ci: setup odoo 18 scaffolding and workflows
This commit is contained in:
maltayyar2
parent
30666a0784
commit
95f2a40cab
|
|
@ -0,0 +1,48 @@
|
|||
name: Auto Delete Branch After Merge
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
types: [closed]
|
||||
|
||||
jobs:
|
||||
delete-merged-branch:
|
||||
if: github.event.pull_request.merged == true
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Delete merged branch
|
||||
uses: actions/github-script@v7
|
||||
with:
|
||||
github-token: ${{ secrets.GH_TOKEN }}
|
||||
script: |
|
||||
const base = context.payload.pull_request.base.ref;
|
||||
const head = context.payload.pull_request.head.ref;
|
||||
const owner = context.repo.owner;
|
||||
const repo = context.repo.repo;
|
||||
|
||||
core.info(`Check Deletion for: ${head} (merged into ${base})`);
|
||||
|
||||
// Protected Patterns
|
||||
const protectedPrefixes = ["dev_", "preprod_", "master_", "main"];
|
||||
|
||||
// Check if head branch is protected
|
||||
const isProtected = protectedPrefixes.some(prefix => head.startsWith(prefix));
|
||||
|
||||
if (isProtected) {
|
||||
core.info(`🛡️ Branch '${head}' is a protected environment branch. Skipping deletion.`);
|
||||
return;
|
||||
}
|
||||
|
||||
// Additional Safety: Don't delete if it's not a standard feature/fix pattern?
|
||||
// User wants to clean up users branches.
|
||||
|
||||
try {
|
||||
core.info(`🧹 Deleting branch: ${head}`);
|
||||
await github.rest.git.deleteRef({
|
||||
owner,
|
||||
repo,
|
||||
ref: `heads/${head}`
|
||||
});
|
||||
core.info("✅ Branch deleted successfully.");
|
||||
} catch (error) {
|
||||
core.warning(`Failed to delete branch: ${error.message}`);
|
||||
}
|
||||
|
|
@ -0,0 +1,130 @@
|
|||
name: Hydra Deployment Manager (Odoo 18)
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- 'dev_**'
|
||||
- 'preprod_**'
|
||||
# - 'master_**'
|
||||
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
target_env:
|
||||
description: 'Target Environment'
|
||||
required: true
|
||||
type: choice
|
||||
options:
|
||||
- dev
|
||||
- preprod
|
||||
- prod
|
||||
default: 'dev'
|
||||
force_restart:
|
||||
description: 'Force Service Restart'
|
||||
required: true
|
||||
type: boolean
|
||||
default: true
|
||||
|
||||
jobs:
|
||||
deploy:
|
||||
runs-on: ubuntu-latest
|
||||
name: Deploy
|
||||
steps:
|
||||
- name: Extract Context
|
||||
id: context
|
||||
run: |
|
||||
REF_NAME=${{ github.ref_name }}
|
||||
EVENT_NAME=${{ github.event_name }}
|
||||
INPUT_ENV=${{ inputs.target_env }}
|
||||
|
||||
echo "Processing Event: $EVENT_NAME on Ref: $REF_NAME"
|
||||
|
||||
ENV=""
|
||||
MODULE=""
|
||||
PORT=""
|
||||
|
||||
# Logic:
|
||||
if [ "$EVENT_NAME" == "push" ]; then
|
||||
if [[ "$REF_NAME" == dev_* ]]; then
|
||||
ENV="dev"
|
||||
MODULE=${REF_NAME#dev_}
|
||||
elif [[ "$REF_NAME" == preprod_* ]]; then
|
||||
ENV="preprod"
|
||||
MODULE=${REF_NAME#preprod_}
|
||||
fi
|
||||
|
||||
elif [ "$EVENT_NAME" == "workflow_dispatch" ]; then
|
||||
ENV="$INPUT_ENV"
|
||||
if [[ "$REF_NAME" == dev_* ]]; then
|
||||
MODULE=${REF_NAME#dev_}
|
||||
elif [[ "$REF_NAME" == preprod_* ]]; then
|
||||
MODULE=${REF_NAME#preprod_}
|
||||
elif [[ "$REF_NAME" == master_* ]]; then
|
||||
MODULE=${REF_NAME#master_}
|
||||
else
|
||||
# Fallback assuming valid module name in branch suffix
|
||||
MODULE=${REF_NAME#*_}
|
||||
fi
|
||||
fi
|
||||
|
||||
# ODOO 18 PORT CONFIGURATION
|
||||
if [ "$ENV" == "dev" ]; then
|
||||
PORT="18000"
|
||||
elif [ "$ENV" == "preprod" ]; then
|
||||
PORT="18010"
|
||||
elif [ "$ENV" == "prod" ]; then
|
||||
PORT="18069"
|
||||
fi
|
||||
|
||||
echo "ENV=$ENV" >> $GITHUB_OUTPUT
|
||||
echo "MODULE=$MODULE" >> $GITHUB_OUTPUT
|
||||
echo "PORT=$PORT" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Deploy to Hydra Server (SSH)
|
||||
if: steps.context.outputs.ENV != ''
|
||||
uses: appleboy/ssh-action@v1.0.0
|
||||
with:
|
||||
host: ${{ secrets.HYDRA_HOST }}
|
||||
username: ${{ secrets.HYDRA_USER }}
|
||||
key: ${{ secrets.HYDRA_SSH_KEY }}
|
||||
port: 22
|
||||
script: |
|
||||
MODULE="${{ steps.context.outputs.MODULE }}"
|
||||
ENV="${{ steps.context.outputs.ENV }}"
|
||||
BRANCH="${{ github.ref_name }}"
|
||||
FORCE_RESTART="${{ inputs.force_restart }}"
|
||||
|
||||
echo "🚀 Deploying (Odoo 18) $MODULE to $ENV Environment..."
