modified: .gitea/workflows/deploy.yaml

s

.gitea/actions/kubectl-setup/action.yml

@@ -1,15 +1,15 @@
 name: Setup kubectl
-description: "Reads kube config from inputs and sets KUBECONFIG"
+description: "Reads kube config from inputs and sets kube config"
 
 inputs:
   kube_server:
-    description: "Kubernetes API server address"
+    description: "Kubernetes server address and port. Example (https://serverip:6443)"
     required: true
   kube_ca_base64:
-    description: "Base64-encoded CA certificate"
+    description: "Base64-encoded Kubernetes cluster CA certificate"
     required: true
   kube_token:
-    description: "ServiceAccount token"
+    description: "Kubernetes ServiceAccount token"
     required: true
 
 runs:
@@ -19,8 +19,33 @@ runs:
       shell: bash
       run: |
         set -euo pipefail
-        mkdir -p "${GITHUB_TEMP}/.kube"
 
+        # check arguments
+        ERROR=0
+
+        if [ -z "${{ inputs.kube_server }}" ]; then
+          echo "❌ ERROR: kube_server input is empty or not set"
+          $ERROR=1
+        fi
+
+        if [ -z "${{ inputs.kube_ca_base64 }}" ]; then
+          echo "❌ ERROR: kube_ca_base64 input is empty or not set"
+           $ERROR=1
+        fi
+
+        if [ -z "${{ inputs.kube_server }}" ]; then
+          echo "❌ ERROR: kube_token input is empty or not set"
+          $ERROR=1
+        fi
+        
+        if [ "$ERROR" != 0 ]; then
+          echo "❌ ERROR code $ERROR"
+          exit "$ERROR"
+        fi
+        # end check arguments
+
+        # creates kube config
+        mkdir -p "${GITHUB_TEMP}/.kube"
         cat <<EOF > "${GITHUB_TEMP}/.kube/config"
         apiVersion: v1
         kind: Config
@@ -42,4 +67,9 @@ runs:
             token: ${{ inputs.kube_token }}
         EOF
 
+        # sets KUBECONFIG environment variable
         echo "KUBECONFIG=${GITHUB_TEMP}/.kube/config" >> "${GITHUB_ENV}"
+
+        # tests communication to server (add v argument if debug is required)
+        curl -kv -cacert <(echo "${{ inputs.kube_ca_base64 }}" | base64 -d) -H "Authorization: Bearer ${{ inputs.kube_token }}" ${{ inputs.kube_server }}/version
+

.gitea/workflows/deploy.yaml

@@ -1,35 +1,53 @@
-name: Casa Home Assistant CI/CD Pipeline
+name: Casa Home Assistant CI/CD Pipeline (testing)
 
 on:
   push:
     branches:
+      - fix/*
       - main
   pull_request:
 
 jobs:
   build:
-    runs-on: mf-casa-vlan-cid-runner
+    runs-on: casa-vlan-cicd
+    env:
+      GITHUB_TEMP: ${{ runner.temp }}
+
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
 
+      - name: setup actions from 
+        run: |
+          ls -lah ${{ runner.temp }}
+          
+          mkdir -p ${{ runner.temp }}/gitea_src
+          mkdir -p ${{ gitea.workspace }}/.gitea/actions
+          git clone -b main --depth=1 https://git.limbosolutions.com/kb/gitea ${{ runner.temp }}/gitea_src/.gitea
+          ln -s ${{ runner.temp }}/gitea_src/.gitea/actions/kubectl-setup  ${{ gitea.workspace }}/.gitea/actions/kubectl-setup
+          ls -lah ${{ gitea.workspace }}/.gitea/actions/kubectl-setup
+          ls -lah ${{ gitea.workspace }}/.gitea/actions/kubectl-setup/*
+          cat ${{ gitea.workspace }}/.gitea/actions/kubectl-setup/action.yml
+
       - name: Setup kubectl
-        uses: ./.github/actions/kubectl-setup
+        uses: ./.gitea/actions/kubectl-setup
         with:
-          kube_server: ${{ secrets.casa_vlan_kube_server }}
-          kube_ca_base64: ${{ secrets.casa_vlan_kube_ca_base64 }}
-          kube_token: ${{ secrets.casa_vlan_kube_token }}
+          kube_server: ${{ secrets.CASA_VLAN_KUBE_SERVER }}
+          kube_ca_base64: ${{ secrets.CASA_VLAN_KUBE_CA_BASE64 }}
+          kube_token: ${{ secrets.CASA_VLAN_KUBE_TOKEN }}
          
       - name: Deploy Home Assistant
         shell: bash
+        env:
+          ENDPOINT_IP: "${{ secrets.CASA_HOMEASSISTANT_ENDPOINT_IP }}"
+          SERVICE_PORT: "${{ secrets.CASA_HOMEASSISTANT_ENDPOINT_SERVICE_PORT }}"
+          INGRESS_ROUTES_MATCH: "${{ secrets.CASA_HOMEASSISTANT_INGRESS_ROUTES_MATCH }}"
+          INGRESS_TLS_SECRET_NAME: "${{ secrets.CASA_HOMEASSISTANT_INGRESS_TLS_SECRET_NAME }}"
         run: |
+          #set -x for debugging
           set -e
           cd ${{ gitea.workspace }}
-          export ENDPOINT_IP="${{ secrets.ENDPOINT_IP }}"
-          export SERVICE_PORT=${{ secrets.SERVICE_PORT }}
-          export INGRESS_ROUTES_MATCH="${{ secrets.INGRESS_ROUTES_MATCH }}"
-          export INGRESS_TLS_SECRET_NAME=${{ secrets.INGRESS_TLS_SECRET_NAME }}
           kubectl apply -f ./deploy/deployment.yaml
           envsubst < ./deploy/service.template.yaml | kubectl apply -f -
             
- 

deploy/deployment.yaml

@@ -33,11 +33,6 @@ spec:
     spec:
       dnsPolicy: ClusterFirstWithHostNet # ensures pod uses cluster DNS (CoreDNS) for service discovery even with host networking
       hostNetwork: true
-      #  delays start so host have time to start on low memory resources
-      # initContainers:
-      #   - name: delay-start
-      #     image: busybox:latest
-      #     command: ["sh", "-c", "sleep 60"]
       containers:
         - name: home-assistant
           image: "homeassistant/home-assistant"