FirstPhone

2025-12-04 15:41:22 +07:00
commit da64947bae
31 changed files with 1776 additions and 0 deletions
--- a/.gitea/workflows/analystic-dispatch.yaml
+++ b/.gitea/workflows/analystic-dispatch.yaml
@@ -0,0 +1,30 @@
+name: "K8S Fission Code Analystics"
+on:
+  workflow_dispatch:
+jobs:
+  sonarqube:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - name: 🔍 SonarQube Scan
+      id: scan
+      uses: sonarsource/sonarqube-scan-action@master
+      env:
+        SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+      with:
+        args: >
+          -Dsonar.projectKey=${{ github.event.repository.name }} -Dsonar.sources=.
+    - name: 🔔 Send notification
+      uses: appleboy/telegram-action@master
+      if: always()
+      with:
+        to: ${{ secrets.TELEGRAM_TO }}
+        token: ${{ secrets.TELEGRAM_TOKEN }}
+        format: markdown
+        socks5: ${{ secrets.TELEGRAM_PROXY_URL != '' && secrets.TELEGRAM_PROXY_URL || '' }}
+        message: |
+          ${{ steps.scan.outcome == 'success' && '🟢 (=^ ◡ ^=)' || '🔴 (｡•́︿•̀｡)' }} Scanned ${{ github.event.repository.name }}
+          *Msg*: `${{ github.event.commits[0].message }}`
--- a/.gitea/workflows/dev-deployment.yaml
+++ b/.gitea/workflows/dev-deployment.yaml
@@ -0,0 +1,69 @@
+name: "K8S Fission Deployment"
+on:
+  push:
+    branches: [ 'main' ]
+jobs:
+  deployment-fission:
+    name: Deployment fission functions
+    runs-on: ubuntu-latest
+    env:
+      RUNNER_TOOL_CACHE: /toolcache
+      FISSION_PROFILE: DEV
+      FISSION_VER: 1.21.0
+      RAKE_VER: 0.1.3
+    steps:
+    - name: ☸️ Setup kubectl
+      uses: azure/setup-kubectl@v4
+    - name: 🔄 Cache
+      id: cache
+      uses: actions/cache@v4
+      with:
+        path: |
+          /usr/local/bin/rake
+          /usr/local/bin/fission
+        key: ${{ runner.os }}-${{ github.event.repository.name }}-${{ hashFiles('.fission/deployment.json') }}
+    - name: ☘️ Configure Kubeconfig
+      uses: azure/k8s-set-context@v4
+      with:
+        method: kubeconfig
+        kubeconfig: ${{ secrets[format('{0}_KUBECONFIG', env.FISSION_PROFILE)] }}
+    - name: 🔄 Install Dependencies
+      if: steps.cache.outputs.cache-hit != 'true'
+      run: |
+        curl -L "https://${{ secrets.REGISTRY_PASSWORD }}@registry.vegastar.vn/vegacloud/make/releases/download/${RAKE_VER}/rake-${RAKE_VER}-x86_64-unknown-linux-musl.tar.gz" | tar xzv -C /tmp/
+        curl -L "https://github.com/fission/fission/releases/download/v${FISSION_VER}/fission-v${FISSION_VER}-linux-amd64" --output /tmp/fission
+        install -o root -g root -m 0755 /tmp/rake-${RAKE_VER}-x86_64-unknown-linux-musl/rake /usr/local/bin/rake
+        install -o root -g root -m 0755 /tmp/fission /usr/local/bin/fission
+        fission check
+        # rake cfg install fission -f
+    - name: 🕓 Checkout the previous codes
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.before }}
+    - name: ♻️ Remove the previous version
+      # continue-on-error: true
+      run: |
+        echo "use profile [$FISSION_PROFILE]"
+        mkdir -p manifests || true
+        rake sec detail && rake cfm detail && rake env detail && rake pkg detail && rake fn detail && rake ht detail
+        rake sp build -fi && rake sp down -i
+    - name: 🔎 Checkout repository
