Projeto do Agent Contas ORACLE
This commit is contained in:
157
azure-pipelines/prod.yaml
Normal file
157
azure-pipelines/prod.yaml
Normal file
@@ -0,0 +1,157 @@
|
||||
trigger:
|
||||
branches:
|
||||
include:
|
||||
- master
|
||||
|
||||
pool:
|
||||
name: Azure Pipelines
|
||||
vmImage: 'ubuntu-latest'
|
||||
|
||||
resources:
|
||||
repositories:
|
||||
- repository: templates
|
||||
type: git
|
||||
name: Data_Science_AI_ML/template-yaml-devops-mlops
|
||||
ref: master
|
||||
- repository: TEMPLATES_CICD
|
||||
type: git
|
||||
name: TEMPLATES_CICD/TEMPLATES_CICD
|
||||
ref: main
|
||||
|
||||
name: 0.1.$(Rev:r)
|
||||
|
||||
variables:
|
||||
- template: oke_agents_atendimento/variables.yaml@templates
|
||||
# Criar valor abaixo:
|
||||
- group: tim-ai-contas-agnt-prd
|
||||
- group: sa-timsa-it-agnt-ai-atendimento-cicd-prd-auth-token
|
||||
- name: imageRepository
|
||||
value: '$(ociRegistry)/$(OCI_NAMESPACE)/agnt-ai-atendimento/prd/agnt-ai-atendimento-contas'
|
||||
- name: K8S_NAMESPACE
|
||||
value: 'agnt-ai-atendimento-contas'
|
||||
# Confirmar dns
|
||||
- name: DNS
|
||||
value: agt-ai-atendimento-contas.internal.timbrasil.com.br
|
||||
# Vai precisar do IP DO adb?
|
||||
- name: IP_ADB
|
||||
value: 10.152.92.58
|
||||
# adb_host_1
|
||||
- name: HOST_ADB_1
|
||||
value: "raico8g3.adb.sa-saopaulo-1.oraclecloud.com"
|
||||
# adb_host_2
|
||||
- name: HOST_ADB_2
|
||||
value: "raico8g3.adb.sa-saopaulo-1.oraclecloudapps.com"
|
||||
- name: IP_LANGFUSE
|
||||
value: 10.152.6.254
|
||||
- name: DNS_LANGFUSE
|
||||
value: agt-ai-atendimento-langfuse.internal.timbrasil.com.br
|
||||
- name: IP_CLUSTER_AI
|
||||
value: 10.152.88.246
|
||||
- name: HOSTNAME_CLUSTER_AI
|
||||
value: pegruagnt001prd.pe.inference.generativeai.sa-saopaulo-1.oci.oraclecloud.com
|
||||
|
||||
stages:
|
||||
- stage: PrdBuild
|
||||
displayName: 'Build & Push (PRD)'
|
||||
jobs:
|
||||
- job: Build
|
||||
steps:
|
||||
- template: oke_agents_atendimento/certs_add.yaml@templates
|
||||
- script: |
|
||||
echo "$(auth-token)" | docker login $(ociRegistry) -u "$(OCI_NAMESPACE)/$(SA_NAME)" --password-stdin
|
||||
displayName: 'Login to OCI Registry'
|
||||
|
||||
- task: Docker@2
|
||||
displayName: 'Build the image'
|
||||
inputs:
|
||||
command: 'build'
|
||||
repository: $(imageRepository)
|
||||
dockerfile: '$(Build.SourcesDirectory)/Dockerfile'
|
||||
arguments: '--build-arg UV_INDEX_TIMBRASIL_USERNAME=XGH --build-arg UV_INDEX_TIMBRASIL_PASSWORD=$(System.AccessToken)'
|
||||
tags: |
|
||||
$(Build.BuildNumber)
|
||||
|
||||
- script: |
|
||||
docker push $(imageRepository):$(Build.BuildNumber)
|
||||
displayName: 'Push image to OCI Registry'
|
||||
|
||||
- stage: PrdDeploy
|
||||
dependsOn: PrdBuild
|
||||
condition: succeeded()
|
||||
displayName: 'Deploy to OKE (PRD)'
|
||||
jobs:
|
||||
- deployment: deployb8s
|
||||
displayName: 'Deploy Application'
|
||||
