Add CI/CD with GitHub Actions and migrate to Deployment

- Migrate from DaemonSet to Deployment for better efficiency
- Add GitHub Actions for automatic build and deploy
- Add Blue-Green deployment strategy with health checks
- Add scripts for development and production workflows
- Update documentation with CI/CD flow
This commit is contained in:
2025-09-25 17:20:38 -03:00
parent 4e57a896fe
commit 3a6875a80e
12 changed files with 1344 additions and 13 deletions

111
scripts/blue-green-deploy.sh Executable file
View File

@@ -0,0 +1,111 @@
#!/bin/bash
# Script de Deploy Blue-Green para OpenShift Resource Governance Tool
# Este script implementa uma estratégia de deploy mais segura, onde a nova versão
# só substitui a antiga após estar completamente funcional.
set -e
# Cores para output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color
NAMESPACE="resource-governance"
IMAGE_NAME="andersonid/openshift-resource-governance"
TAG="${1:-latest}"
FULL_IMAGE_NAME="${IMAGE_NAME}:${TAG}"
echo -e "${BLUE}🔄 Deploy Blue-Green - OpenShift Resource Governance Tool${NC}"
echo -e "${BLUE}====================================================${NC}"
echo -e "${BLUE}Imagem: ${FULL_IMAGE_NAME}${NC}"
# 1. Verificar login no OpenShift
echo -e "${YELLOW}🔍 Verificando login no OpenShift...${NC}"
if ! oc whoami > /dev/null 2>&1; then
echo -e "${RED}❌ Não está logado no OpenShift. Faça login primeiro.${NC}"
exit 1
fi
echo -e "${GREEN}✅ Logado como: $(oc whoami)${NC}"
# 2. Verificar se a imagem existe localmente
echo -e "${YELLOW}🔍 Verificando se a imagem existe localmente...${NC}"
if ! podman image exists "${FULL_IMAGE_NAME}" > /dev/null 2>&1; then
echo -e "${YELLOW}📦 Imagem não encontrada localmente. Fazendo build...${NC}"
podman build -f Dockerfile.simple -t "${FULL_IMAGE_NAME}" .
echo -e "${YELLOW}📤 Fazendo push da imagem...${NC}"
podman push "${FULL_IMAGE_NAME}"
fi
# 3. Verificar status atual do Deployment
echo -e "${YELLOW}📊 Verificando status atual do Deployment...${NC}"
CURRENT_IMAGE=$(oc get deployment resource-governance -n $NAMESPACE -o jsonpath='{.spec.template.spec.containers[0].image}' 2>/dev/null || echo "N/A")
echo -e "${BLUE}Imagem atual: ${CURRENT_IMAGE}${NC}"
if [ "$CURRENT_IMAGE" = "$FULL_IMAGE_NAME" ]; then
echo -e "${YELLOW}⚠️ A imagem já está em uso. Continuando com o deploy...${NC}"
fi
# 4. Aplicar o Deployment atualizado
echo -e "${YELLOW}📦 Aplicando Deployment atualizado...${NC}"
oc apply -f k8s/deployment.yaml
# 5. Aguardar o rollout com verificação de saúde
echo -e "${YELLOW}⏳ Aguardando rollout do Deployment...${NC}"
oc rollout status deployment/resource-governance -n $NAMESPACE --timeout=300s
# 6. Verificar se todos os pods estão prontos
echo -e "${YELLOW}🔍 Verificando se todos os pods estão prontos...${NC}"
READY_PODS=$(oc get pods -n $NAMESPACE -l app.kubernetes.io/name=resource-governance --field-selector=status.phase=Running | wc -l)
TOTAL_PODS=$(oc get pods -n $NAMESPACE -l app.kubernetes.io/name=resource-governance | wc -l)
echo -e "${BLUE}Pods prontos: ${READY_PODS}/${TOTAL_PODS}${NC}"
if [ $READY_PODS -lt $TOTAL_PODS ]; then
echo -e "${YELLOW}⚠️ Nem todos os pods estão prontos. Verificando logs...${NC}"
oc get pods -n $NAMESPACE -l app.kubernetes.io/name=resource-governance
echo -e "${YELLOW}💡 Para ver logs de um pod específico: oc logs <pod-name> -n $NAMESPACE${NC}"
fi
# 7. Testar a saúde da aplicação
echo -e "${YELLOW}🏥 Testando saúde da aplicação...${NC}"
SERVICE_IP=$(oc get service resource-governance-service -n $NAMESPACE -o jsonpath='{.spec.clusterIP}')
if [ -n "$SERVICE_IP" ]; then
# Testar via port-forward temporário
echo -e "${YELLOW}🔗 Testando conectividade...${NC}"
oc port-forward service/resource-governance-service 8081:8080 -n $NAMESPACE &
PORT_FORWARD_PID=$!
sleep 5
if curl -s http://localhost:8081/api/v1/health > /dev/null; then
echo -e "${GREEN}✅ Aplicação está respondendo corretamente${NC}"
else
echo -e "${RED}❌ Aplicação não está respondendo${NC}"
fi
kill $PORT_FORWARD_PID 2>/dev/null || true
else
echo -e "${YELLOW}⚠️ Não foi possível obter IP do serviço${NC}"
fi
# 8. Mostrar status final
echo -e "${YELLOW}📊 Status final do deploy:${NC}"
oc get deployment resource-governance -n $NAMESPACE
echo ""
oc get pods -n $NAMESPACE -l app.kubernetes.io/name=resource-governance
# 9. Obter URL da aplicação
ROUTE_HOST=$(oc get route resource-governance-route -n $NAMESPACE -o jsonpath='{.spec.host}' 2>/dev/null || echo "N/A")
if [ "$ROUTE_HOST" != "N/A" ]; then
echo -e "${GREEN}🎉 Deploy Blue-Green concluído com sucesso!${NC}"
echo -e "${BLUE}Acesse a aplicação em: https://${ROUTE_HOST}${NC}"
else
echo -e "${GREEN}🎉 Deploy Blue-Green concluído!${NC}"
echo -e "${BLUE}Para acessar a aplicação, use port-forward:${NC}"
echo -e " oc port-forward service/resource-governance-service 8080:8080 -n $NAMESPACE${NC}"
fi
echo -e "${BLUE}💡 Para verificar logs: oc logs -l app.kubernetes.io/name=resource-governance -n $NAMESPACE${NC}"

