mirror of
https://gitlab.dit.htwk-leipzig.de/htwk-software/htwkalender.git
synced 2025-07-16 09:38:49 +02:00
260 lines
8.2 KiB
YAML
260 lines
8.2 KiB
YAML
.build-image:
|
|
stage: build
|
|
image: docker:latest
|
|
services:
|
|
- docker:dind
|
|
tags:
|
|
- image
|
|
#variables:
|
|
# DOCKER_HOST: tcp://docker:2376
|
|
# DOCKER_TLS_CERTDIR: "/certs"
|
|
# DOCKER_TLS_VERIFY: 1
|
|
# DOCKER_CERT_PATH: "/certs/client"
|
|
before_script:
|
|
- echo $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY
|
|
script:
|
|
- |
|
|
docker build --pull \
|
|
-t $IMAGE_TAG \
|
|
-f $DOCKERFILE \
|
|
--build-arg COMMIT_HASH=$CI_COMMIT_SHORT_SHA \
|
|
--target $BUILD_TARGET \
|
|
$BUILD_PATH
|
|
- docker push "$IMAGE_TAG"
|
|
artifacts:
|
|
paths:
|
|
- .env_file
|
|
expire_in: 1 hour
|
|
|
|
.build-data-manager-image:
|
|
extends: .build-image
|
|
variables:
|
|
BUILD_TARGET: "prod"
|
|
BUILD_PATH: "./services"
|
|
DOCKERFILE: "./services/data-manager/Dockerfile"
|
|
after_script:
|
|
- echo "export DATA_MANAGER_IMAGE=$IMAGE_TAG" >> .env_file
|
|
|
|
build-data-manager-image-dev:
|
|
extends: .build-data-manager-image
|
|
variables:
|
|
IMAGE_TAG: "$CI_REGISTRY_IMAGE/data-manager:dev"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "development"
|
|
changes:
|
|
- services/data-manager/**/*
|
|
|
|
build-data-manager-image-prod:
|
|
extends: .build-data-manager-image
|
|
variables:
|
|
IMAGE_TAG: "$CI_REGISTRY_IMAGE/data-manager:latest"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "main"
|
|
changes:
|
|
- services/data-manager/**/*
|
|
|
|
.build-ical-image:
|
|
extends: .build-image
|
|
variables:
|
|
BUILD_TARGET: "prod"
|
|
BUILD_PATH: "./services"
|
|
DOCKERFILE: "./services/ical/Dockerfile"
|
|
after_script:
|
|
- echo "export ICAL_IMAGE=$IMAGE_TAG" >> .env_file
|
|
|
|
build-ical-image-dev:
|
|
extends: .build-ical-image
|
|
variables:
|
|
IMAGE_TAG: "$CI_REGISTRY_IMAGE/ical:dev"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "development"
|
|
changes:
|
|
- services/ical/**/*
|
|
|
|
build-ical-image-prod:
|
|
extends: .build-ical-image
|
|
variables:
|
|
IMAGE_TAG: "$CI_REGISTRY_IMAGE/ical:latest"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "main"
|
|
changes:
|
|
- services/ical/**/*
|
|
|
|
.build-frontend-image:
|
|
extends: .build-image
|
|
variables:
|
|
BUILD_TARGET: "prod"
|
|
BUILD_PATH: "./frontend"
|
|
DOCKERFILE: "./frontend/Dockerfile"
|
|
after_script:
|
|
- echo "export FRONTEND_IMAGE=$IMAGE_TAG" >> .env_file
|
|
|
|
build-frontend-image-dev:
|
|
extends: .build-frontend-image
|
|
variables:
|
|
IMAGE_TAG: "$CI_REGISTRY_IMAGE/frontend:dev"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "development"
|
|
changes:
|
|
- frontend/**/*
|
|
|
|
build-frontend-image-prod:
|
|
extends: .build-frontend-image
|
|
variables:
|
|
IMAGE_TAG: "$CI_REGISTRY_IMAGE/frontend:latest"
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "main"
|
|
changes:
|
|
- frontend/**/*
|
|
|
|
.package-helm-chart:
|
|
stage: package
|
|
image:
|
|
name: alpine/helm:3
|
|
entrypoint: [""]
|
|
variables:
|
|
CHARTS_DIR: $CI_PROJECT_DIR/charts
|
|
VALUES_FILE: $CI_PROJECT_DIR/charts/values.yaml
|
|
CHART_FILE: $CI_PROJECT_DIR/charts/Chart.yaml
|
|
before_script:
|
|
- apk add --no-cache gettext
|
|
- echo "export HELM_ARTIFACT_JOB_NAME=$CI_JOB_NAME" >> .env_file
|
|
- echo "export PROJECT_URL=$PROJECT_URL" >> .env_file
|
|
- echo "export PROJECT_NAME=$PROJECT_NAME" >> .env_file
|
|
- source .env_file
|
|
- echo "Updating deployment URLs..."