+      uses: actions/checkout@v4
+    - name: ✨ Deploy the new version
+      id: deploy
+      run: |
+        echo "use profile [$FISSION_PROFILE]"
+        mkdir -p manifests || true
+        rake sec detail && rake cfm detail && rake env detail && rake pkg detail && rake fn detail && rake ht detail
+        rake sp build -fi && rake sp up -i
+    - name: 🔔 Send notification
+      uses: appleboy/telegram-action@master
+      if: always()
+      with:
+        to: ${{ secrets.TELEGRAM_TO }}
+        token: ${{ secrets.TELEGRAM_TOKEN }}
+        format: markdown
+        socks5: ${{ secrets.TELEGRAM_PROXY_URL != '' && secrets.TELEGRAM_PROXY_URL || '' }}
+        message: |
+          ${{ steps.deploy.outcome == 'success' && '🟢 (=^ ◡ ^=)' || '🔴 (｡•́︿•̀｡)' }} Install fn ${{ github.event.repository.name }}
+          *Msg*: `${{ github.event.commits[0].message }}`
--- a/.gitea/workflows/install-dispatch.yaml
+++ b/.gitea/workflows/install-dispatch.yaml
@@ -0,0 +1,74 @@
+name: "K8S Fission Deployment"
+on:
+  workflow_dispatch:
+    inputs:
+      profile:
+        description: "Profile to execute to"
+        required: true
+        type: choice
+        options: [ DEV, TEST, STAGING ]
+jobs:
+  deployment-fission:
+    name: Deployment fission functions
+    runs-on: ubuntu-latest
+    env:
+      RUNNER_TOOL_CACHE: /toolcache
+      FISSION_PROFILE: ${{ github.event.inputs.profile }}
+      FISSION_VER: 1.21.0
+      RAKE_VER: 0.1.3
+    steps:
+    - name: ☸️ Setup kubectl
+      uses: azure/setup-kubectl@v4
+    - name: ☘️ Configure Kubeconfig
+      uses: azure/k8s-set-context@v4
+      with:
+        method: kubeconfig
+        kubeconfig: ${{ secrets[format('{0}_KUBECONFIG', github.event.inputs.profile)] }}
+    - name: 🔄 Cache
+      id: cache
+      uses: actions/cache@v4
+      with:
+        path: |
+          /usr/local/bin/rake
+          /usr/local/bin/fission
+        key: ${{ runner.os }}-${{ github.event.repository.name }}-${{ hashFiles('.fission/deployment.json') }}
+    - name: 🔄 Install Dependencies
+      if: steps.cache.outputs.cache-hit != 'true'
+      run: |
+        curl -L "https://${{ secrets.REGISTRY_PASSWORD }}@registry.vegastar.vn/vegacloud/make/releases/download/${RAKE_VER}/rake-${RAKE_VER}-x86_64-unknown-linux-musl.tar.gz" | tar xzv -C /tmp/
+        curl -L "https://github.com/fission/fission/releases/download/v${FISSION_VER}/fission-v${FISSION_VER}-linux-amd64" --output /tmp/fission
+        install -o root -g root -m 0755 /tmp/rake-${RAKE_VER}-x86_64-unknown-linux-musl/rake /usr/local/bin/rake
+        install -o root -g root -m 0755 /tmp/fission /usr/local/bin/fission
+        fission check
+        # rake cfg install fission -f
+    - name: 🕓 Checkout the previous codes
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.before }}
+    - name: ♻️ Remove the previous version
+      # continue-on-error: true
+      run: |
+        echo "use profile [$FISSION_PROFILE]"
+        mkdir -p manifests || true
+        rake sec detail && rake cfm detail && rake env detail && rake pkg detail && rake fn detail && rake ht detail
+        rake sp build -fi && rake sp down -i
+    - name: 🔎 Checkout repository
+      uses: actions/checkout@v4
+    - name: ✨ Deploy the new version
+      id: deploy