View File

@@ -0,0 +1,79 @@
#!/bin/bash
# Script para migrar de DaemonSet para Deployment
# Este script remove o DaemonSet e cria um Deployment mais eficiente
set -e
# Cores para output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color
NAMESPACE="resource-governance"
echo -e "${BLUE}🔄 Migração DaemonSet → Deployment${NC}"
echo -e "${BLUE}====================================${NC}"
# 1. Verificar login no OpenShift
echo -e "${YELLOW}🔍 Verificando login no OpenShift...${NC}"
if ! oc whoami > /dev/null 2>&1; then
echo -e "${RED}❌ Não está logado no OpenShift. Faça login primeiro.${NC}"
exit 1
fi
echo -e "${GREEN}✅ Logado como: $(oc whoami)${NC}"
# 2. Verificar status atual
echo -e "${YELLOW}📊 Status atual do DaemonSet...${NC}"
oc get daemonset resource-governance -n $NAMESPACE 2>/dev/null || echo "DaemonSet não encontrado"
# 3. Criar Deployment
echo -e "${YELLOW}📦 Criando Deployment...${NC}"
oc apply -f k8s/deployment.yaml
# 4. Aguardar Deployment ficar pronto
echo -e "${YELLOW}⏳ Aguardando Deployment ficar pronto...${NC}"
oc rollout status deployment/resource-governance -n $NAMESPACE --timeout=120s
# 5. Verificar se pods estão rodando
echo -e "${YELLOW}🔍 Verificando pods do Deployment...${NC}"
oc get pods -n $NAMESPACE -l app.kubernetes.io/name=resource-governance
# 6. Testar aplicação
echo -e "${YELLOW}🏥 Testando aplicação...${NC}"
oc port-forward service/resource-governance-service 8081:8080 -n $NAMESPACE &
PORT_FORWARD_PID=$!
sleep 5
if curl -s http://localhost:8081/api/v1/health > /dev/null; then
echo -e "${GREEN}✅ Aplicação está funcionando corretamente${NC}"
else
echo -e "${RED}❌ Aplicação não está respondendo${NC}"
fi
kill $PORT_FORWARD_PID 2>/dev/null || true
# 7. Remover DaemonSet (se existir)
echo -e "${YELLOW}🗑️ Removendo DaemonSet...${NC}"
oc delete daemonset resource-governance -n $NAMESPACE --ignore-not-found=true
# 8. Status final
echo -e "${YELLOW}📊 Status final:${NC}"
echo -e "${BLUE}Deployment:${NC}"
oc get deployment resource-governance -n $NAMESPACE
echo ""
echo -e "${BLUE}Pods:${NC}"
oc get pods -n $NAMESPACE -l app.kubernetes.io/name=resource-governance
# 9. Mostrar benefícios
echo -e "${GREEN}🎉 Migração concluída com sucesso!${NC}"
echo -e "${BLUE}💡 Benefícios do Deployment:${NC}"
echo -e " ✅ Mais eficiente (2 pods vs 6 pods)"
echo -e " ✅ Escalável (pode ajustar replicas)"
echo -e " ✅ Rolling Updates nativos"
echo -e " ✅ Health checks automáticos"
echo -e " ✅ Menor consumo de recursos"
echo -e "${BLUE}🔧 Para escalar: oc scale deployment resource-governance --replicas=3 -n $NAMESPACE${NC}"