|
|
- ': "${DATA_MANAGER_IMAGE:=$CI_REGISTRY_IMAGE/data-manager:$FALLBACK_TAG}"'
|
|
- ': "${ICAL_IMAGE:=$CI_REGISTRY_IMAGE/ical:$FALLBACK_TAG}"'
|
|
- ': "${FRONTEND_IMAGE:=$CI_REGISTRY_IMAGE/frontend:$FALLBACK_TAG}"'
|
|
- export DATA_MANAGER_IMAGE ICAL_IMAGE FRONTEND_IMAGE
|
|
- yq e -i '(.dataManager.image.name) = env(DATA_MANAGER_IMAGE)' $VALUES_FILE
|
|
- yq e -i '(.ical.image.name) = env(ICAL_IMAGE)' $VALUES_FILE
|
|
- yq e -i '(.frontend.image.name) = env(FRONTEND_IMAGE)' $VALUES_FILE
|
|
- yq e -i '(.frontend.host) = env(PROJECT_URL)' $VALUES_FILE
|
|
after_script:
|
|
- yq e -i 'explode(.)' "$VALUES_FILE"
|
|
- helm dependency update $CHARTS_DIR
|
|
- helm package $CHARTS_DIR --destination ./
|
|
artifacts:
|
|
paths:
|
|
- "*.tgz"
|
|
- .env_file
|
|
expire_in: 1 hour
|
|
|
|
package-helm-chart-dev:
|
|
extends: .package-helm-chart
|
|
variables:
|
|
PROJECT_URL: $PROJECT_URL_DEV
|
|
PROJECT_NAME: $CI_PROJECT_NAME-dev
|
|
FALLBACK_TAG: dev
|
|
script:
|
|
- yq e -i '(.production) = false' $VALUES_FILE
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "development"'
|
|
changes:
|
|
- services/data-manager/**/*
|
|
- services/ical/**/*
|
|
- frontend/**/*
|
|
- charts/**/*
|
|
|
|
package-helm-chart-prod:
|
|
extends: .package-helm-chart
|
|
variables:
|
|
PROJECT_URL: $PROJECT_URL_PROD
|
|
PROJECT_NAME: $CI_PROJECT_NAME
|
|
FALLBACK_TAG: latest
|
|
script:
|
|
- yq e -i '(.frontend.googleSiteVerification) = env(GOOGLE_VERIFICATION)' $VALUES_FILE
|
|
- |
|
|
cat <<EOF > configmap-google.yaml
|
|
{{- if .Values.production }}
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: configmap-google
|
|
namespace: $PROJECT_NAME
|
|
data:
|
|
$GOOGLE_VERIFICATION.html: |
|
|
google-site-verification: $GOOGLE_VERIFICATION.html
|
|
{{- end }}
|
|
EOF
|
|
- envsubst < configmap-google.yaml > $CHARTS_DIR/templates/configmap-google.yaml
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "main"'
|
|
changes:
|
|
- services/data-manager/**/*
|
|
- services/ical/**/*
|
|
- frontend/**/*
|
|
- charts/**/*
|
|
|
|
trigger_deploy:
|
|
stage: deploy
|
|
image: alpine:latest
|
|
before_script:
|
|
- apk add --no-cache curl
|
|
- source .env_file
|
|
script:
|
|
- echo "Triggering deploy pipeline ..."