+      run: |
+        echo "use profile [$FISSION_PROFILE]"
+        mkdir -p manifests || true
+        rake sec detail && rake cfm detail && rake env detail && rake pkg detail && rake fn detail && rake ht detail
+        rake sp build -fi && rake sp up -i
+    - name: 🔔 Send notification
+      uses: appleboy/telegram-action@master
+      if: always()
+      with:
+        to: ${{ secrets.TELEGRAM_TO }}
+        token: ${{ secrets.TELEGRAM_TOKEN }}
+        format: markdown
+        socks5: ${{ secrets.TELEGRAM_PROXY_URL != '' && secrets.TELEGRAM_PROXY_URL || '' }}
+        message: |
+          ${{ steps.deploy.outcome == 'success' && '🟢 (=^ ◡ ^=)' || '🔴 (｡•́︿•̀｡)' }} Install fn ${{ github.event.repository.name }}
+          *Msg*: `${{ github.event.commits[0].message }}`
--- a/.gitea/workflows/staging-deployment.yaml
+++ b/.gitea/workflows/staging-deployment.yaml
@@ -0,0 +1,79 @@
+name: "K8S Fission Deployment"
+on:
+  workflow_dispatch:
+    inputs:
+      profile:
+        description: "Profile to execute to"
+        required: true
+        type: choice
+        options: [ DEV, TEST, STAGING ]
+jobs:
+  deployment-fission:
+    name: Deployment fission functions
+    runs-on: ubuntu-latest
+    env:
+      RUNNER_TOOL_CACHE: /toolcache
+    steps:
+    - name: 🍀 Extract branch name
+      run: echo "K8S_PROFILE=`echo ${GITHUB_REF_NAME:-${GITHUB_REF#refs/heads/}} | tr '[:lower:]' '[:upper:]'`" >> $GITHUB_ENV
+    - name: ☸️ Setup kubectl
+      uses: azure/setup-kubectl@v4
+    - name: 🛠️ Configure Kubeconfig
+      uses: azure/k8s-set-context@v4
+      with:
+        method: kubeconfig
+        kubeconfig: ${{ secrets[format('{0}_KUBECONFIG', env.K8S_PROFILE)] }}
+    - name: ⇩ Download PyMake CLI
+      uses: ethanjli/cached-download-action@v0.1.3
+      with:
+        url: https://bin.rhosted.com/RhdpPK.py
+        destination: /tmp/pymake
+        cache-key: pymake-cli
+    - name: ⇩ Download fission CLI
+      uses: ethanjli/cached-download-action@v0.1.3
+      with:
+        url: https://github.com/fission/fission/releases/download/v1.21.0/fission-v1.21.0-linux-amd64
+        destination: /tmp/fission
+        cache-key: fission-cli
+    - name: 🔨 Install Tools
+      run: |
+        # curl -L "https://github.com/fission/fission/releases/download/v1.21.0/fission-v1.21.0-linux-amd64" --output /tmp/fission
+        install -o root -g root -m 0755 /tmp/pymake /usr/local/bin/pymake
+        install -o root -g root -m 0755 /tmp/fission /usr/local/bin/fission
+        fission check
+    - name: cache fission cli
+      uses: actions/cache@v3
+      with:
+        path: |
+          /usr/local/bin/fission                                    
+        key: go_path-${{ steps.hash-go.outputs.hash }}
+        restore-keys: |-
+          go_cache-${{ steps.hash-go.outputs.hash }}
+    - name: 👀 Checkout the previous codes
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.before }}
+    - name: 🧹 Remove the previous version
+      continue-on-error: true
+      run: |
+        fission specs destroy --force
+        kubectl delete -R -f manifests
+    - name: 👀 Checkout repository
+      id: checkout-new-code
+      if: always()
+      uses: actions/checkout@v4
+    - name: ✨ Deploy the new version
+      id: deploy
+      run: |
