关于DevOps 自动化部署的几点记录

# 登录服务器
ssh server

# 拉取代码
cd /var/www/myapp
git pull

# 安装依赖
npm install

# 构建项目
npm run build

# 重启服务
pm2 restart myapp

#!/bin/bash
# deploy.sh

set -e

APP_DIR="/var/www/myapp"
APP_NAME="myapp"

echo "开始部署 ${APP_NAME}"

# 拉取代码
cd ${APP_DIR}
git pull origin main

# 安装依赖
npm ci

# 构建项目
npm run build

# 重启服务
pm2 restart ${APP_NAME}

echo "部署完成"

# deploy.yml
- hosts: servers
  become: yes
  tasks:
    - name: Update code
      git:
        repo: https://github.com/example/myapp.git
        dest: /var/www/myapp
        version: main
    
    - name: Install dependencies
      npm:
        path: /var/www/myapp
    
    - name: Build project
      command: npm run build
      args:
        chdir: /var/www/myapp
    
    - name: Restart service
      command: pm2 restart myapp

# main.tf
provider "aws" {
  region = "us-west-1"
}

# 创建 EC2 实例
resource "aws_instance" "web" {
  ami           = "ami-0c55b159cbfafe1f0"
  instance_type = "t2.micro"
  
  tags = {
    Name = "web-server"
  }
}

# 创建安全组
resource "aws_security_group" "web" {
  name        = "web-sg"
  description = "Allow HTTP traffic"
  
  ingress {
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

# 输出实例 IP
output "instance_ip" {
  value = aws_instance.web.public_ip
}

# deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
spec:
  replicas: 3
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: myapp:latest
        ports:
        - containerPort: 80
        resources:
          requests:
            memory: "128Mi"
            cpu: "100m"
          limits:
            memory: "256Mi"
            cpu: "200m"
        livenessProbe:
          httpGet:
            path: /health
            port: 80
          initialDelaySeconds: 30
          periodSeconds: 10
        readinessProbe:
          httpGet:
            path: /ready
            port: 80
          initialDelaySeconds: 5
          periodSeconds: 5

---
apiVersion: v1
kind: Service
metadata:
  name: myapp
spec:
  selector:
    app: myapp
  ports:
  - port: 80
    targetPort: 80
  type: LoadBalancer

# 创建 Chart
helm create myapp
cd myapp

# values.yaml
replicaCount: 3

image:
  repository: myapp
  pullPolicy: IfNotPresent
  tag: "1.0.0"

service:
  type: LoadBalancer
  port: 80

resources:
  limits:
    cpu: 200m
    memory: 256Mi
  requests:
    cpu: 100m
    memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 3
  maxReplicas: 10
  targetCPUUtilizationPercentage: 80

# 部署
helm install myapp ./myapp

# 升级
helm upgrade myapp ./myapp --set image.tag=2.0.0

# 回滚
helm rollback myapp

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

# myapp.yaml
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: myapp
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://github.com/example/myapp.git
    targetRevision: HEAD
    path: k8s
  destination:
    server: https://kubernetes.default.svc
    namespace: default
  syncPolicy:
    automated:
      prune: true
      selfHeal: true

# .github/workflows/deploy.yml
name: Deploy

on:
  push:
    branches: [ main ]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      
      - name: Build Docker image
        run: |
          docker build -t myapp:${{ github.sha }} .
          docker tag myapp:${{ github.sha }} myapp:latest
      
      - name: Push to registry
        run: |
          docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
          docker push myapp:${{ github.sha }}
          docker push myapp:latest
  
  deploy:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Deploy to Kubernetes
        run: |
          kubectl set image deployment/myapp myapp=myapp:${{ github.sha }}
          kubectl rollout status deployment/myapp

apiVersion: argoproj.io/v1alpha1
kind: Rollout
metadata:
  name: myapp
spec:
  replicas: 3
  strategy:
    canary:
      steps:
      - setWeight: 10
      - pause: { duration: 1h }
      - setWeight: 30
      - pause: { duration: 1h }
      - setWeight: 50
      - pause: { duration: 1h }
      - setWeight: 100
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: myapp:latest
        ports:
        - containerPort: 80

# Helm Chart
annotations:
  "helm.sh/hook": post-upgrade
  "helm.sh/hook-delete-policy": before-hook-creation

# 或者在部署脚本中
if ! kubectl rollout status deployment/myapp --timeout=5m; then
  kubectl rollout undo deployment/myapp
  exit 1
fi

# configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: myapp-config
data:
  DATABASE_URL: "postgres://db:5432/myapp"
  REDIS_URL: "redis://redis:6379"

# secret.yaml
apiVersion: v1
kind: Secret
metadata:
  name: myapp-secret
type: Opaque
stringData:
  API_KEY: "your-api-key"

# deployment.yaml
resources:
  requests:
    memory: "128Mi"
    cpu: "100m"
  limits:
    memory: "256Mi"
    cpu: "200m"

# 清理策略
revisionHistoryLimit: 10