|
||||
|
||||
if [ "$ENV" == "dev" ]; then
|
||||
TARGET_ROOT="/root/odoo-infra/odoo18/addons/custom_modules"
|
||||
SERVICE="odoo-18"
|
||||
else
|
||||
echo "🚧 Environment '$ENV' folder structure is not yet created on the server for Odoo 18. Deployment simulated."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
TARGET_DIR="$TARGET_ROOT/$MODULE"
|
||||
|
||||
# Auto-create directory if it doesn't exist (First run)
|
||||
if [ ! -d "$TARGET_DIR" ]; then
|
||||
echo "✨ Creating new module directory: $TARGET_DIR"
|
||||
mkdir -p "$TARGET_DIR"
|
||||
# Initial clone logic handled by script usually, but here we can just git init if empty
|
||||
# Better to assume the setup script handles it, or handle it here:
|
||||
cd "$TARGET_DIR"
|
||||
git init
|
||||
git remote add origin git@github.com:hydracp9/odex30_standard.git
|
||||
fi
|
||||
|
||||
cd "$TARGET_DIR"
|
||||
echo "⬇️ Pulling changes from $BRANCH..."
|
||||
git fetch origin
|
||||
git reset --hard origin/$BRANCH
|
||||
|
||||
if [ "$FORCE_RESTART" == "true" ] || [ "${{ github.event_name }}" == "push" ]; then
|
||||
echo "🔄 Restarting Service ($SERVICE)..."
|
||||
cd /root/odoo-infra
|
||||
docker compose restart $SERVICE
|
||||
fi
|
||||
|
||||
echo "✅ Deployment Successful."
|
||||
|
|
@ -0,0 +1,71 @@
|
|||
name: Prevent Invalid Merges
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
types: [opened, reopened, synchronize, edited]
|
||||
|
||||
jobs:
|
||||
validate-merge-flow:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Validate Branch Flow
|
||||
uses: actions/github-script@v7
|
||||
with:
|
||||
script: |
|
||||
const base = context.payload.pull_request.base.ref;
|
||||
const head = context.payload.pull_request.head.ref;
|
||||
|
||||
core.info(`Checking Merge Flow: ${head} -> ${base}`);
|
||||
|
||||
// 1. Parse module name from base branch
|
||||
// Expected formats: dev_X, preprod_X, master_X
|
||||
const tiers = ["dev", "preprod", "master"];
|
||||
|
||||
function parseBranch(branchName) {
|
||||
for (const tier of tiers) {
|
||||
if (branchName.startsWith(tier + "_")) {
|
||||
return { tier: tier, module: branchName.substring(tier.length + 1) };
|
||||
}
|
||||
}
|
||||
return null; // Not a standard environment branch (maybe feature/fix)
|
||||
}
|
||||
|
||||
const baseInfo = parseBranch(base);
|
||||
const headInfo = parseBranch(head);
|
||||
|
||||
// If base is not a protected tier (dev/preprod/master), allow merge (feature -> feature)
|
||||
if (!baseInfo) {
|
||||
core.info("Base branch is not a protected environment tier. Merge allowed.");
|
||||
return;
|
||||
}
|
||||
|
||||
// Logic for Protected Base Branches
|
||||
|
||||
// ❌ Rule: Cannot merge directly into master from anywhere except preprod (of same module)
|
||||
if (baseInfo.tier === "master") {
|
||||
if (!headInfo || headInfo.tier !== "preprod" || headInfo.module !== baseInfo.module) {
|
||||
core.setFailed(`❌ Forbidden: You can ONLY merge into 'master_${baseInfo.module}' from 'preprod_${baseInfo.module}'. Detected: ${head}`);
|
||||
return;
|
||||
}
|
||||
}
|
||||
|
||||
