feat: ci on kontinuous (#367)

.github/workflows/deactivate.yaml

@@ -0,0 +1,23 @@
+name: ♻️ Deactivate
+on:
+  pull_request:
+    types: [closed]
+  delete:
+    branches:
+      - "**"
+      - "!v*"
+      - "!master"
+      - "!main"
+      - "!dev"
+      - "!develop"
+      - "!**/persist"
+      - "!persist/**"
+      - "!**/persist/**"
+      - "!persist-**"
+      - "!**-persist"
+      - "!**-persist-**"
+
+jobs:
+  socialgouv:
+    uses: socialgouv/workflows/.github/workflows/use-ks-gh-deactivate.yaml@v1
+    secrets: inherit

.github/workflows/preproduction.yaml

@@ -0,0 +1,17 @@
+name: 😎 PreProd
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - "master"
+      - "main"
+
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
+
+jobs:
+  socialgouv:
+    name: "🇫🇷 SocialGouv"
+    uses: socialgouv/workflows/.github/workflows/use-ks-gh-preproduction.yaml@v1
+    secrets: inherit

.github/workflows/production.yaml

@@ -0,0 +1,16 @@
+name: 🚀 Production
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - v*
+
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
+
+jobs:
+  socialgouv:
+    name: "🇫🇷 SocialGouv"
+    uses: socialgouv/workflows/.github/workflows/use-ks-gh-production.yaml@v1
+    secrets: inherit

.github/workflows/release.yml

@@ -1,34 +1,15 @@
 name: Release
-
 on:
   workflow_dispatch:
   push:
-    branches: [master]
-
+    branches: [master, alpha, beta, next]
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v2
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@v2
-        with:
-          semantic_version: 17
-          extra_plugins: |
-            @semantic-release/[email protected]
-            @semantic-release/[email protected]
-          branches: |
-            [
-              '+([0-9])?(.{+([0-9]),x}).x',
-              'master', 
-              {name: 'beta', prerelease: true}, 
-              {name: 'alpha', prerelease: true}
-            ]
-        env:
-          GITHUB_TOKEN: ${{ secrets.SOCIALGROOVYBOT_BOTO_PAT }}
+    - uses: socialgouv/workflows/actions/semantic-release@v1
+      with:
+        github-token: ${{ secrets.SOCIALGROOVYBOT_BOTO_PAT }}
+        author-name: ${{ secrets.SOCIALGROOVYBOT_NAME }}
+        author-email: ${{ secrets.SOCIALGROOVYBOT_EMAIL }}

.github/workflows/review-auto.yaml

@@ -0,0 +1,16 @@
+name: 👓 Review Auto
+on:
+  push:
+    branches:
+      - "feat/**"
+      - "fix/**"
+
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
+
+jobs:
+  socialgouv:
+    name: "🇫🇷 SocialGouv"
+    uses: socialgouv/workflows/.github/workflows/use-ks-gh-review-auto.yaml@v1
+    secrets: inherit

.github/workflows/review.yaml

@@ -0,0 +1,19 @@
+name: 👀 Review
+on:
+  push:
+    branches:
+      - "**"
+      - "!master"
+      - "!main"
+      - "!feat/**"
+      - "!fix/**"
+
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
+
+jobs:
+  socialgouv:
+    name: "🇫🇷 SocialGouv"
+    uses: socialgouv/workflows/.github/workflows/use-ks-gh-review.yaml@v1
+    secrets: inherit

.kube-workflow/dev/templates/api.sealed-secret.yaml → .kontinuous/env/dev/templates/api.sealed-secret.yaml

@@ -4,7 +4,6 @@ metadata:
   annotations:
     sealedsecrets.bitnami.com/cluster-wide: "true"
   name: api
-  namespace: ozensemble
 spec:
   encryptedData:
     FCM_API_KEY: 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

.kontinuous/env/dev/values.yaml

@@ -0,0 +1,4 @@
+jobs:
+  runs:
+    db:
+      use: create-db

.kube-workflow/preprod/templates/api.sealed-secret.yaml → .kontinuous/env/preprod/templates/api.sealed-secret.yaml

@@ -4,7 +4,6 @@ metadata:
   annotations:
     sealedsecrets.bitnami.com/cluster-wide: "true"
   name: api
-  namespace: ozensemble-preprod
 spec:
   encryptedData:
     FCM_API_KEY: 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

.kube-workflow/values.yaml → .kontinuous/values.yaml

@@ -1,9 +1,14 @@
 app:
-  enabled: true
   containerPort: 3000
   probesPath: /healthz
   envFrom:
     - secretRef:
         name: "pg-user"
     - secretRef:
         name: api
+
+jobs:
+  runs:
+    build-app:
+      with:
+        context: api