gitea-admin/CASAN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): run security-gate after frontend-tests to prevent OOM on 1GB VPS

Browse Source 
Both jobs running concurrently (two 512MB containers + gitea + vault) exhausted
the 1GB RAM. Make security-gate sequential with needs: [frontend-tests].
Also fix health-check to use docker ps instead of curl localhost (DooD mode).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
thanhnv
2026-07-01 13:47:20 +09:00
co-authored by Claude Sonnet 4.6
parent 6d46e36bf3
commit e83f306971
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+5 -2
View File
@@ -49,6 +49,7 @@ jobs:
security-gate: security-gate:
name: "CASAN Security Gate + Vault KMS (H4/H5)" name: "CASAN Security Gate + Vault KMS (H4/H5)"
runs-on: ubuntu-latest runs-on: ubuntu-latest
needs: [frontend-tests]
defaults: defaults:
run: run:
working-directory: AINative_OKR_CASAN5 working-directory: AINative_OKR_CASAN5
@@ -189,10 +190,12 @@ jobs:
run: | run: |
echo "Waiting 20 s for containers to initialise..." echo "Waiting 20 s for containers to initialise..."
sleep 20 sleep 20
if curl -sf http://localhost/ -o /dev/null; then echo "=== Running containers ==="
docker ps --filter "name=okr" --format "{{.Names}}\t{{.Status}}\t{{.Ports}}"
if docker ps --filter "name=okr-frontend" --filter "status=running" | grep -q okr-frontend; then
echo "DEPLOY_OK frontend=http://161.33.139.73" echo "DEPLOY_OK frontend=http://161.33.139.73"
else else
echo "DEPLOY_WARN frontend check failed — dumping logs" echo "DEPLOY_WARN containers not fully running — dumping logs"
docker logs okr-frontend --tail 30 || true docker logs okr-frontend --tail 30 || true
docker logs okr-backend --tail 30 || true docker logs okr-backend --tail 30 || true
fi fi