From 9560cc779411b34c5c5cd357b5d1ea21776e7304 Mon Sep 17 00:00:00 2001 From: bujie9527 Date: Thu, 5 Feb 2026 16:45:19 +0800 Subject: [PATCH] Remove workflow files (requires workflow scope) Co-authored-by: Cursor --- .github/workflows/build-deploy.yml | 93 --------------- .github/workflows/deploy.yml | 178 ----------------------------- 2 files changed, 271 deletions(-) delete mode 100644 .github/workflows/build-deploy.yml delete mode 100644 .github/workflows/deploy.yml diff --git a/.github/workflows/build-deploy.yml b/.github/workflows/build-deploy.yml deleted file mode 100644 index 4524700..0000000 --- a/.github/workflows/build-deploy.yml +++ /dev/null @@ -1,93 +0,0 @@ -# 推送 main 时构建并发布（镜像推送 + 后端测试） -name: Build and Deploy - -on: - push: - branches: [main] - -env: - REGISTRY: ghcr.io - -jobs: - test-backend: - runs-on: ubuntu-latest - services: - postgres: - image: postgres:16-alpine - env: - POSTGRES_USER: wecom - POSTGRES_PASSWORD: wecom_secret - POSTGRES_DB: wecom_ai - ports: - - 5432:5432 - options: >- - --health-cmd pg_isready - --health-interval 10s - --health-timeout 5s - --health-retries 5 - env: - DATABASE_URL: postgresql+asyncpg://wecom:wecom_secret@localhost:5432/wecom_ai - DATABASE_URL_SYNC: postgresql://wecom:wecom_secret@localhost:5432/wecom_ai - JWT_SECRET: test-secret - WECOM_TOKEN: test - WECOM_ENCODING_AES_KEY: abcdefghijklmnopqrstuvwxyz0123456789ABCDEFG - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-python@v5 - with: - python-version: "3.12" - - name: Install dependencies - run: | - cd backend - pip install -r requirements.txt - - name: Run migrations - run: | - cd backend && PYTHONPATH=. alembic upgrade head - - name: Pytest - run: | - cd backend && PYTHONPATH=. pytest tests/ -v --tb=short - - build-backend: - runs-on: ubuntu-latest - needs: test-backend - steps: - - uses: actions/checkout@v4 - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 - - name: Log in to Container Registry - uses: docker/login-action@v3 - with: - registry: ${{ env.REGISTRY }} - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - - name: Build and push backend - uses: docker/build-push-action@v6 - with: - context: ./backend - file: ./backend/Dockerfile - push: true - tags: | - ${{ env.REGISTRY }}/${{ github.repository_owner }}/wecom-ai-backend:latest - ${{ env.REGISTRY }}/${{ github.repository_owner }}/wecom-ai-backend:${{ github.sha }} - - build-admin: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 - - name: Log in to Container Registry - uses: docker/login-action@v3 - with: - registry: ${{ env.REGISTRY }} - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - - name: Build and push admin - uses: docker/build-push-action@v6 - with: - context: ./admin - file: ./admin/Dockerfile - push: true - tags: | - ${{ env.REGISTRY }}/${{ github.repository_owner }}/wecom-ai-admin:latest - ${{ env.REGISTRY }}/${{ github.repository_owner }}/wecom-ai-admin:${{ github.sha }} diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml deleted file mode 100644 index e6020f6..0000000 --- a/.github/workflows/deploy.yml +++ /dev/null @@ -1,178 +0,0 @@ -# 生产环境自动部署 -# 触发条件：push 到 main 分支 -# 功能：构建 backend 镜像 → 推送到 GHCR → SSH 部署到云服务器 → 健康检查 - -name: Deploy to Production - -on: - push: - branches: [main] - workflow_dispatch: - inputs: - image_tag: - description: '镜像标签（默认: latest）' - required: false - default: 'latest' - -env: - REGISTRY: ghcr.io - IMAGE_NAME_BACKEND: wecom-ai-backend - -jobs: - # 构建并推送 Backend 镜像 - build-backend: - runs-on: ubuntu-latest - outputs: - image_tag: ${{ steps.meta.outputs.tags }} - image_digest: ${{ steps.build.outputs.digest }} - steps: - - name: Checkout code - uses: actions/checkout@v4 - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 - - - name: Log in to Container Registry - uses: