Set up automated deploy to kubernetes

Author: pimterry

.github/workflows/ci.yml

@@ -92,10 +92,13 @@ jobs:
           fi
 
   publish-docker:
-    name: Build & publish container to Docker Hub
+    name: Build & publish container
     if: github.ref == 'refs/heads/main' || (github.event_name == 'push' && !startsWith(github.ref, 'refs/heads/dependabot/'))
     runs-on: ubuntu-latest
     needs: build
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v4
 
@@ -104,6 +107,13 @@ jobs:
           name: out
           path: out
 
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
       - uses: docker/setup-buildx-action@v3
       - name: Login to DockerHub
         uses: docker/login-action@v3
@@ -116,14 +126,16 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
-          images: httptoolkit/website
+          images: |
+            httptoolkit/website
+            ghcr.io/httptoolkit/website
           tags: |
             type=raw,value=prod,enable=${{ github.ref == 'refs/heads/main' }}
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
             type=raw,value=staging,enable=${{ github.ref == 'refs/heads/next' }}
             type=sha
 
-      - name: Publish to Docker Hub
+      - name: Publish container
         uses: docker/build-push-action@v5
         with:
           context: .
@@ -137,6 +149,27 @@ jobs:
     runs-on: ubuntu-latest
     needs: publish-docker
     steps:
+      - uses: actions/checkout@v4
+
+      - name: Configure Kubectl
+        run: |
+          kubectl config set-cluster scw-cluster \
+            --server="${{ vars.K8S_SERVER_ADDRESS }}" \
+            --certificate-authority=<(echo "${{ vars.K8S_CA_CERT }}" | base64 -d) \
+            --embed-certs=true
+
+          kubectl config set-credentials deployer --token="${{ secrets.K8S_DEPLOY_TOKEN }}"
+
+          kubectl config set-context default --cluster=scw-cluster --user=deployer
+          kubectl config use-context default
+
+      - name: Deploy to Kubernetes
+        run: |
+          sed "s|/website:latest|/website:${{ vars.DOCKER_IMAGE_TAG }}|g" deploy/deployment.yaml | \
+            kubectl apply -f - \
+              -f deploy/service.yaml \
+              -f deploy/routes.yaml
+
       - name: Redeploy container
         uses: httptoolkit/deploy-scaleway-serverless-container-action@v1
         with:

deploy/deployment.yaml

@@ -0,0 +1,23 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: httptoolkit-website
+  namespace: httptoolkit-website
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: httptoolkit-website
+  template:
+    metadata:
+      labels:
+        app: httptoolkit-website
+    spec:
+      containers:
+        - name: server
+          image: ghcr.io/httptoolkit/website:latest # GHA replaces :latest on build
+          ports:
+            - containerPort: 4000
+          env:
+            - name: DOMAIN
+              value: "http://:4000"

deploy/routes.yaml

@@ -0,0 +1,23 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: httptoolkit-website-route
+  namespace: httptoolkit-website
+spec:
+  parentRefs:
+    - name: primary-gateway
+      namespace: gateway
+      sectionName: https-httptoolkit-tech
+    - name: secondary-gateway
+      namespace: gateway
+      sectionName: https-httptoolkit-tech
+  hostnames:
+    - "httptoolkit.com"
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: httptoolkit-website
+          port: 4000

deploy/service.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: httptoolkit-website
+  namespace: httptoolkit-website
+spec:
+  selector:
+    app: httptoolkit-website
+  ports:
+    - name: http-port
+      protocol: TCP
+      port: 4000
+      targetPort: 4000