.github/workflows/main.yml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   build:
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
 
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
@@ -20,38 +20,30 @@ jobs:
       - name: Get Version
         id: get_version
         uses: battila7/get-version-action@v2.0.0
-      
-      - name: Docker Login
-        # You may pin to the exact commit or the version.
-        # uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
-        uses: docker/login-action@v1.10.0
-        with:
-          registry: ${{ secrets.DR_URL }}
-          # Username used to log against the Docker registry
-          username: ${{ secrets.DH_USERNAME }}
-          # Password or personal access token used to log against the Docker registry
-          password: ${{ secrets.DH_PASSWORD }}
-          # Log out from the Docker registry at the end of a job
-          logout: true
 
-      - name: Docker Build & Push
+      - name: Build container image
         env:
           IMAGE_TAG: ${{ steps.get_version.outputs.version-without-v }}
-        run: |
-          docker build -t ${{ secrets.DR_URL }}/snowflake-server:$IMAGE_TAG .
-          docker push ${{ secrets.DR_URL }}/snowflake-server:$IMAGE_TAG
-          sed -i 's|<IMAGE>|${{ secrets.DR_URL }}/snowflake-server:'${IMAGE_TAG}'|' $GITHUB_WORKSPACE/deployment.yml
+        run: docker build -t registry.digitalocean.com/djpianalto/snowflake-server:$IMAGE_TAG .
 
-      - name: Kubectl tool installer
-        uses: Azure/setup-kubectl@v1
-
-      - name: Kubernetes set context
-        uses: Azure/k8s-set-context@v1.1
+      - name: Install doctl
+        uses: digitalocean/action-doctl@v2
         with:
-          # Acceptable values: kubeconfig or service-account or service-principal
-          method: kubeconfig
-          # Kubernetes Config
-          kubeconfig: ${{ secrets.KUBE_CONFIG }}
-          
-      - name: Deploy to Kubernetes
+          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}
+
+      - name: Login to DigitalOcean Container Registry with short-lived credentials
+        run: doctl registry login --expiry-seconds 600
+
+      - name: Push image to DigitalOcean Container Registry
+        env:
+          IMAGE_TAG: ${{ steps.get_version.outputs.version-without-v }}
+        run: docker push registry.digitalocean.com/djpianalto/snowflake-server:$IMAGE_TAG
+
+      - name: Update deployment file
+        run: TAG=${{ steps.get_version.outputs.version-without-v }} && sed -i 's|<IMAGE>|registry.digitalocean.com/djpianalto/snowflake-server:'${TAG}'|' $GITHUB_WORKSPACE/deployment.yml
+
+      - name: Save DigitalOcean kubeconfig with short-lived credentials
+        run: doctl kubernetes cluster kubeconfig save --expiry-seconds 600 placeholder-chat-dev
+
+      - name: Deploy to DigitalOcean Kubernetes
         run: kubectl apply -f $GITHUB_WORKSPACE/deployment.yml

Dockerfile

@@ -5,7 +5,6 @@ COPY ./go.mod .
 COPY ./go.sum .
 
 RUN go mod download
-RUN sed -i 's/https/http/' /etc/apk/repositories
 RUN apk update
 
 RUN apk add protobuf

deployment.yml

@@ -2,7 +2,7 @@ kind: Service
 apiVersion: v1
 metadata:
   name: snowflake-server
-  namespace: default
+  namespace: dca
   labels:
     environment: production
 spec:
@@ -25,7 +25,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: snowflake-server
-  namespace: default
+  namespace: dca
   labels:
     app: snowflake-server
 spec:
@@ -55,5 +55,3 @@ spec:
                 secretKeyRef:
                   name: snowflake
                   key: worker_id
-      imagePullSecrets:
-        - name: regcred