.http.routers.${var.service_name}.middlewares=${var.service_name}-limit"
|
|
]
|
|
|
|
check {
|
|
name = "http_health_check"
|
|
type = "http"
|
|
port = "http"
|
|
path = "/health"
|
|
interval = "10s"
|
|
timeout = "5s"
|
|
}
|
|
}
|
|
|
|
task "devops-dash" {
|
|
driver = "docker"
|
|
|
|
# volume_mount {
|
|
# volume = "devops-mcp-data"
|
|
# destination = "/data"
|
|
# read_only = true
|
|
# }
|
|
|
|
config {
|
|
image = "registry.i80.dk/gitea/devops-dash:${var.image_tag}"
|
|
ports = ["http"]
|
|
force_pull = true
|
|
|
|
auth {
|
|
username = "robot$gitserver"
|
|
password = "${HARBOR_ROBOT_TOKEN}"
|
|
}
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
HARBOR_ROBOT_TOKEN="{{ key "harbor/robot/token" }}"
|
|
EOH
|
|
destination = "secrets/registry.env"
|
|
env = true
|
|
}
|
|
|
|
env {
|
|
PORT = "${NOMAD_PORT_http}"
|
|
HOST = "0.0.0.0"
|
|
REDIS_URL = "redis://192.168.15.124:6379"
|
|
DEVOPS_MCP_URL = "https://devops-mcp.i80.dk"
|
|
DATA_DIR = "/data"
|
|
PYTHONUNBUFFERED = "1"
|
|
}
|
|
|
|
resources {
|
|
cpu = 200
|
|
memory = 256
|
|
}
|
|
}
|
|
}
|
|
}
|