environment: 'agents_pnc_producao'
|
||||
pool:
|
||||
name: oci-kubernetes
|
||||
variables:
|
||||
IMAGE_REPOSITORY: '$(imageRepository)'
|
||||
IMAGE_TAG: '$(Build.BuildNumber)'
|
||||
APP_NAME: '$(Build.Repository.Name)'
|
||||
strategy:
|
||||
runOnce:
|
||||
deploy:
|
||||
steps:
|
||||
- checkout: self
|
||||
|
||||
- template: oke_agents_atendimento/autenticacao_kubernetes_v2.yaml@templates
|
||||
|
||||
- template: oke_agents_atendimento/sa_gcp_secret.yaml@templates
|
||||
|
||||
- script: |
|
||||
set -eo pipefail
|
||||
|
||||
envsubst < k8s/secrets_prod.yaml | kubectl apply -n $(K8S_NAMESPACE) -f -
|
||||
|
||||
displayName: 'Apply application secrets'
|
||||
env:
|
||||
TIM_BLOQUEIO_AUTH: $(TIM_BLOQUEIO_AUTH)
|
||||
TIM_CANCELAMENTO_AUTH: $(TIM_CANCELAMENTO_AUTH)
|
||||
TIM_COMPLETE_INVOICES_AUTH: $(TIM_COMPLETE_INVOICES_AUTH)
|
||||
TIM_CONSULTA_AUTH: $(TIM_CONSULTA_AUTH)
|
||||
TIM_CONTRATO_AUTH: $(TIM_CONTRATO_AUTH)
|
||||
TIM_PROFILE_BILL_AUTH: $(TIM_PROFILE_BILL_AUTH)
|
||||
TIM_PROFILE_FULL_AUTH: $(TIM_PROFILE_FULL_AUTH)
|
||||
TIM_PROTOCOL_AUTH: $(TIM_PROTOCOL_AUTH)
|
||||
TIM_SERVICE_REQUEST_STATUS_AUTH: $(TIM_SERVICE_REQUEST_STATUS_AUTH)
|
||||
TIM_LLM_GATEWAY_LANGFUSE_PUBLIC_KEY: "${TIM_LLM_GATEWAY_LANGFUSE_PUBLIC_KEY}"
|
||||
TIM_LLM_GATEWAY_LANGFUSE_SECRET_KEY: $(TIM_LLM_GATEWAY_LANGFUSE_SECRET_KEY)
|
||||
TIM_TRACKING_ACTIVITIES_AUTH: $(TIM_TRACKING_ACTIVITIES_AUTH)
|
||||
TIM_SMS_AUTH: $(TIM_SMS_AUTH)
|
||||
SMS_BARCODE_AUTH: $(SMS_BARCODE_AUTH)
|
||||
TIM_CUSTOMER_CONTESTATION_AUTH: $(TIM_CUSTOMER_CONTESTATION_AUTH)
|
||||
TIM_DIVERGENCIA_AUTH: $(TIM_DIVERGENCIA_AUTH)
|
||||
TIM_INVOICE_RECOVER_AUTH: $(TIM_INVOICE_RECOVER_AUTH)
|
||||
TIM_RAG_DB_USER: $(TIM_RAG_DB_USER)
|
||||
MONGODB_CONNECTION_STRING: $(MONGODB_CONNECTION_STRING)
|
||||
TIM_VAS_HISTORY_AUTH: $(TIM_VAS_HISTORY_AUTH)
|
||||
TIM_OBSERVABILITY_ENCRYPTION_KEY: $(TIM_OBSERVABILITY_ENCRYPTION_KEY)
|
||||
|
||||
- script: |
|
||||
set -eo pipefail
|
||||
|
||||
kubectl create secret generic ${APP_NAME}-api-secrets-extras \
|
||||
--from-literal=TIM_RAG_DB_PASSWORD="${TIM_RAG_DB_PASSWORD}" \
|
||||
-n $(K8S_NAMESPACE) \
|
||||
--dry-run=client -o yaml | kubectl apply -f -
|
||||
displayName: 'Secrets with special characters'
|
||||
env:
|
||||
TIM_RAG_DB_PASSWORD: $(TIM_RAG_DB_PASSWORD)
|
||||
|
||||
- template: oke_agents_atendimento/apply_env_as_configmap.yaml@templates
|
||||
parameters:
|
||||
envFile: '.env.kube.prd'
|
||||
|
||||
- template: oke_agents_atendimento/helm_deploy.yaml@templates
|
||||
parameters:
|
||||
FilePathK8sManifest: 'k8s/deployment_prd.yaml'
|
||||
timeout: '180s'
|
||||
|
||||
# - stage: CreateWIT
|
||||
# displayName: 'Create WIT Entrega (Manual)'
|
||||
# dependsOn: []
|
||||
# jobs:
|
||||
# - template: wi_entrega/wi_entrega.yaml@templates
|
||||
# parameters:
|
||||
# environmentName: 'WI_entrega'
|
||||
Reference in New Issue
Block a user