feat（Github Action）：补充Github Action

.github/workflows/alibabacloud.yml

@@ -17,7 +17,7 @@
 # 4. Change the values for the REGION_ID, REGISTRY, NAMESPACE, IMAGE, ACK_CLUSTER_ID, and ACK_DEPLOYMENT_NAME.
 #
 
-name: Build and Deploy to ACK
+name: Build and Push to ACR
 
 on:
   push:
@@ -25,18 +25,18 @@ on:
 
 # Environment variables available to all jobs and steps in this workflow.
 env:
-  REGION_ID: cn-hangzhou
-  REGISTRY: registry.cn-hangzhou.aliyuncs.com
-  NAMESPACE: namespace
-  IMAGE: repo
+  REGION_ID: cn-shenzhen
+  REGISTRY: mmc-registry.cn-shenzhen.cr.aliyuncs.com
+  NAMESPACE: sharefly
+  IMAGE: pms
   TAG: ${{ github.sha }}
-  ACK_CLUSTER_ID: clusterID
-  ACK_DEPLOYMENT_NAME: nginx-deployment
+  #ACK_CLUSTER_ID: clusterID
+  #ACK_DEPLOYMENT_NAME: nginx-deployment
 
-  ACR_EE_REGISTRY: myregistry.cn-hangzhou.cr.aliyuncs.com
-  ACR_EE_INSTANCE_ID: instanceID
-  ACR_EE_NAMESPACE: namespace
-  ACR_EE_IMAGE: repo
+  ACR_EE_REGISTRY: mmc-registry.cn-shenzhen.cr.aliyuncs.com
+  ACR_EE_INSTANCE_ID: cri-yhk5zgfc2v1sia6l
+  ACR_EE_NAMESPACE: sharefly
+  ACR_EE_IMAGE: pms
   ACR_EE_TAG: ${{ github.sha }}
 
 permissions:
@@ -45,36 +45,12 @@ permissions:
 jobs:
   build:
     runs-on: ubuntu-latest
-    environment: production
+    environment: dev
 
     steps:
       - name: Checkout
         uses: actions/checkout@v3
 
-    # 1.1 Login to ACR
-    - name: Login to ACR with the AccessKey pair
-      uses: aliyun/acr-login@v1
-      with:
-        region-id: "${{ env.REGION_ID }}"
-        access-key-id: "${{ secrets.ACCESS_KEY_ID }}"
-        access-key-secret: "${{ secrets.ACCESS_KEY_SECRET }}"
-
-    # 1.2 Buid and push image to ACR
-    - name: Build and push image to ACR
-      run: |
-        docker build --tag "$REGISTRY/$NAMESPACE/$IMAGE:$TAG" .
-        docker push "$REGISTRY/$NAMESPACE/$IMAGE:$TAG"
-
-    # 1.3 Scan image in ACR
-    - name: Scan image in ACR
-      uses: aliyun/acr-scan@v1
-      with:
-        region-id: "${{ env.REGION_ID }}"
-        access-key-id: "${{ secrets.ACCESS_KEY_ID }}"
-        access-key-secret: "${{ secrets.ACCESS_KEY_SECRET }}"
-        repository: "${{ env.NAMESPACE }}/${{ env.IMAGE }}"
-        tag: "${{ env.TAG }}"
-
       # 2.1 (Optional) Login to ACR EE
       - uses: actions/checkout@v3
       - name: Login to ACR EE with the AccessKey pair
@@ -91,32 +67,12 @@ jobs:
         run: |
           docker build -t "$ACR_EE_REGISTRY/$ACR_EE_NAMESPACE/$ACR_EE_IMAGE:$TAG" .
           docker push "$ACR_EE_REGISTRY/$ACR_EE_NAMESPACE/$ACR_EE_IMAGE:$TAG"
-    # 2.3 (Optional) Scan image in ACR EE
-    - name: Scan image in ACR EE
-      uses: aliyun/acr-scan@v1
-      with:
-        region-id: "${{ env.REGION_ID }}"
-        access-key-id: "${{ secrets.ACCESS_KEY_ID }}"
-        access-key-secret: "${{ secrets.ACCESS_KEY_SECRET }}"
-        instance-id: "${{ env.ACR_EE_INSTANCE_ID }}"
-        repository: "${{ env.ACR_EE_NAMESPACE}}/${{ env.ACR_EE_IMAGE }}"
-        tag: "${{ env.ACR_EE_TAG }}"
-
-    # 3.1 Set ACK context
-    - name: Set K8s context
-      uses: aliyun/ack-set-context@v1
-      with:
-        access-key-id: "${{ secrets.ACCESS_KEY_ID }}"
-        access-key-secret: "${{ secrets.ACCESS_KEY_SECRET }}"
-        cluster-id: "${{ env.ACK_CLUSTER_ID }}"
 
       # 3.2 Deploy the image to the ACK cluster
       - name: Set up Kustomize
         run: |-
+          cd kustomization/overlays/dev
           curl -s "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh"  | bash /dev/stdin 3.8.6
-    - name: Deploy
+      - name: Set Image
         run: |-
           ./kustomize edit set image REGISTRY/NAMESPACE/IMAGE:TAG=$REGISTRY/$NAMESPACE/$IMAGE:$TAG
\ No newline at end of file
-        ./kustomize build . | kubectl apply -f -
-        kubectl rollout status deployment/$ACK_DEPLOYMENT_NAME
-        kubectl get services -o wide

kustomization/base/ingress.yaml

-apiVersion: extensions/v1beta1
-kind: Ingress
-metadata:
-  name: pms-ingress
-  namespace: default
-spec:
-  rules:
-    - host: infra.mmcuav.cn
-      http:
-        paths:
-          - backend:
-              serviceName: pms-svc
-              servicePort: 8081
-            path: /
\ No newline at end of file
+#apiVersion: extensions/v1beta1
+#kind: Ingress
+#metadata:
+#  name: pms-ingress
+#  namespace: default
+#spec:
+#  rules:
+#    - host: infra.mmcuav.cn
+#      http:
+#        paths:
+#          - backend:
+#              serviceName: pms-svc
+#              servicePort: 8081
+#            path: /
\ No newline at end of file

kustomization/base/service.yaml

@@ -6,8 +6,9 @@ metadata:
 spec:
   selector:
     app: pms
-  type: LoadBalancer #NodePort
+  type: NodePort
   ports:
     - protocol: TCP
-      port: 8081
-      targetPort: 8081
\ No newline at end of file
+      port: 8099
+      targetPort: 8099
+      NodePort: 30099
\ No newline at end of file

kustomization/overlays/dev/ingress.yaml

-apiVersion: extensions/v1beta1
-kind: Ingress
-metadata:
-  name: pms-ingress
-spec:
-  rules:
-    - host: hello-dev.coolops.cn
-      http:
-        paths:
-          - backend:
-              serviceName: pms-svc
-              servicePort: 8081
-            path: /
\ No newline at end of file