+        kubectl apply -R -f manifests
+        fission specs apply --wait
+    - name: 🔔 Send notification
+      uses: appleboy/telegram-action@master
+      if: always() # This ensures the step runs even if previous steps fail
+      with:
+        to: ${{ secrets.TELEGRAM_TO }}
+        token: ${{ secrets.TELEGRAM_TOKEN }}
+        format: markdown
+        message: |
+          ${{ steps.deploy.outcome == 'success' && '🟢 (=^ ◡ ^=)' || '🔴 (｡•́︿•̀｡)' }} ${{ github.repository }}
+          *Commit*: ${{ github.event.commits[0].message }}
--- a/.gitea/workflows/uninstall-dispatch.yaml
+++ b/.gitea/workflows/uninstall-dispatch.yaml
@@ -0,0 +1,63 @@
+name: "K8S Fission Deployment"
+on:
+  workflow_dispatch:
+    inputs:
+      profile:
+        description: "Profile to execute to"
+        required: true
+        type: choice
+        options: [ DEV, TEST, STAGING ]
+jobs:
+  destroy-fission:
+    name: Destroy fission functions
+    runs-on: ubuntu-latest
+    env:
+      RUNNER_TOOL_CACHE: /toolcache
+      FISSION_PROFILE: ${{ github.event.inputs.profile }}
+      FISSION_VER: 1.21.0
+      RAKE_VER: 0.1.3
+    steps:
+    - name: ☸️ Setup kubectl
+      uses: azure/setup-kubectl@v4
+    - name: ☘️ Configure Kubeconfig
+      uses: azure/k8s-set-context@v4
+      with:
+        method: kubeconfig
+        kubeconfig: ${{ secrets[format('{0}_KUBECONFIG', github.event.inputs.profile)] }}
+    - name: 🔄 Cache
+      id: cache
+      uses: actions/cache@v4
+      with:
+        path: |
+          /usr/local/bin/rake
+          /usr/local/bin/fission
+        key: ${{ runner.os }}-${{ github.event.repository.name }}-${{ hashFiles('.fission/deployment.json') }}
+    - name: 🔄 Install Dependencies
+      if: steps.cache.outputs.cache-hit != 'true'
+      run: |
+        curl -L "https://${{ secrets.REGISTRY_PASSWORD }}@registry.vegastar.vn/vegacloud/make/releases/download/${RAKE_VER}/rake-${RAKE_VER}-x86_64-unknown-linux-musl.tar.gz" | tar xzv -C /tmp/
+        curl -L "https://github.com/fission/fission/releases/download/v${FISSION_VER}/fission-v${FISSION_VER}-linux-amd64" --output /tmp/fission
+        install -o root -g root -m 0755 /tmp/rake-${RAKE_VER}-x86_64-unknown-linux-musl/rake /usr/local/bin/rake
+        install -o root -g root -m 0755 /tmp/fission /usr/local/bin/fission
+        fission check
+        # rake cfg install fission -f
+    - name: 🔎 Checkout repository
+      uses: actions/checkout@v4
+    - name: ♻️ Remove
+      id: deploy
+      run: |
+        echo "use profile [$FISSION_PROFILE]"
+        mkdir -p manifests || true
+        rake sec detail && rake cfm detail && rake env detail && rake pkg detail && rake fn detail && rake ht detail
+        rake sp build -fi && rake sp down -i
+    - name: 🔔 Send notification
+      uses: appleboy/telegram-action@master
+      if: always()
+      with:
+        to: ${{ secrets.TELEGRAM_TO }}
+        token: ${{ secrets.TELEGRAM_TOKEN }}
+        format: markdown
+        socks5: ${{ secrets.TELEGRAM_PROXY_URL != '' && secrets.TELEGRAM_PROXY_URL || '' }}
+        message: |
+          ${{ steps.deploy.outcome == 'success' && '🟢 (=^ ◡ ^=)' || '🔴 (｡•́︿•̀｡)' }} Uninstall fn ${{ github.event.repository.name }}
+          *Msg*: `${{ github.event.commits[0].message }}`