// ❌ Rule: Cannot merge directly into preprod from anywhere except dev (of same module)
|
||||
if (baseInfo.tier === "preprod") {
|
||||
if (!headInfo || headInfo.tier !== "dev" || headInfo.module !== baseInfo.module) {
|
||||
core.setFailed(`❌ Forbidden: You can ONLY merge into 'preprod_${baseInfo.module}' from 'dev_${baseInfo.module}'. Detected: ${head}`);
|
||||
return;
|
||||
}
|
||||
}
|
||||
|
||||
// ❌ Rule: Cannot merge directly into dev from master or preprod (reverse flow)
|
||||
// (Optional: You might allow hotfixes, but strictly strictly dev<-feature is best)
|
||||
if (baseInfo.tier === "dev") {
|
||||
// Allow feature branches to merge into dev
|
||||
// Block upstream branches
|
||||
if (headInfo && (headInfo.tier === "master" || headInfo.tier === "preprod")) {
|
||||
core.setFailed(`❌ Forbidden: Cannot merge upstream (${head}) back into dev.`);
|
||||
return;
|
||||
}
|
||||
}
|
||||
|
||||
core.info("✅ Merge flow validation passed.");
|
||||
|
|
@ -1,35 +0,0 @@
|
|||
name: Pull Code
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- dev_odex_base
|
||||
- dev_odex_hr
|
||||
- dev_odex30_accounting
|
||||
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
environment:
|
||||
description: 'Select Server'
|
||||
required: true
|
||||
type: choice
|
||||
options:
|
||||
- dev
|
||||
default: dev
|
||||
|
||||
jobs:
|
||||
|
||||
deploy_dev_server:
|
||||
name: Deploy to dev server <159.89.22.77>
|
||||
runs-on: odex30-runner
|
||||
if: |
|
||||
(github.ref == 'refs/heads/dev_odex_base' || github.ref == 'refs/heads/dev_odex_hr' || github.ref == 'refs/heads/dev_odex30_accounting') &&
|
||||
(github.event_name == 'push' ||
|
||||
(github.event_name == 'workflow_dispatch' && github.event.inputs.environment != ''))
|
||||
|
||||
steps:
|
||||
- name: Checkout And Restart Project
|
||||
run: |
|
||||
echo "** [INFO] Running on branch --> ${GITHUB_REF#refs/heads/}"
|
||||
sudo chmod +x /home/${{ secrets.CLIENT_USER }}/scripts/pull/pull_code.sh
|
||||
sudo /home/${{ secrets.CLIENT_USER }}/scripts/pull/pull_code.sh
|
||||
|
|
@ -1,34 +0,0 @@
|
|||
name: Upgrade Module
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
database_name:
|
||||
description: 'Database Name'
|
||||
required: true
|
||||
type: string
|
||||
module_name:
|
||||
description: 'Module Name'
|
||||
required: true
|
||||
type: string
|
||||
environment:
|
||||
description: 'Select Server'
|
||||
required: true
|
||||
type: choice
|
||||
options:
|
||||
- dev
|
||||
default: dev
|
||||
|
||||
jobs:
|
||||
upgrade_master:
|
||||
name: Upgrade Dev server
|
||||
runs-on: odex30-runner
|
||||
if: github.event_name == 'workflow_dispatch' && github.event.inputs.environment == 'dev'
|
||||
steps:
|
||||
- name: Upgrade Module
|
||||
env:
|
||||
DATABASE_NAME: ${{ github.event.inputs.database_name }}
|
||||
MODULE_NAME: ${{ github.event.inputs.module_name }}
|
||||
run: |
|
||||
chmod +x /home/${{ secrets.CLIENT_USER }}/scripts/upgrade/upgrade-module.sh
|
||||
/home/${{ secrets.CLIENT_USER }}/scripts/upgrade/upgrade-module.sh "$DATABASE_NAME" "$MODULE_NAME"
|
||||
Loading…
Reference in New Issue