Add permission checks to p.prefix command

2025-08-20 02:29:40 -03:00
parent 3cc37cfc0c
commit ee49b0a984
23 changed files with 296 additions and 766 deletions
@@ -0,0 +1,130 @@
+- name: Build and Push Payphone
+  hosts: localhost
+  gather_facts: false
+  tasks:
+    - name: Bump Version
+      ansible.builtin.shell: >
+        cargo set-version --bump patch
+      changed_when: false
+
+    - name: Get Cargo Project Metadata
+      ansible.builtin.command: cargo metadata --no-deps --format-version 1
+      register: cargo_metadata
+      changed_when: false
+
+    - name: Parse version
+      ansible.builtin.set_fact:
+        app_version: "v{{ (cargo_metadata.stdout | from_json).packages[0].version }}"
+
+    - name: Build and Push the Docker image
+      community.docker.docker_image:
+        source: build
+        build:
+          path: "{{ playbook_dir }}/../"
+        name: registry.nyeki.dev/payphone/payphone
+        tag: "{{ app_version }}"
+        push: true
+
+- name: Deploy Payphone
+  hosts: init
+  become: true
+  gather_facts: false
+  vars_files:
+    - 00-vault.yml
+  tasks:
+    - name: Create Payphone Namespace
+      kubernetes.core.k8s:
+        state: present
+        definition:
+          apiVersion: v1
+          kind: Namespace
+          metadata:
+            name: payphone
+        kubeconfig: /etc/rancher/k3s/k3s.yaml
+
+    - name: Create Bot Token Secret
+      kubernetes.core.k8s:
+        state: present
+        namespace: payphone
+        definition:
+          apiVersion: v1
+          kind: Secret
+          metadata:
+            name: payphone-secrets
+          type: Opaque
+          stringData:
+            PAYPHONE_TOKEN: "{{ bot_token }}"
+        kubeconfig: /etc/rancher/k3s/k3s.yaml
+
+    - name: Set Git credentials
+      ansible.builtin.shell: >
+        kubectl create secret docker-registry payphone-git-credentials \
+        --docker-server=registry.nyeki.dev \
+        --docker-username={{ gitlab_username }} \
+        --docker-password={{ gitlab_pat }} \
+        --docker-email={{ gitlab_email }} \
+        -n payphone \
+        --dry-run=client -o yaml | kubectl apply -f -
+
+    - name: Apply Payphone Deployment
+      kubernetes.core.k8s:
+        state: present
+        namespace: payphone
+        definition:
+          apiVersion: apps/v1
+          kind: StatefulSet
+          metadata:
+            name: payphone
+            labels:
+              app: payphone
+          spec:
+            serviceName: payphone
+            replicas: "{{ bot_shards }}"
+            selector:
+              matchLabels:
+                app: payphone
+            template:
+              metadata:
+                labels:
+                  app: payphone
+              spec:
+                containers:
+                  - name: payphone
+                    image: registry.nyeki.dev/payphone/payphone:{{ hostvars['localhost'].app_version }}
+                    imagePullPolicy: "Always"
+                    args: [
+                      "start",
+                      "--shard",
+                      "$(SHARD_ID):$(SHARD_COUNT)",
+                      "--database-addr",
+                      "scylladb-client.scylla",
+                      "--database-username",
+                      "cassandra",
+                      "--database-password",
+                      "cassandra"
+                    ]
+                    envFrom:
+                      - secretRef:
+                          name: payphone-secrets
+                    env:
+                      - name: SHARD_ID
+                        valueFrom:
+                          fieldRef:
+                            fieldPath: metadata.labels['apps.kubernetes.io/pod-index']
+                      - name: SHARD_COUNT
+                        value: "{{ bot_shards | string }}"
+                    resources:
+                      limits:
+                        cpu: "1000m"
+                        memory: "1Gi"
+                      requests:
+                        cpu: "250m"
+                        memory: "100Mi"
+                imagePullSecrets:
+                  - name: payphone-git-credentials
+        kubeconfig: /etc/rancher/k3s/k3s.yaml
+
+    - name: Rollout New Version
+      ansible.builtin.command:
+        kubectl set image -n payphone sts/payphone payphone=registry.nyeki.dev/payphone/payphone:{{ hostvars['localhost'].app_version }}
+      changed_when: false