baiyue-firstleg/deploy/scripts/deploy-services.sh

#!/usr/bin/env sh
set -eu

if [ "$#" -ne 5 ]; then
  echo "用法: $0 <环境> <镜像仓库> <镜像标签> <逗号分隔服务> <环境文件>" >&2
  exit 2
fi

DEPLOY_ENV="$1"
IMAGE_REPOSITORY="$2"
IMAGE_TAG="$3"
SERVICE_CSV="$4"
ENV_FILE="$5"

if [ ! -f "$ENV_FILE" ]; then
  echo "环境文件不存在: $ENV_FILE" >&2
  exit 2
fi

SERVICES=$(printf '%s' "$SERVICE_CSV" | tr ',' ' ')

for service in $SERVICES; do
  case "$service" in
    *[!A-Za-z0-9_-]*|'')
      echo "非法服务名: $service" >&2
      exit 2
      ;;
  esac
done

env_file_has_key() {
  grep -q "^$1=" "$ENV_FILE"
}

env_file_value() {
  sed -n "s/^$1=//p" "$ENV_FILE" | tail -n 1 | tr -d '\r'
}

DEPLOY_REGION=CN
for service in $SERVICES; do
  case "$service" in
    gateway-overseas|lastleg-service|warehouse-overseas-service|overseas-security-service) DEPLOY_REGION=OVERSEAS ;;
    event-bridge-service)
      BRIDGE_REGION="${EVENT_BRIDGE_REGION_OVERRIDE:-}"
      if [ -z "$BRIDGE_REGION" ] && env_file_has_key REGION_CODE; then
        BRIDGE_REGION="$(env_file_value REGION_CODE)"
      fi
      if [ -z "$BRIDGE_REGION" ]; then
        echo "部署 event-bridge-service 时，环境文件必须显式包含 REGION_CODE=CN 或 REGION_CODE=OVERSEAS" >&2
        exit 2
      fi
      case "$BRIDGE_REGION" in
        CN) ;;
        OVERSEAS) DEPLOY_REGION=OVERSEAS ;;
        *) echo "部署 event-bridge-service 时，REGION_CODE 只能为 CN 或 OVERSEAS" >&2; exit 2 ;;
      esac
      ;;
  esac
done
if [ "$DEPLOY_REGION" = "OVERSEAS" ]; then
  for service in $SERVICES; do
    case "$service" in
      gateway-overseas|lastleg-service|warehouse-overseas-service|overseas-security-service|event-bridge-service) ;;
      *) echo "一次部署不得混合国内与海外服务: $SERVICE_CSV" >&2; exit 2 ;;
    esac
  done
  COMPOSE_FILE="deploy/docker-compose.overseas.yml"
  PROJECT_NAME="firstleg-${DEPLOY_ENV}-overseas"
else
  COMPOSE_FILE="deploy/docker-compose.yml"
  PROJECT_NAME="firstleg-${DEPLOY_ENV}"
fi

if [ "$DEPLOY_REGION" = "OVERSEAS" ]; then
  for key in NACOS_SERVER_ADDR OVERSEAS_NACOS_NAMESPACE INTERNAL_SERVICE_TOKEN JWT_ISSUER OVERSEAS_JWT_AUDIENCE JWT_JWK_SET_URI; do
    if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
      echo "部署海外服务时，环境文件必须包含非空 $key" >&2
      exit 2
    fi
  done
fi

case " $SERVICES " in
  *" overseas-security-service "*)
    for key in OVERSEAS_SECURITY_DB_URL OVERSEAS_SECURITY_DB_USERNAME OVERSEAS_SECURITY_DB_PASSWORD; do
      if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
        echo "部署 overseas-security-service 时，环境文件必须包含非空 $key" >&2
        exit 2
      fi
    done
    ;;
esac

case " $SERVICES " in
  *" gateway-overseas "*)
    if ! env_file_has_key AUTH_SESSION_VALIDATION_URL || [ -z "$(env_file_value AUTH_SESSION_VALIDATION_URL)" ]; then
      echo "部署 gateway-overseas 时，环境文件必须包含非空 AUTH_SESSION_VALIDATION_URL" >&2
      exit 2
    fi
    ;;
esac

case " $SERVICES " in
  *" finance "*)
    for key in FINANCE_DB_URL FINANCE_DB_USERNAME FINANCE_DB_PASSWORD; do
      if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
        echo "部署 finance 服务时，环境文件必须包含非空 $key" >&2
        exit 2
      fi
    done
    ;;
esac

