From e550f70e48a02417453271d1e6a3027ff967843f Mon Sep 17 00:00:00 2001
From: Roman Khabarov <roman@globalart.dev>
Date: Tue, 28 May 2024 12:15:22 +0200
Subject: [PATCH] chore: deploy

---
 .github/workflows/deploy-k8s.yml | 40 ++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 .github/workflows/deploy-k8s.yml

diff --git a/.github/workflows/deploy-k8s.yml b/.github/workflows/deploy-k8s.yml
new file mode 100644
index 0000000..045daa5
--- /dev/null
+++ b/.github/workflows/deploy-k8s.yml
@@ -0,0 +1,40 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+    - master
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    env:
+      NAMESPACE: globalart-prod
+      HARBOR_PROJECT: gitlab-prod
+      HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }}
+      HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}
+      HARBOR_HOST: ${{ secrets.HARBOR_HOST }}
+      KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    - name: Deploy
+      run: |
+        mkdir -p $HOME/.kube
+        cat <<EOF > $HOME/.kube/config
+        ${{ secrets.KUBE_CONFIG }}
+        EOF
+        curl -sSL https://werf.io/install.sh | bash -s -- --version 1.2 --channel stable
+        source $("$HOME/bin/trdl" use werf "1.2" "stable")
+        werf cr login -u $HARBOR_USERNAME -p $HARBOR_PASSWORD $HARBOR_HOST
+        werf converge --namespace=$NAMESPACE \
+              --env prod \
+              --kube-config=$HOME/.kube/config \
+              --skip-tls-verify-registry=true \
+              --repo-container-registry=harbor \
+              --repo=$HARBOR_HOST/${HARBOR_PROJECT}/nestcord \
+              --repo-harbor-username=$HARBOR_USERNAME \
+              --repo-harbor-password=$HARBOR_PASSWORD \
+              --atomic=true
+