Commit Graph

18 Commits

Author SHA1 Message Date
Your Name
a18e2f9c3f fix(security): 停用 GitHub production deploy 2026-05-12 16:22:16 +08:00
Your Name
ec5eaef31c chore(ci): enable Gitea Actions workflows 2026-05-02 15:20:01 +08:00
OG T
490cd546cb chore(ci): Disable deploy-prod.yml to prevent duplicate deployments
- Rename to deploy-prod.yml.disabled
- Keep only cd.yaml (v2.0) with full AIOPS features
- See: feedback_single_deploy_workflow.md

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 17:50:25 +08:00
OG T
ffc7b1fdcc fix(ci): Add concurrency control to prevent queue buildup
沿用 AIOPS 設計:
- cancel-in-progress: true - 新 commit 自動取消舊 workflow
- workflow_dispatch 支援手動觸發
- concurrency group 隔離不同分支

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 09:25:59 +08:00
OG T
e6197c8569 fix(ci): 使用正確的 Telegram secrets 名稱
TELEGRAM_BOT_TOKEN → OPENCLAW_TG_BOT_TOKEN
TELEGRAM_CHAT_ID → OPENCLAW_TG_CHAT_ID

這是已設定的 secrets 名稱,之前用錯名稱導致通知沒發出。

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-24 00:16:02 +08:00
OG T
8542632cff fix(ci): Harbor HTTP registry + Telegram secrets
CD 修復:
- 修復 buildx HTTP vs HTTPS 問題 (insecure registry 設定)
- 移除 UAT 環境 (違反 Memory 鐵律)
- 新增 Production 部署 Telegram 通知
- 修復 deploy-prod.yml 硬編碼 Token (改用 secrets)

docs:
- 新增 guidelines/ 結構化指引目錄
- ARCHITECTURE.md, FRONTEND.md, OPERATIONS.md

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-23 23:40:40 +08:00
OG T
3e730f16d4 fix(ci): Add Docker login step for Harbor authentication
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-23 18:53:23 +08:00
OG T
2aef693c0d fix(ci): Use monorepo root as Docker build context for API
Phase 6.4i requires the API Dockerfile to copy local packages
(lewooogo-brain, lewooogo-data) from the packages/ directory.
Changed build context from 'apps/api' to '.' (root) to allow
the Dockerfile to access the entire monorepo structure.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-23 18:43:07 +08:00
OG T
a825aa9634 fix(ci): exclude secrets.yaml from kubectl apply loop
Prevents CI/CD from overwriting manually patched K8s secrets.
Secrets should be managed separately (GitHub Secrets / sealed-secrets).

Root cause: 03-secrets.yaml contains CHANGE_ME placeholders,
causing pods to crash with "password authentication failed".

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-23 12:16:27 +08:00
OG T
fea6524f35 feat(ci): upgrade Telegram notification UX with HTML + Inline Keyboard
- Replace flat text format with structured HTML layout
- Add emoji section headers and visual separators
- Replace raw URLs with Inline Keyboard buttons
- Success: "查看部署紀錄" + "開啟正式站" buttons
- Failure: Only "查看部署紀錄" button
- Use JSON payload for proper Telegram API formatting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-23 00:37:26 +08:00
OG T
a2f7d128f3 fix: 域名正統化 - https://awoooi.wooo.work
- CORS 加入正式域名
- NEXT_PUBLIC_API_URL 設為 https://awoooi.wooo.work
- pydantic-settings WHITELIST 改用 property 避免 JSON 解析
- Nginx 已配置指向 K3s Worker (121)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-22 23:28:36 +08:00
OG T
13200076aa fix(ci): AIOPS 正統模式 - 直寫 Telegram Token + Worker 暫停
- Telegram 通知沿用 AIOPS 直寫 Token 寫法
- Worker replicas=0 暫停 (Phase 6.5 完善後啟用)
- 簡化 rollout 流程

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-22 20:05:02 +08:00
OG T
241e105d72 fix(ci): exclude kustomization.yaml from kubectl apply
kustomization.yaml 是給 -k 用的,不能直接 apply

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-22 19:09:31 +08:00
OG T
c6a36ab673 fix: simplify Telegram notification format 2026-03-22 19:04:50 +08:00
OG T
b5d4b50c52 fix: use IP for Harbor registry (avoid TLS cert issue) 2026-03-22 18:59:02 +08:00
OG T
a840bf975b Revert "ci: temp switch to ubuntu-latest for initial test"
This reverts commit 4bf0422363.
2026-03-22 18:37:41 +08:00
OG T
4bf0422363 ci: temp switch to ubuntu-latest for initial test 2026-03-22 18:36:47 +08:00
OG T
f037812f15 feat(phase8): CI/CD Pipeline 與 K8s 部署自動化
Phase 8 CI/CD 藍圖:
- GitHub Actions deploy-prod.yml (沿用 AIOPS 成熟模式)
- Signal Worker K8s Deployment
- Telegram Notify 閉環
- Bootstrap 自動化腳本

架構鐵律:
- Build: 110 金庫 (Harbor + Self-Hosted Runner)
- Deploy: 120 K3s Master
- 嚴禁 Docker Compose,K8s 唯一合法部署

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-22 18:01:01 +08:00