Files
fxhnt/scripts/argo-deploy-cockpit.sh
jgrusewski be37128e0a deploy(cockpit): Argo CI/CD (in-cluster Kaniko build + deploy) + real-secret manifests
Argo WorkflowTemplate fxhnt-cockpit mirrors foxhunt's build-ci-image (Kaniko) + compile-and-deploy (kubectl):
clones root/fxhnt over in-cluster gitlab-shell, builds infra/docker/fxhnt.Dockerfile to the internal registry
(native registry+token access, no laptop push, no private-CA trust), applies manifests + rolls the dashboard.
Manifests corrected to the cluster's real secrets: DSN via PGPASSWORD (db-credentials), DATABENTO via
databento-credentials, TS via tailscale-auth; image -> internal gitlab registry.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 13:23:29 +02:00

25 lines
868 B
Bash
Executable File

#!/usr/bin/env bash
# Build + deploy the fxhnt cockpit via Argo Workflows (in-cluster Kaniko build, no laptop push).
#
# Prereqs (one-time): the `fxhnt-cockpit` WorkflowTemplate is registered
# (kubectl -n foxhunt apply -f infra/argo/cockpit-build-deploy.yaml)
# and this repo is pushed to the in-cluster GitLab as root/fxhnt.git.
#
# Usage:
# ./scripts/argo-deploy-cockpit.sh # build+deploy HEAD of root/fxhnt master
# ./scripts/argo-deploy-cockpit.sh <commit-sha> # a specific commit
set -euo pipefail
SHA="${1:-HEAD}"
NS="foxhunt"
# Resolve HEAD to the real master sha so the in-cluster clone checks out exactly what was pushed.
if [ "$SHA" = "HEAD" ]; then
SHA="$(git rev-parse HEAD)"
fi
echo "Submitting fxhnt-cockpit build+deploy for ${SHA} ..."
argo submit -n "$NS" --from=wftmpl/fxhnt-cockpit \
-p commit-sha="$SHA" \
--watch