8236eb35ae
- admin-web-docker.yml: add 'test' job (Node 22, npm ci, tsc --noEmit, vitest run) gated by the anti-[skip ci] guard, wire needs: [test] on build-validation and semantic-release, and needs: [semantic-release, test] on build-and-push. Tests now run as a gate before Docker build validation on PRs and before semantic-release on main. - ci.yml: drop the redundant admin-web-test job (now covered by the test job in admin-web-docker.yml on PRs), remove the admin-web path filter and output from the changes job, simplify deploy-functions.needs. - scripts/verify-admin-web-docker.sh: update check_workflow_jobs to expect 4 jobs (test + build-validation + semantic-release + build-and-push) and check_workflow_needs to expect build-and-push needs [semantic-release, test] so the verify script stays green with the new job topology.
124 lines
4.1 KiB
YAML
124 lines
4.1 KiB
YAML
name: CI
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
# ── Path filter — determines which downstream jobs run ──
|
|
changes:
|
|
name: Detect Changes
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
youtube-worker: ${{ steps.filter.outputs.youtube-worker }}
|
|
supabase-functions: ${{ steps.filter.outputs.supabase-functions }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: dorny/paths-filter@v3
|
|
id: filter
|
|
with:
|
|
filters: |
|
|
youtube-worker:
|
|
- 'youtube-worker/**'
|
|
- '.github/workflows/ci.yml'
|
|
supabase-functions:
|
|
- 'supabase/functions/**'
|
|
- 'youtube-worker/**'
|
|
- '.github/workflows/ci.yml'
|
|
|
|
# ── YouTube Worker: Node.js microservice ──
|
|
youtube-worker-check:
|
|
name: YouTube Worker
|
|
needs: changes
|
|
if: needs.changes.outputs.youtube-worker == 'true'
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: youtube-worker
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '20'
|
|
cache: 'npm'
|
|
cache-dependency-path: youtube-worker/package-lock.json
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Validate syntax
|
|
run: node --check server.js
|
|
|
|
# ── Deploy: Supabase edge functions + YouTube worker ──
|
|
deploy-functions:
|
|
name: Deploy
|
|
needs: [changes, youtube-worker-check]
|
|
if: |
|
|
always() &&
|
|
github.ref == 'refs/heads/main' &&
|
|
github.event_name == 'push' &&
|
|
!contains(needs.*.result, 'failure') &&
|
|
(needs.changes.outputs.supabase-functions == 'true' ||
|
|
needs.changes.outputs.youtube-worker == 'true')
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Setup SSH
|
|
env:
|
|
DEPLOY_HOST: ${{ secrets.SUPABASE_DEPLOY_HOST }}
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.SUPABASE_SSH_KEY }}" > ~/.ssh/deploy_key
|
|
chmod 600 ~/.ssh/deploy_key
|
|
ssh-keyscan -H $DEPLOY_HOST >> ~/.ssh/known_hosts 2>/dev/null
|
|
|
|
- name: Deploy Supabase Edge Functions
|
|
env:
|
|
DEPLOY_HOST: ${{ secrets.SUPABASE_DEPLOY_HOST }}
|
|
DEPLOY_USER: ${{ secrets.SUPABASE_DEPLOY_USER }}
|
|
DEPLOY_PATH: ${{ secrets.SUPABASE_DEPLOY_PATH }}
|
|
run: |
|
|
rsync -avz --delete \
|
|
--exclude='node_modules' \
|
|
--exclude='.DS_Store' \
|
|
-e "ssh -i ~/.ssh/deploy_key" \
|
|
supabase/functions/ \
|
|
"$DEPLOY_USER@$DEPLOY_HOST:$DEPLOY_PATH/"
|
|
ssh -i ~/.ssh/deploy_key "$DEPLOY_USER@$DEPLOY_HOST" \
|
|
"docker restart supabase-edge-functions"
|
|
|
|
- name: Deploy YouTube Worker
|
|
env:
|
|
DEPLOY_HOST: ${{ secrets.SUPABASE_DEPLOY_HOST }}
|
|
DEPLOY_USER: ${{ secrets.SUPABASE_DEPLOY_USER }}
|
|
WORKER_PATH: /opt/supabase/youtube-worker
|
|
run: |
|
|
rsync -avz --delete \
|
|
--exclude='node_modules' \
|
|
--exclude='.DS_Store' \
|
|
-e "ssh -i ~/.ssh/deploy_key" \
|
|
youtube-worker/ \
|
|
"$DEPLOY_USER@$DEPLOY_HOST:$WORKER_PATH/"
|
|
ssh -i ~/.ssh/deploy_key "$DEPLOY_USER@$DEPLOY_HOST" "\
|
|
cd $WORKER_PATH && \
|
|
docker build -t youtube-worker:latest . && \
|
|
docker stop youtube-worker 2>/dev/null || true && \
|
|
docker rm youtube-worker 2>/dev/null || true && \
|
|
docker run -d \
|
|
--name youtube-worker \
|
|
--restart unless-stopped \
|
|
--network supabase_supabase-network \
|
|
-e SUPABASE_URL=\$(docker exec supabase-edge-functions printenv SUPABASE_URL) \
|
|
-e SUPABASE_SERVICE_ROLE_KEY=\$(docker exec supabase-edge-functions printenv SUPABASE_SERVICE_ROLE_KEY) \
|
|
-e SUPABASE_PUBLIC_URL=https://supabase.1000co.fr \
|
|
-e GEMINI_API_KEY=\$(cat /opt/supabase/.env.gemini 2>/dev/null || echo '') \
|
|
-e STORAGE_BUCKET=workout-audio \
|
|
-e PORT=3001 \
|
|
youtube-worker:latest"
|