c2a847fc2e
Run pipeline + RUN_ALL=true прогоняет test/build/package всех бэкендов независимо от changes; deploy:dev остаётся ручным. Обычный пуш по-прежнему собирает только изменившийся сервис. pcp-tgu-ui-service source-guard-нут (только push), чтобы не попадать в RUN_ALL/web-пайплайны.
251 lines
7.4 KiB
YAML
251 lines
7.4 KiB
YAML
variables:
|
|
GRADLE_USER_HOME: "$CI_PROJECT_DIR/.gradle"
|
|
|
|
UI_SERVICE_DIR: "services/pcp-ui-service"
|
|
UI_HELM_CHART_DIR: "helm/pcp-ui-service"
|
|
UI_HELM_RELEASE: "pcp-ui-service"
|
|
UI_IMAGE_REPOSITORY: "$INTERNAL_REGISTRY/pcp-ui-service"
|
|
UI_IMAGE_TAG: "$CI_COMMIT_SHORT_SHA"
|
|
UI_K8S_NAMESPACE_DEV: "pcp-dev"
|
|
UI_K8S_NAMESPACE_MASTER: "pcp-master"
|
|
|
|
.ui_changes: &ui_changes
|
|
- services/pcp-ui-service/**/*
|
|
- libs/ballistics-lib/**/*
|
|
- libs/pcp-types-lib/**/*
|
|
- build.gradle.kts
|
|
- settings.gradle.kts
|
|
- .gitlab/ci/pcp-ui-service.yml
|
|
- helm/pcp-ui-service/**/*
|
|
- deploy/**/*
|
|
|
|
.ui:rules:build-and-image:
|
|
rules:
|
|
- if: '$RUN_ALL == "true"'
|
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
changes: *ui_changes
|
|
- if: '$CI_COMMIT_BRANCH == "dev"'
|
|
changes: *ui_changes
|
|
- if: '$CI_COMMIT_BRANCH == "master"'
|
|
changes: *ui_changes
|
|
- when: never
|
|
|
|
.ui:rules:test:
|
|
rules:
|
|
- if: '$RUN_ALL == "true"'
|
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
changes: *ui_changes
|
|
- if: '$CI_COMMIT_BRANCH == "dev"'
|
|
changes: *ui_changes
|
|
when: manual
|
|
- if: '$CI_COMMIT_BRANCH == "master"'
|
|
changes: *ui_changes
|
|
- when: never
|
|
|
|
.ui:rules:deploy-dev:
|
|
rules:
|
|
- if: '$RUN_ALL == "true"'
|
|
when: manual
|
|
- if: '$CI_COMMIT_BRANCH == "dev"'
|
|
changes: *ui_changes
|
|
when: manual
|
|
- when: never
|
|
|
|
.ui:rules:deploy-master:
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "master"'
|
|
changes: *ui_changes
|
|
when: manual
|
|
- when: never
|
|
|
|
.ui:gradle-cache:
|
|
cache:
|
|
key: "gradle-ui-$CI_DEFAULT_BRANCH"
|
|
paths:
|
|
- .gradle/wrapper
|
|
- .gradle/caches
|
|
policy: pull-push
|
|
|
|
.ui:docker-build:
|
|
image: repo.nstart.cloud/library/docker:26
|
|
services:
|
|
- name: repo.nstart.cloud/library/docker:26-dind
|
|
alias: docker
|
|
command: ["--tls=false", "--insecure-registry=registry.k8s.265.nstart.local"]
|
|
variables:
|
|
DOCKER_HOST: tcp://docker:2375
|
|
DOCKER_TLS_CERTDIR: ""
|
|
DOCKER_BUILDKIT: "1"
|
|
before_script:
|
|
- docker version
|
|
- docker info
|
|
|
|
.ui:helm-deploy:
|
|
image: repo.nstart.cloud/dtzar/helm-kubectl:3.14.0
|
|
before_script:
|
|
- mkdir -p /root/.kube
|
|
- helm version
|
|
after_script:
|
|
- rm -f /root/.kube/config
|
|
|
|
ui:test:
|
|
stage: test
|
|
image: repo.nstart.cloud/library/gradle:jdk21-ubi10
|
|
extends:
|
|
- .ui:rules:test
|
|
- .ui:gradle-cache
|
|
before_script:
|
|
- chmod +x gradlew
|
|
script:
|
|
- ./gradlew --no-daemon :services:pcp-ui-service:test
|
|
artifacts:
|
|
when: always
|
|
reports:
|
|
junit:
|
|
- services/pcp-ui-service/build/test-results/test/*.xml
|
|
paths:
|
|
- services/pcp-ui-service/build/reports/tests/
|
|
expire_in: 7 days
|
|
|
|
ui:build:
|
|
stage: build
|
|
image: repo.nstart.cloud/library/gradle:jdk21-ubi10
|
|
extends:
|
|
- .ui:rules:build-and-image
|
|
- .ui:gradle-cache
|
|
needs:
|
|
- job: ui:test
|
|
artifacts: true
|
|
before_script:
|
|
- chmod +x gradlew
|
|
script:
|
|
- ./gradlew --no-daemon :services:pcp-ui-service:bootJar
|
|
artifacts:
|
|
when: always
|
|
paths:
|
|
- services/pcp-ui-service/build/libs/*.jar
|
|
expire_in: 7 days
