Add db migrations

Author: eskp

.github/workflows/deploy.yaml

@@ -42,8 +42,8 @@ jobs:
         run: |
           echo "::set-output name=sha_short::$(git rev-parse --short HEAD)"
 
-      - name: Build, tag, and push image to ECR
-        id: build-image
+      - name: Build, tag, and push app image to ECR
+        id: build-app-image
         if: ${{ !contains(github.event.head_commit.message , '[skip build]') }}
         env:
           SHA_TAG: ${{ steps.vars.outputs.sha_short }}
@@ -61,6 +61,22 @@ jobs:
 
           docker push $ECR_REGISTRY/$AWS_ECR_NAME --all-tags
 
+      - name: Build, tag, and push migrator image to ECR
+        id: build-migrator
+        if: ${{ !contains(github.event.head_commit.message , '[skip build]') }}
+        env:
+          SHA_TAG: ${{ steps.vars.outputs.sha_short }}
+          LATEST_TAG: latest
+          ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+        run: |
+          # Build image for database migrations
+          docker build --target migrator \
+                        -t $ECR_REGISTRY/$AWS_ECR_NAME:migrator \
+                        -f ./Dockerfile \
+                        .
+
+          docker push $ECR_REGISTRY/$AWS_ECR_NAME:migrator
+
       - name: Deploying Service to Kubernetes with Helm
         id: deploy
         uses: bitovi/github-actions-deploy-eks-helm@v1.2.10

Dockerfile

@@ -29,6 +29,22 @@ RUN touch README.md || true
 # Build the application
 RUN pnpm build
 
+# Stage 2.5: Migration stage (optional - for running migrations)
+FROM node:25-alpine AS migrator
+WORKDIR /app
+RUN npm install -g pnpm
+
+# Copy dependencies and migration files
+COPY --from=deps /app/node_modules ./node_modules
+COPY --from=builder /app/drizzle ./drizzle
+COPY --from=builder /app/drizzle.config.ts ./drizzle.config.ts
+COPY --from=builder /app/lib ./lib
+COPY --from=builder /app/package.json ./package.json
+
+# This stage can be used to run migrations
+# Run with: docker build --target migrator -t myapp-migrator .
+# Then: docker run --env DATABASE_URL=xxx myapp-migrator pnpm db:push
+
 # Stage 3: Runner
 FROM node:25-alpine AS runner
 WORKDIR /app

deploy/staging/values.yaml

@@ -1,3 +1,9 @@
+shared_env: &shared_env
+  DATABASE_URL:
+    type: parameterStore
+    name: db-url
+    parameter_name: /eks/maker-staging/keeperhub/db-url
+
 replicaCount: 1
 
 service:
@@ -24,11 +30,27 @@ httpWwwRedirect:
   enabled: false
 httpBasicAuth:
   enabled: false
+
 image:
   repository: ${ECR_REGISTRY}/keeperhub-staging
   tag: latest
   pullPolicy: Always
 
+deployment:
+  enabled: true
+  initContainers:
+    - name: db-migration
+      image: "${ECR_REGISTRY}/keeperhub-staging:migrator"
+      command:
+        - /bin/sh
+        - -c
+      args:
+        - |
+          echo "Running database migrations..."
+          pnpm db:push
+          echo "Migrations completed successfully"
+      env: *shared_env
+
 serviceAccount:
   create: false
 
@@ -43,6 +65,7 @@ resources:
     memory: 256Mi
 
 env:
+  <<: *shared_env
   HOSTNAME:
     type: kv
     value: "0.0.0.0"
@@ -80,10 +103,7 @@ env:
     type: parameterStore
     name: etherscan-api-key
     parameter_name: /eks/maker-staging/keeper-app/etherscan-api-key
-  DATABASE_URL:
-    type: parameterStore
-    name: db-url
-    parameter_name: /eks/maker-staging/keeperhub/db-url
+
 externalSecrets:
   clusterSecretStoreName: maker-staging