case " $SERVICES " in
  *" firstleg "*)
    if ! env_file_has_key LASTLEG_EVENT_BRIDGE_URL || [ -z "$(env_file_value LASTLEG_EVENT_BRIDGE_URL)" ]; then
      echo "部署 firstleg 时，环境文件必须包含非空 LASTLEG_EVENT_BRIDGE_URL" >&2
      exit 2
    fi
    ;;
esac

case " $SERVICES " in
  *" lastleg-service "*)
    for key in LASTLEG_DB_URL LASTLEG_DB_USERNAME LASTLEG_DB_PASSWORD FIRSTLEG_EVENT_BRIDGE_URL DOMESTIC_WAREHOUSE_URL; do
      if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
        echo "部署 lastleg-service 时，环境文件必须包含非空 $key" >&2
        exit 2
      fi
    done
    ;;
esac

case " $SERVICES " in
  *" warehouse-overseas-service "*)
    for key in WAREHOUSE_OVERSEAS_DB_URL WAREHOUSE_OVERSEAS_DB_USERNAME WAREHOUSE_OVERSEAS_DB_PASSWORD; do
      if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
        echo "部署 warehouse-overseas-service 时，环境文件必须包含非空 $key" >&2
        exit 2
      fi
    done
    ;;
esac

case " $SERVICES " in
  *" event-bridge-service "*)
    if [ "$DEPLOY_REGION" = "OVERSEAS" ]; then
      EVENT_BRIDGE_KEYS="EVENT_BRIDGE_OVERSEAS_DB_URL EVENT_BRIDGE_OVERSEAS_DB_USERNAME EVENT_BRIDGE_OVERSEAS_DB_PASSWORD EVENT_CONSUMER_URL"
    else
      EVENT_BRIDGE_KEYS="EVENT_BRIDGE_DB_URL EVENT_BRIDGE_DB_USERNAME EVENT_BRIDGE_DB_PASSWORD FIRSTLEG_CONTAINER_EVENT_CONSUMER_URL"
    fi
    for key in $EVENT_BRIDGE_KEYS; do
      if ! env_file_has_key "$key" || [ -z "$(env_file_value "$key")" ]; then
        echo "部署 event-bridge-service 时，环境文件必须包含非空 $key" >&2
        exit 2
      fi
    done
    ;;
esac

case " $SERVICES " in
  *" file "*)
    if ! env_file_has_key ROCKETMQ_NAME_SERVER || [ -z "$(env_file_value ROCKETMQ_NAME_SERVER)" ]; then
      echo "部署 file 服务时，环境文件必须包含非空 ROCKETMQ_NAME_SERVER" >&2
      exit 2
    fi
    if ! env_file_has_key MQ_TOPIC_PREFIX; then
      echo "部署 file 服务时，环境文件必须显式包含 MQ_TOPIC_PREFIX：测试填 test-，生产填空字符串" >&2
      exit 2
    fi
    MQ_PREFIX=$(env_file_value MQ_TOPIC_PREFIX)
    case "$DEPLOY_ENV" in
      test)
        if [ "$MQ_PREFIX" != "test-" ]; then
          echo "测试环境部署 file 服务时 MQ_TOPIC_PREFIX 必须为 test-" >&2
          exit 2
        fi
        ;;
      production)
        if [ -n "$MQ_PREFIX" ]; then
          echo "生产环境部署 file 服务时 MQ_TOPIC_PREFIX 必须显式为空字符串" >&2
          exit 2
        fi
        ;;
      *)
        if [ -z "$MQ_PREFIX" ] || [ "$MQ_PREFIX" = "test-" ]; then
          echo "预发布环境部署 file 服务时 MQ_TOPIC_PREFIX 必须为非空且不能使用 test-" >&2
          exit 2
        fi
        ;;
    esac
    ;;
esac

export DEPLOY_ENV IMAGE_REPOSITORY IMAGE_TAG

if [ "$DEPLOY_ENV" = "development" ]; then
  DEPLOY_COMPOSE_FILE="$COMPOSE_FILE" DEPLOY_PROJECT_NAME="$PROJECT_NAME" exec sh deploy/scripts/deploy-development-service.sh \
    "$IMAGE_REPOSITORY" "$IMAGE_TAG" "$SERVICE_CSV" "$ENV_FILE"
fi

docker compose \
  --project-name "$PROJECT_NAME" \
  --env-file "$ENV_FILE" \
  -f "$COMPOSE_FILE" \
  pull $SERVICES

docker compose \
  --project-name "$PROJECT_NAME" \
  --env-file "$ENV_FILE" \
  -f "$COMPOSE_FILE" \
  up -d --remove-orphans --pull never $SERVICES

docker compose \
  --project-name "$PROJECT_NAME" \
  --env-file "$ENV_FILE" \
  -f "$COMPOSE_FILE" \
  ps $SERVICES