variables: GRADLE_USER_HOME: "$CI_PROJECT_DIR/.gradle" REQUEST_SERVICE_DIR: "services/pcp-request-service" REQUEST_HELM_CHART_DIR: "helm/pcp-request-service" REQUEST_HELM_RELEASE: "pcp-request-service" REQUEST_IMAGE_REPOSITORY: "$INTERNAL_REGISTRY/pcp-request-service" REQUEST_IMAGE_TAG: "$CI_COMMIT_SHORT_SHA" REQUEST_K8S_NAMESPACE_DEV: "pcp-dev" REQUEST_K8S_NAMESPACE_MASTER: "pcp-master" .request_changes: &request_changes - services/pcp-request-service/**/* - libs/pcp-types-lib/**/* - build.gradle.kts - settings.gradle.kts - gradle.properties - gradle/**/* - .gitlab/ci/pcp-request-service.yml - helm/pcp-request-service/**/* - deploy/**/* .request:rules:build-and-image: rules: - if: '$CI_PIPELINE_SOURCE == "merge_request_event"' changes: *request_changes - if: '$CI_COMMIT_BRANCH == "dev"' changes: *request_changes - if: '$CI_COMMIT_BRANCH == "master"' changes: *request_changes - when: never .request:rules:test: rules: - if: '$CI_PIPELINE_SOURCE == "merge_request_event"' changes: *request_changes - if: '$CI_COMMIT_BRANCH == "dev"' changes: *request_changes when: manual - if: '$CI_COMMIT_BRANCH == "master"' changes: *request_changes - when: never .request:rules:deploy-dev: rules: - if: '$CI_COMMIT_BRANCH == "dev"' changes: *request_changes when: manual - when: never .request:rules:deploy-master: rules: - if: '$CI_COMMIT_BRANCH == "master"' changes: *request_changes when: manual - when: never .request:gradle-cache: cache: key: "gradle-request-$CI_DEFAULT_BRANCH" paths: - .gradle/wrapper - .gradle/caches policy: pull-push .request:docker-build: image: repo.nstart.cloud/library/docker:26 services: - name: repo.nstart.cloud/library/docker:26-dind alias: docker command: ["--tls=false", "--insecure-registry=registry.k8s.265.nstart.local"] variables: DOCKER_HOST: tcp://docker:2375 DOCKER_TLS_CERTDIR: "" DOCKER_BUILDKIT: "1" before_script: - docker version - docker info .request:helm-deploy: image: repo.nstart.cloud/dtzar/helm-kubectl:3.14.0 before_script: - mkdir -p /root/.kube - helm version after_script: - rm -f /root/.kube/config request:test: stage: test image: repo.nstart.cloud/library/gradle:jdk21-ubi10 extends: - .request:rules:test - .request:gradle-cache before_script: - chmod +x gradlew script: - ./gradlew --no-daemon :services:pcp-request-service:test artifacts: when: always reports: junit: - services/pcp-request-service/build/test-results/test/*.xml paths: - services/pcp-request-service/build/reports/tests/ expire_in: 7 days request:build: stage: build image: repo.nstart.cloud/library/gradle:jdk21-ubi10 extends: - .request:rules:build-and-image - .request:gradle-cache needs: - job: request:test artifacts: true before_script: - chmod +x gradlew script: - ./gradlew --no-daemon :services:pcp-request-service:bootJar artifacts: when: always paths: - services/pcp-request-service/build/libs/*.jar expire_in: 7 days request:package: stage: package extends: - .request:rules:build-and-image - .request:docker-build needs: - job: request:build artifacts: true script: - 'echo "REQUEST_IMAGE_REPOSITORY=$REQUEST_IMAGE_REPOSITORY"' - | JAR_COUNT="$(find "$REQUEST_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | wc -l)" if [ "$JAR_COUNT" -ne 1 ]; then echo "Expected exactly one executable jar, found: $JAR_COUNT" find "$REQUEST_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' -print || true exit 1 fi JAR_FILE="$(find "$REQUEST_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | head -n 1)" - rm -rf docker-context - mkdir -p docker-context/build/libs - cp "$REQUEST_SERVICE_DIR/Dockerfile" docker-context/Dockerfile - cp "$JAR_FILE" docker-context/build/libs/app.jar - find docker-context -maxdepth 4 -type f -print -exec ls -la {} \; - docker build --file docker-context/Dockerfile --tag "$REQUEST_IMAGE_REPOSITORY:$REQUEST_IMAGE_TAG" docker-context - docker push "$REQUEST_IMAGE_REPOSITORY:$REQUEST_IMAGE_TAG" - printf "REQUEST_IMAGE=%s\n" "$REQUEST_IMAGE_REPOSITORY:$REQUEST_IMAGE_TAG" > request-image.env artifacts: reports: dotenv: request-image.env expire_in: 7 days request:deploy:dev: stage: deploy extends: - .request:rules:deploy-dev - .request:helm-deploy needs: - job: request:package artifacts: true environment: name: dev/pcp-request-service script: - | if [ -n "${KUBE_CONFIG_DEV:-}" ]; then printf '%s' "$KUBE_CONFIG_DEV" > /root/.kube/config elif [ -n "${KUBE_CONFIG_DEV_B64:-}" ]; then if printf '%s' "$KUBE_CONFIG_DEV_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then printf '%s' "$KUBE_CONFIG_DEV_B64" > /root/.kube/config elif ! printf '%s' "$KUBE_CONFIG_DEV_B64" | base64 -d > /root/.kube/config; then echo "KUBE_CONFIG_DEV_B64 is not valid base64. Set KUBE_CONFIG_DEV to raw kubeconfig or KUBE_CONFIG_DEV_B64 to base64 kubeconfig." exit 1 fi else echo "KUBE_CONFIG_DEV or KUBE_CONFIG_DEV_B64 must be set." exit 1 fi - chmod 600 /root/.kube/config - export KUBECONFIG=/root/.kube/config - 'export IMAGE_REPOSITORY="${REQUEST_IMAGE%:*}"' - 'export IMAGE_TAG="${REQUEST_IMAGE##*:}"' - 'echo "Deploy image: $IMAGE_REPOSITORY:$IMAGE_TAG"' - > helm upgrade --install "$REQUEST_HELM_RELEASE" "$REQUEST_HELM_CHART_DIR" --namespace "$REQUEST_K8S_NAMESPACE_DEV" --create-namespace --wait --atomic --timeout 15m -f "$REQUEST_HELM_CHART_DIR/values.yaml" -f "$REQUEST_HELM_CHART_DIR/values-dev.yaml" --set image.repository="$IMAGE_REPOSITORY" --set image.tag="$IMAGE_TAG" --set app.profile=dev --set app.configLabel=dev request:deploy:master: stage: deploy extends: - .request:rules:deploy-master - .request:helm-deploy needs: - job: request:package artifacts: true environment: name: master/pcp-request-service script: - | if [ -n "${KUBE_CONFIG_MASTER:-}" ]; then printf '%s' "$KUBE_CONFIG_MASTER" > /root/.kube/config elif [ -n "${KUBE_CONFIG_MASTER_B64:-}" ]; then if printf '%s' "$KUBE_CONFIG_MASTER_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then printf '%s' "$KUBE_CONFIG_MASTER_B64" > /root/.kube/config elif ! printf '%s' "$KUBE_CONFIG_MASTER_B64" | base64 -d > /root/.kube/config; then echo "KUBE_CONFIG_MASTER_B64 is not valid base64. Set KUBE_CONFIG_MASTER to raw kubeconfig or KUBE_CONFIG_MASTER_B64 to base64 kubeconfig." exit 1 fi else echo "KUBE_CONFIG_MASTER or KUBE_CONFIG_MASTER_B64 must be set." exit 1 fi - chmod 600 /root/.kube/config - export KUBECONFIG=/root/.kube/config - 'export IMAGE_REPOSITORY="${REQUEST_IMAGE%:*}"' - 'export IMAGE_TAG="${REQUEST_IMAGE##*:}"' - 'echo "Deploy image: $IMAGE_REPOSITORY:$IMAGE_TAG"' - > helm upgrade --install "$REQUEST_HELM_RELEASE" "$REQUEST_HELM_CHART_DIR" --namespace "$REQUEST_K8S_NAMESPACE_MASTER" --create-namespace --wait --atomic --timeout 15m -f "$REQUEST_HELM_CHART_DIR/values.yaml" -f "$REQUEST_HELM_CHART_DIR/values-master.yaml" --set image.repository="$IMAGE_REPOSITORY" --set image.tag="$IMAGE_TAG" --set app.profile=master --set app.configLabel=master