91
scripts/setup-github-secrets.sh Executable file
View File

@@ -0,0 +1,91 @@
#!/bin/bash
# Script para configurar secrets do GitHub Actions
# Este script ajuda a configurar os secrets necessários para CI/CD
set -e
# Cores para output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color
echo -e "${BLUE}🔐 Configuração de Secrets para GitHub Actions${NC}"
echo -e "${BLUE}============================================${NC}"
echo -e "${YELLOW}📋 Secrets necessários no GitHub:${NC}"
echo ""
echo -e "${BLUE}1. DOCKERHUB_USERNAME${NC}"
echo -e " Seu usuário do Docker Hub"
echo ""
echo -e "${BLUE}2. DOCKERHUB_TOKEN${NC}"
echo -e " Token de acesso do Docker Hub (não a senha!)"
echo " Crie em: https://hub.docker.com/settings/security"
echo ""
echo -e "${BLUE}3. OPENSHIFT_SERVER${NC}"
echo -e " URL do seu cluster OpenShift"
echo " Exemplo: https://api.openshift.example.com:6443"
echo ""
echo -e "${BLUE}4. OPENSHIFT_TOKEN${NC}"
echo -e " Token de acesso do OpenShift"
echo " Obtenha com: oc whoami -t"
echo ""
# Verificar se está logado no OpenShift
if oc whoami > /dev/null 2>&1; then
echo -e "${GREEN}✅ Logado no OpenShift como: $(oc whoami)${NC}"
# Obter informações do cluster
CLUSTER_SERVER=$(oc config view --minify -o jsonpath='{.clusters[0].cluster.server}' 2>/dev/null || echo "N/A")
if [ "$CLUSTER_SERVER" != "N/A" ]; then
echo -e "${BLUE}🌐 Servidor OpenShift: ${CLUSTER_SERVER}${NC}"
fi
# Obter token
OPENSHIFT_TOKEN=$(oc whoami -t 2>/dev/null || echo "N/A")
if [ "$OPENSHIFT_TOKEN" != "N/A" ]; then
echo -e "${BLUE}🔑 Token OpenShift: ${OPENSHIFT_TOKEN:0:20}...${NC}"
fi
else
echo -e "${RED}❌ Não está logado no OpenShift${NC}"
echo -e "${YELLOW}💡 Faça login primeiro: oc login <server>${NC}"
fi
echo ""
echo -e "${YELLOW}📝 Como configurar os secrets no GitHub:${NC}"
echo ""
echo -e "${BLUE}1. Acesse: https://github.com/andersonid/openshift-resource-governance/settings/secrets/actions${NC}"
echo ""
echo -e "${BLUE}2. Clique em 'New repository secret' para cada um:${NC}"
echo ""
echo -e "${GREEN}DOCKERHUB_USERNAME${NC}"
echo -e " Valor: seu-usuario-dockerhub"
echo ""
echo -e "${GREEN}DOCKERHUB_TOKEN${NC}"
echo -e " Valor: dckr_pat_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
echo ""
echo -e "${GREEN}OPENSHIFT_SERVER${NC}"
echo -e " Valor: ${CLUSTER_SERVER}"
echo ""
echo -e "${GREEN}OPENSHIFT_TOKEN${NC}"
echo -e " Valor: ${OPENSHIFT_TOKEN}"
echo ""
echo -e "${YELLOW}🚀 Após configurar os secrets:${NC}"
echo ""
echo -e "${BLUE}1. Faça commit e push das mudanças:${NC}"
echo -e " git add ."
echo -e " git commit -m 'Add GitHub Actions for auto-deploy'"
echo -e " git push origin main"
echo ""
echo -e "${BLUE}2. O GitHub Actions irá:${NC}"
echo -e " ✅ Buildar a imagem automaticamente"
echo -e " ✅ Fazer push para Docker Hub"
echo -e " ✅ Fazer deploy no OpenShift"
echo -e " ✅ Atualizar o deployment com a nova imagem"
echo ""
echo -e "${GREEN}🎉 Configuração concluída!${NC}"
echo -e "${BLUE}💡 Para testar: faça uma mudança no código e faça push para main${NC}"