|
|
- |
|
|
curl -X POST \
|
|
-F "token=$CI_DEPLOY_REPO_TRIGGER_TOKEN" \
|
|
-F "ref=$CI_DEPLOY_REPO_REF" \
|
|
-F "variables[UPSTREAM_PROJECT_NAME]=$PROJECT_NAME" \
|
|
-F "variables[UPSTREAM_PROJECT_ID]=$CI_PROJECT_ID" \
|
|
-F "variables[UPSTREAM_COMMIT_REF_NAME]=$CI_COMMIT_REF_NAME" \
|
|
-F "variables[UPSTREAM_HELM_ARTIFACT_JOB_NAME]=$HELM_ARTIFACT_JOB_NAME" \
|
|
-F "variables[UPSTREAM_REGISTRY_PATH]=$CI_REGISTRY_IMAGE" \
|
|
"$CI_API_V4_URL/projects/$CI_DEPLOY_REPO_ID/trigger/pipeline"
|
|
- "echo 'The $PROJECT_NAME can be viewed on: $PROJECT_URL'"
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "main" || $CI_COMMIT_BRANCH == "development"'
|
|
|
|
deploy-dev:
|
|
stage: deploy
|
|
image: alpine:latest
|
|
before_script:
|
|
- apk add --no-cache openssh-client sed
|
|
- eval $(ssh-agent -s)
|
|
- ssh-add <(echo "$CI_SSH_KEY" | tr -d '\r')
|
|
script:
|
|
- sed -i -e "s|DOCKER_REGISTRY_REPO|$CI_REGISTRY_IMAGE|" docker-compose.dev.yml
|
|
- sed -i -e "s|DEV_TAG|dev|" docker-compose.dev.yml
|
|
- 'scp -P $CI_SSH_PORT -o StrictHostKeyChecking=no -o LogLevel=ERROR ./docker-compose.dev.yml
|
|
./reverseproxy.dev.conf $CI_SSH_USER@$CI_SSH_DEV_HOST:/home/$CI_SSH_USER/docker/htwkalender/
|
|
|
|
'
|
|
- 'ssh -p $CI_SSH_PORT -o StrictHostKeyChecking=no -o LogLevel=ERROR $CI_SSH_USER@$CI_SSH_DEV_HOST
|
|
"cd /home/$CI_SSH_USER/docker/htwkalender/ && docker login -u $CI_REGISTRY_USER
|
|
-p $CI_REGISTRY_PASSWORD $CI_REGISTRY && docker compose -f ./docker-compose.dev.yml
|
|
down && docker compose -f ./docker-compose.dev.yml up -d --remove-orphans && docker
|
|
logout"
|
|
|
|
'
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "development"
|
|
|
|
deploy-main:
|
|
stage: deploy
|
|
image: alpine:latest
|
|
before_script:
|
|
- apk add --no-cache openssh-client sed # install dependencies
|
|
- eval $(ssh-agent -s) # set some ssh variables
|
|
- ssh-add <(echo "$CI_SSH_KEY" | tr -d '\r')
|
|
script:
|
|
# replace some placeholders
|
|
- sed -i -e "s|DOCKER_REGISTRY_REPO|$CI_REGISTRY_IMAGE|" docker-compose.prod.yml
|
|
- sed -i -e "s|PROD_TAG|latest|" docker-compose.prod.yml
|
|
# upload necessary files to the server
|
|
- >
|
|
scp -P $CI_SSH_PORT -o StrictHostKeyChecking=no -o LogLevel=ERROR ./docker-compose.prod.yml ./reverseproxy.conf
|
|
$CI_SSH_USER@$CI_SSH_HOST:/home/$CI_SSH_USER/docker/htwkalender/
|
|
# ssh to the server and start the service
|
|
- >
|
|
ssh -p $CI_SSH_PORT -o StrictHostKeyChecking=no -o LogLevel=ERROR $CI_SSH_USER@$CI_SSH_HOST
|
|
"cd /home/$CI_SSH_USER/docker/htwkalender/ &&
|
|
docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY &&
|
|
docker compose -f ./docker-compose.prod.yml down && docker compose -f ./docker-compose.prod.yml up -d --remove-orphans && docker logout &&
|
|
docker exec --user root htwkalender-htwkalender-frontend-1 /bin/sh -c \"echo 'google-site-verification: $GOOGLE_VERIFICATION.html' > ./$GOOGLE_VERIFICATION.html\" "
|
|
rules:
|
|
- if: $CI_COMMIT_BRANCH == "main"
|