abc/.github/workflows/deploy-master.yml

name: 自动部署到生产环境

on:
  workflow_run:
    workflows: ["Django CI"]
    types:
      - completed
    branches:
      - master
  workflow_dispatch:
    inputs:
      environment:
        description: '部署环境'
        required: true
        default: 'production'
        type: choice
        options:
        - production
        - staging
      image_tag:
        description: '镜像标签 (默认: latest)'
        required: false
        default: 'latest'
        type: string
      skip_tests:
        description: '跳过测试直接部署'
        required: false
        default: false
        type: boolean

env:
  REGISTRY: registry.cn-shenzhen.aliyuncs.com
  IMAGE_NAME: liangliangyy/djangoblog
  NAMESPACE: djangoblog

jobs:
  deploy:
    name: 构建镜像并部署到生产环境
    runs-on: ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
    
    steps:
    - name: 检出代码
      uses: actions/checkout@v4
      
    - name: 设置部署参数
      id: deploy-params
      run: |
        if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
          echo "trigger_type=手动触发" >> $GITHUB_OUTPUT
          echo "environment=${{ github.event.inputs.environment }}" >> $GITHUB_OUTPUT
          echo "image_tag=${{ github.event.inputs.image_tag }}" >> $GITHUB_OUTPUT
          echo "skip_tests=${{ github.event.inputs.skip_tests }}" >> $GITHUB_OUTPUT
        else
          echo "trigger_type=CI自动触发" >> $GITHUB_OUTPUT
          echo "environment=production" >> $GITHUB_OUTPUT
          echo "image_tag=latest" >> $GITHUB_OUTPUT
          echo "skip_tests=false" >> $GITHUB_OUTPUT
        fi
                
    - name: 显示部署信息
      run: |
        echo "🚀 部署信息："
        echo "   触发方式: ${{ steps.deploy-params.outputs.trigger_type }}"
        echo "   部署环境: ${{ steps.deploy-params.outputs.environment }}"
        echo "   镜像标签: ${{ steps.deploy-params.outputs.image_tag }}"
        echo "   跳过测试: ${{ steps.deploy-params.outputs.skip_tests }}"        
      
    - name: 设置Docker Buildx
      uses: docker/setup-buildx-action@v3
      
    - name: 登录私有镜像仓库
      uses: docker/login-action@v3
      with:
        registry: ${{ env.REGISTRY }}
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}
        
    - name: 提取镜像元数据
      id: meta
      uses: docker/metadata-action@v5
      with:
        images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
        tags: |
          type=ref,event=branch
          type=sha,prefix={{branch}}-
          type=raw,value=${{ steps.deploy-params.outputs.image_tag }}
                    
    - name: 构建并推送Docker镜像
      uses: docker/build-push-action@v5
      with:
        context: .
        file: ./Dockerfile
        push: true
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}
        cache-from: type=gha
        cache-to: type=gha,mode=max
        platforms: linux/amd64
        
    - name: 部署到生产服务器
      uses: appleboy/ssh-action@v1.0.3
      with:
        host: ${{ secrets.PRODUCTION_HOST }}
        username: ${{ secrets.PRODUCTION_USER }}
        key: ${{ secrets.PRODUCTION_SSH_KEY }}
        port: ${{ secrets.PRODUCTION_PORT || 22 }}
        script: |
          echo "🚀 开始部署 DjangoBlog..."
          
          # 检查kubectl是否可用
          if ! command -v kubectl &> /dev/null; then
            echo "❌ 错误: kubectl 未安装或不在PATH中"
            exit 1
          fi
          
          # 检查命名空间是否存在
          if ! kubectl get namespace ${{ env.NAMESPACE }} &> /dev/null; then
            echo "❌ 错误: 命名空间 ${{ env.NAMESPACE }} 不存在"
            exit 1
          fi
          
          # 更新deployment镜像
          echo "📦 更新deployment镜像为: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.deploy-params.outputs.image_tag }}"
          kubectl set image deployment/djangoblog \
            djangoblog=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.deploy-params.outputs.image_tag }} \
            -n ${{ env.NAMESPACE }}
          