79
scripts/test-ci-cd.sh Executable file
View File

@@ -0,0 +1,79 @@
#!/bin/bash
# Script para testar o fluxo CI/CD localmente
# Simula o que o GitHub Actions fará
set -e
# Cores para output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color
NAMESPACE="resource-governance"
IMAGE_NAME="resource-governance"
REGISTRY="andersonid"
TAG="test-$(date +%s)"
echo -e "${BLUE}🧪 Teste do Fluxo CI/CD${NC}"
echo -e "${BLUE}========================${NC}"
echo -e "${BLUE}Tag: ${TAG}${NC}"
# 1. Verificar login no OpenShift
echo -e "${YELLOW}🔍 Verificando login no OpenShift...${NC}"
if ! oc whoami > /dev/null 2>&1; then
echo -e "${RED}❌ Não está logado no OpenShift. Faça login primeiro.${NC}"
exit 1
fi
echo -e "${GREEN}✅ Logado como: $(oc whoami)${NC}"
# 2. Build da imagem
echo -e "${YELLOW}📦 Buildando imagem...${NC}"
podman build -f Dockerfile.simple -t "${REGISTRY}/${IMAGE_NAME}:${TAG}" .
podman build -f Dockerfile.simple -t "${REGISTRY}/${IMAGE_NAME}:latest" .
# 3. Push da imagem
echo -e "${YELLOW}📤 Fazendo push da imagem...${NC}"
podman push "${REGISTRY}/${IMAGE_NAME}:${TAG}"
podman push "${REGISTRY}/${IMAGE_NAME}:latest"
# 4. Atualizar deployment
echo -e "${YELLOW}🔄 Atualizando deployment...${NC}"
oc set image deployment/${IMAGE_NAME} ${IMAGE_NAME}=${REGISTRY}/${IMAGE_NAME}:${TAG} -n ${NAMESPACE}
# 5. Aguardar rollout
echo -e "${YELLOW}⏳ Aguardando rollout...${NC}"
oc rollout status deployment/${IMAGE_NAME} -n ${NAMESPACE} --timeout=120s
# 6. Verificar status
echo -e "${YELLOW}📊 Verificando status...${NC}"
oc get deployment ${IMAGE_NAME} -n ${NAMESPACE}
oc get pods -n ${NAMESPACE} -l app.kubernetes.io/name=${IMAGE_NAME}
# 7. Testar aplicação
echo -e "${YELLOW}🏥 Testando aplicação...${NC}"
oc port-forward service/${IMAGE_NAME}-service 8081:8080 -n ${NAMESPACE} &
PORT_FORWARD_PID=$!
sleep 5
if curl -s http://localhost:8081/api/v1/health > /dev/null; then
echo -e "${GREEN}✅ Aplicação está funcionando com a nova imagem!${NC}"
else
echo -e "${RED}❌ Aplicação não está respondendo${NC}"
fi
kill $PORT_FORWARD_PID 2>/dev/null || true
# 8. Mostrar informações
echo -e "${GREEN}🎉 Teste CI/CD concluído!${NC}"
echo -e "${BLUE}📊 Status do deployment:${NC}"
oc get deployment ${IMAGE_NAME} -n ${NAMESPACE} -o wide
echo -e "${BLUE}🔍 Imagem atual:${NC}"
oc get deployment ${IMAGE_NAME} -n ${NAMESPACE} -o jsonpath='{.spec.template.spec.containers[0].image}'
echo ""
echo -e "${BLUE}💡 Para reverter para latest:${NC}"
echo -e " oc set image deployment/${IMAGE_NAME} ${IMAGE_NAME}=${REGISTRY}/${IMAGE_NAME}:latest -n ${NAMESPACE}"