name: Build and Deploy iObj on: push: branches: - main workflow_dispatch: env: SERVICE_NAME: iobj jobs: build-image: runs-on: debian-host env: PATH: /usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/bin:/snap/bin DOCKER_HOST: unix:///var/run/docker.sock steps: - name: Checkout code uses: actions/checkout@v4 - name: System info run: | uname -a whoami - name: Log in to Docker Registry run: | echo "${{ secrets.HARBOR_ROBOT_TOKEN }}" | docker login registry.i80.dk -u "robot\$gitserver" --password-stdin - name: Build Docker image run: | SHA=$(git rev-parse --short HEAD) docker build \ -t registry.i80.dk/gitea/iobj:latest \ -t registry.i80.dk/gitea/iobj:$SHA . - name: Push Docker image run: | SHA=$(git rev-parse --short HEAD) docker push registry.i80.dk/gitea/iobj:latest docker push registry.i80.dk/gitea/iobj:$SHA env: PATH: /usr/bin:/usr/local/bin:/bin:/sbin:/usr/sbin - name: Deploy to Nomad run: | SHA=$(git rev-parse --short HEAD) nomad job validate -var="image_tag=$SHA" ${SERVICE_NAME}.nomad # Rolling deploy: canary replaces the existing job, keeping old alloc alive # until the new one passes its health check (zero-downtime) nomad job run -var="image_tag=$SHA" ${SERVICE_NAME}.nomad env: NOMAD_ADDR: "https://nomad.i80.dk:4646" - name: Wait for deployment run: | echo "Checking deployment status..." nomad job status ${SERVICE_NAME} echo "=== Allocation Details ===" nomad job allocs ${SERVICE_NAME} echo "=== Getting logs from allocations ===" for alloc in $(nomad job allocs ${SERVICE_NAME} -short | tail -n +2 | awk '{print $1}'); do echo "Logs for allocation $alloc:" nomad alloc logs $alloc || echo "No logs available for $alloc" done env: NOMAD_ADDR: "https://nomad.i80.dk:4646" - name: Notify deployment status run: | echo "Deployment completed!" echo "iObj service should be available at: https://${SERVICE_NAME}.i80.dk" echo "Health check endpoint: https://${SERVICE_NAME}.i80.dk/health"