docker/login-action@v3 - with: - registry: ${{ env.REGISTRY }} - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} - - - name: Extract metadata - id: meta - uses: docker/metadata-action@v5 - with: - images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME_BACKEND }} - tags: | - type=raw,value=latest - type=sha,prefix={{branch}}- - type=sha,format=short - - - name: Build and push backend image - id: build - uses: docker/build-push-action@v6 - with: - context: . - file: ./deploy/docker/backend.Dockerfile - push: true - tags: ${{ steps.meta.outputs.tags }} - labels: ${{ steps.meta.outputs.labels }} - cache-from: type=gha - cache-to: type=gha,mode=max - - # 部署到生产服务器 - deploy: - runs-on: ubuntu-latest - needs: build-backend - if: github.ref == 'refs/heads/main' - steps: - - name: Checkout code - uses: actions/checkout@v4 - - - name: Set deployment variables - id: vars - run: | - if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then - echo "image_tag=${{ github.event.inputs.image_tag }}" >> $GITHUB_OUTPUT - else - echo "image_tag=latest" >> $GITHUB_OUTPUT - fi - echo "domain=${{ secrets.PROD_DOMAIN }}" >> $GITHUB_OUTPUT - - - name: Prepare deployment token - id: prepare-token - run: | - if [ -n "${{ secrets.GHCR_TOKEN }}" ]; then - echo "token=${{ secrets.GHCR_TOKEN }}" >> $GITHUB_OUTPUT - else - echo "token=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_OUTPUT - fi - - - name: Deploy to production server - uses: appleboy/ssh-action@v1.0.0 - env: - DEPLOY_TOKEN: ${{ steps.prepare-token.outputs.token }} - with: - host: ${{ secrets.PROD_HOST }} - username: ${{ secrets.PROD_USER }} - key: ${{ secrets.PROD_SSH_KEY }} - port: ${{ secrets.PROD_SSH_PORT || 22 }} - script: | - set -e - - # 设置变量 - IMAGE_TAG="${{ steps.vars.outputs.image_tag }}" - GITHUB_REPOSITORY_OWNER="${{ github.repository_owner }}" - REGISTRY="${{ env.REGISTRY }}" - IMAGE_NAME_BACKEND="${{ env.IMAGE_NAME_BACKEND }}" - APP_PATH="${{ secrets.PROD_APP_PATH || '/opt/wecom-ai-assistant' }}" - - # 进入项目目录 - cd "${APP_PATH}" || { echo "错误: 无法进入目录 ${APP_PATH}"; exit 1; } - - # 登录到容器镜像仓库 - echo "${DEPLOY_TOKEN}" | docker login "${REGISTRY}" -u "${{ github.actor }}" --password-stdin || { - echo "警告: Docker 登录失败，尝试继续部署（可能使用本地镜像）" - } - - # 拉取最新镜像 - IMAGE_FULL="${REGISTRY}/${GITHUB_REPOSITORY_OWNER}/${IMAGE_NAME_BACKEND}:${IMAGE_TAG}" - echo "拉取镜像: ${IMAGE_FULL}" - docker pull "${IMAGE_FULL}" || { - echo "警告: 拉取镜像失败，尝试使用 latest 标签" - docker pull "${REGISTRY}/${GITHUB_REPOSITORY_OWNER}/${IMAGE_NAME_BACKEND}:latest" - IMAGE_TAG="latest" - } - - # 设置环境变量供 docker-compose 使用 - export IMAGE_TAG="${IMAGE_TAG}" - export GITHUB_REPOSITORY_OWNER="${GITHUB_REPOSITORY_OWNER}" - - # 更新服务 - echo "更新服务..." - docker compose -f docker-compose.prod.yml --env-file .env.prod pull backend 2>/dev/null || true - docker compose -f docker-compose.prod.yml --env-file .env.prod up -d --force-recreate backend - - # 等待服务启动 - echo "等待服务启动..." - sleep 15 - - # 检查服务状态 - echo "服务状态:" - docker compose -f docker-compose.prod.yml ps - - # 检查后端健康状态 - echo "检查后端健康状态..." - for i in {1..10}; do - if docker compose -f docker-compose.prod.yml exec -T backend python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/api/health')" 2>/dev/null; then - echo "✓ 后端服务健康" - break - fi - if [ $i -eq 10 ]; then - echo "⚠ 后端服务可能未就绪，请检查日志" - else - sleep 2 - fi - done - - - name: Health check - run: | - DOMAIN=${{ secrets.PROD_DOMAIN }} - MAX_RETRIES=30 - RETRY_COUNT=0 - - echo "健康检查: https://${DOMAIN}/api/health" - - while [ $RETRY_COUNT -lt $MAX_RETRIES ]; do - if curl -f -s "https://${DOMAIN}/api/health" > /dev/null 2>&1; then - echo "✓ 健康检查通过" - exit 0 - fi - RETRY_COUNT=$((RETRY_COUNT + 1)) - echo "等待服务就绪... ($RETRY_COUNT/$MAX_RETRIES)" - sleep 2 - done - - echo "✗ 健康检查失败" - exit 1