Разбиваем монолит на два микросервиса и реализуем CI/CD

name: Monolith CI/CD
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
jobs:
  package:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Set up JDK 17
      uses: actions/setup-java@v3
      with:
        java-version: 17
        distribution: temurin
    - name: Package project
      run: mvn -B clean package

name: Cache Maven packages
  uses: actions/cache@v3
  with:
    path: ~/.m2
    key: ${{runner.os}}-m2-${{hashFiles('**/pom.xml')}}
    restore-keys: ${{runner.os}}-m2

run: mkdir artifact && cp target/*.jar artifact
uses: actions/upload-artifact@v3
  with:
    name: application
    path: artifact

services:
  postgres:
    image: postgres:15
    env:
      POSTGRES_DB: posts
      POSTGRES_USER: posts
      POSTGRES_PASSWORD: secret
    ports:
      - 5432:5432
    options: --health-cmd pg_isready

jobs:
  unit-tests:
    runs-on: ubuntu-latest
    steps:
      - name: Run unit tests
        run: mvn -B test
  
  integration-tests:
    runs-on: ubuntu-latest
    needs: unit-tests
    strategy:
      matrix:
        partition: [1, 2, 3]
    steps:
      - name: Run integration tests
        run: mvn -B verify -Dtest.partition=${{ matrix.partition }}

name: SonarQube analysis
  run: |
    mvn sonar:sonar \
      -Dsonar.projectKey=my-project \
      -Dsonar.host.url=${{ secrets.SONAR_URL }} \
      -Dsonar.login=${{ secrets.SONAR_TOKEN }}

name: Deploy blue environment
  run: |
    kubectl apply -f k8s/blue/
    kubectl wait --for=condition=available deployment/app-blue
    
name: Switch traffic
  run: |
    kubectl patch service main -p '{"spec":{"selector":{"env":"blue"}}}'

name: Deploy canary
  run: |
    kubectl apply -f k8s/canary/
    kubectl scale deployment/app-canary --replicas=1
 
name: Gradual traffic shift
  run: |
    for i in 10 30 50 80 100; do
      kubectl patch service main -p "{"spec":{"trafficPolicy":"$i"}}"
      sleep 300
      if ! check_health_metrics; then
        kubectl rollback
        exit 1
      fi
    done

name: Get secrets
  uses: hashicorp/vault-action@v2
  with:
    url: ${{ secrets.VAULT_ADDR }}
    token: ${{ secrets.VAULT_TOKEN }}
    secrets: |
      secret/data/database username | DB_USER ;
      secret/data/database password | DB_PASS

name: Create preview environment
  if: github.event_name == 'pull_request'
  run: |
    export NAMESPACE="preview-${GITHUB_HEAD_REF}"
    kubectl create namespace $NAMESPACE
    helm install myapp ./charts/myapp -n $NAMESPACE

name: Health check
  id: health
  run: |
    for i in {1..30}; do
      if curl -f [url]http://app-health/;[/url] then
        exit 0
      fi
      sleep 10
    done
    exit 1
 
name: Rollback on failure
  if: failure() && steps.health.outcome == 'failure'
  run: kubectl rollout undo deployment/myapp

version: 2
updates:
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10

name: Deploy to environment
  run: |
    helm upgrade --install myapp ./charts/myapp \
      --namespace ${ENVIRONMENT} \
      -f values.${ENVIRONMENT}.yaml \
      --set image.tag=${GITHUB_SHA}

name: Run database migrations
  run: |
    export FLYWAY_URL=${{ secrets.DB_URL }}
    export FLYWAY_USER=${{ secrets.DB_USER }}
    export FLYWAY_PASSWORD=${{ secrets.DB_PASSWORD }}
    flyway migrate

name: Scan container
  uses: aquasecurity/trivy-action@master
  with:
    image-ref: 'myapp:${{ github.sha }}'
    exit-code: '1'
    severity: 'CRITICAL,HIGH'

version: "3.8"
services:
  post-service:
    build: 
      context: ./post-service
      dockerfile: Dockerfile
    ports:
      - "8081:8081"
    environment:
      - SPRING_PROFILES_ACTIVE=docker
      - POSTGRES_HOST=postgres
    depends_on:
      - postgres
      - kafka
 
  monolith:
    build: ./monolith
    ports:
      - "8080:8080"
    environment:
      - SPRING_PROFILES_ACTIVE=docker
      - MONGODB_HOST=mongodb
    depends_on:
      - mongodb
      - kafka