          # 重启deployment
          echo "🔄 重启deployment..."
          kubectl -n ${{ env.NAMESPACE }} rollout restart deployment djangoblog
          
          # 等待deployment完成
          echo "⏳ 等待deployment完成..."
          kubectl rollout status deployment/djangoblog -n ${{ env.NAMESPACE }} --timeout=300s
          
          # 检查deployment状态
          echo "✅ 检查deployment状态..."
          kubectl get deployment djangoblog -n ${{ env.NAMESPACE }}
          kubectl get pods -l app=djangoblog -n ${{ env.NAMESPACE }}
          
          echo "🎉 部署完成！"
                    
    - name: 发送部署通知
      if: always()
      run: |
        if [ "${{ job.status }}" = "success" ]; then
          TITLE="✅ DjangoBlog部署成功"
          STATUS="成功"
          COLOR="🟢"
        else
          TITLE="❌ DjangoBlog部署失败"
          STATUS="失败"
          COLOR="🔴"
        fi
        
        MESSAGE="${COLOR} **DjangoBlog部署通知**
        
        **部署状态**: ${STATUS}
        **触发方式**: ${{ steps.deploy-params.outputs.trigger_type }}
        **部署环境**: ${{ steps.deploy-params.outputs.environment }}
        **镜像标签**: ${{ steps.deploy-params.outputs.image_tag }}
        **提交信息**: ${{ github.event.head_commit.message || '手动触发部署' }}
        **提交者**: ${{ github.actor }}
        **分支**: ${{ github.ref_name }}
        **时间**: $(date '+%Y-%m-%d %H:%M:%S')
        
        **查看详情**: [GitHub Actions](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }})"
        
        # 发送到Server酱
        if [ -n "${{ secrets.SERVERCHAN_KEY }}" ]; then
          echo "📱 准备发送Server酱通知..."
          
          # 转义特殊字符以确保JSON格式正确
          ESCAPED_TITLE=$(echo "${TITLE}" | sed 's/"/\\"/g' | sed 's/\\/\\\\/g')
          ESCAPED_MESSAGE=$(echo "${MESSAGE}" | sed 's/"/\\"/g' | sed 's/\\/\\\\/g')
          
          # 创建JSON payload
          JSON_PAYLOAD="{\"title\": \"${ESCAPED_TITLE}\", \"desp\": \"${ESCAPED_MESSAGE}\"}"
          
          echo "🔗 发送到: https://sctapi.ftqq.com/${{ secrets.SERVERCHAN_KEY }}.send"
          echo "📝 标题: ${TITLE}"
          
          # 发送请求并捕获响应
          RESPONSE=$(curl --location "https://sctapi.ftqq.com/${{ secrets.SERVERCHAN_KEY }}.send" \
            --header "Content-Type: application/json" \
            --data "${JSON_PAYLOAD}" \
            --write-out "HTTPSTATUS:%{http_code}" \
            --silent)
          
          # 分离HTTP状态码和响应体
          HTTP_STATUS=$(echo $RESPONSE | tr -d '\n' | sed -e 's/.*HTTPSTATUS://')
          RESPONSE_BODY=$(echo $RESPONSE | sed -e 's/HTTPSTATUS:.*//g')
          
          echo "📊 HTTP状态码: ${HTTP_STATUS}"
          echo "📄 响应内容: ${RESPONSE_BODY}"
          
          if [ "${HTTP_STATUS}" -eq 200 ]; then
            echo "✅ Server酱通知发送成功"
          else
            echo "❌ Server酱通知发送失败 (HTTP ${HTTP_STATUS})"
            echo "🔍 错误详情: ${RESPONSE_BODY}"
          fi
        else
          echo "⚠️ 未配置Server酱密钥，跳过通知"
          echo "💡 提示: 请在GitHub Secrets中添加 SERVERCHAN_KEY"
        fi