|
|
|
|
ui:package:
|
|
stage: package
|
|
extends:
|
|
- .ui:rules:build-and-image
|
|
- .ui:docker-build
|
|
needs:
|
|
- job: ui:build
|
|
artifacts: true
|
|
script:
|
|
- 'echo "UI_IMAGE_REPOSITORY=$UI_IMAGE_REPOSITORY"'
|
|
- |
|
|
JAR_COUNT="$(find "$UI_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | wc -l)"
|
|
|
|
if [ "$JAR_COUNT" -ne 1 ]; then
|
|
echo "Expected exactly one executable jar, found: $JAR_COUNT"
|
|
find "$UI_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' -print || true
|
|
exit 1
|
|
fi
|
|
|
|
JAR_FILE="$(find "$UI_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | head -n 1)"
|
|
- rm -rf docker-context
|
|
- mkdir -p docker-context/build/libs
|
|
- cp "$UI_SERVICE_DIR/Dockerfile" docker-context/Dockerfile
|
|
- cp "$JAR_FILE" docker-context/build/libs/app.jar
|
|
- find docker-context -maxdepth 4 -type f -print -exec ls -la {} \;
|
|
- docker build --file docker-context/Dockerfile --tag "$UI_IMAGE_REPOSITORY:$UI_IMAGE_TAG" docker-context
|
|
- docker push "$UI_IMAGE_REPOSITORY:$UI_IMAGE_TAG"
|
|
- printf "UI_IMAGE=%s\n" "$UI_IMAGE_REPOSITORY:$UI_IMAGE_TAG" > ui-image.env
|
|
artifacts:
|
|
reports:
|
|
dotenv: ui-image.env
|
|
expire_in: 7 days
|
|
|
|
ui:deploy:dev:
|
|
stage: deploy
|
|
extends:
|
|
- .ui:rules:deploy-dev
|
|
- .ui:helm-deploy
|
|
needs:
|
|
- job: ui:package
|
|
artifacts: true
|
|
environment:
|
|
name: dev/pcp-ui-service
|
|
script:
|
|
- |
|
|
if [ -n "${KUBE_CONFIG_DEV:-}" ]; then
|
|
printf '%s' "$KUBE_CONFIG_DEV" > /root/.kube/config
|
|
elif [ -n "${KUBE_CONFIG_DEV_B64:-}" ]; then
|
|
if printf '%s' "$KUBE_CONFIG_DEV_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then
|
|
printf '%s' "$KUBE_CONFIG_DEV_B64" > /root/.kube/config
|
|
elif ! printf '%s' "$KUBE_CONFIG_DEV_B64" | base64 -d > /root/.kube/config; then
|
|
echo "KUBE_CONFIG_DEV_B64 is not valid base64. Set KUBE_CONFIG_DEV to raw kubeconfig or KUBE_CONFIG_DEV_B64 to base64 kubeconfig."
|
|
exit 1
|
|
fi
|
|
else
|
|
echo "KUBE_CONFIG_DEV or KUBE_CONFIG_DEV_B64 must be set."
|
|
exit 1
|
|
fi
|
|
- chmod 600 /root/.kube/config
|
|
- export KUBECONFIG=/root/.kube/config
|
|
- 'export IMAGE_REPOSITORY="${UI_IMAGE%:*}"'
|
|
- 'export IMAGE_TAG="${UI_IMAGE##*:}"'
|
|
- 'echo "Deploy image: $IMAGE_REPOSITORY:$IMAGE_TAG"'
|
|
- >
|
|
helm upgrade --install "$UI_HELM_RELEASE"
|
|
"$UI_HELM_CHART_DIR"
|
|
--namespace "$UI_K8S_NAMESPACE_DEV"
|
|
--create-namespace
|
|
--wait
|
|
--atomic
|
|
--timeout 10m
|
|
-f "$UI_HELM_CHART_DIR/values.yaml"
|
|
-f "$UI_HELM_CHART_DIR/values-dev.yaml"
|
|
--set image.repository="$IMAGE_REPOSITORY"
|
|
--set image.tag="$IMAGE_TAG"
|
|
--set app.profile=dev
|
|
--set app.configLabel=dev
|
|
|
|
ui:deploy:master:
|
|
stage: deploy
|
|
extends:
|
|
- .ui:rules:deploy-master
|
|
- .ui:helm-deploy
|
|
needs:
|
|
- job: ui:package
|
|
artifacts: true
|
|
environment:
|
|
name: master/pcp-ui-service
|
|
script:
|
|
- |
|
|
if [ -n "${KUBE_CONFIG_MASTER:-}" ]; then
|
|
printf '%s' "$KUBE_CONFIG_MASTER" > /root/.kube/config
|
|
elif [ -n "${KUBE_CONFIG_MASTER_B64:-}" ]; then
|
|
if printf '%s' "$KUBE_CONFIG_MASTER_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then
|
|
printf '%s' "$KUBE_CONFIG_MASTER_B64" > /root/.kube/config
|
|
elif ! printf '%s' "$KUBE_CONFIG_MASTER_B64" | base64 -d > /root/.kube/config; then
|
|
echo "KUBE_CONFIG_MASTER_B64 is not valid base64. Set KUBE_CONFIG_MASTER to raw kubeconfig or KUBE_CONFIG_MASTER_B64 to base64 kubeconfig."
|
|
exit 1
|
|
fi
|
|
else
|
|
echo "KUBE_CONFIG_MASTER or KUBE_CONFIG_MASTER_B64 must be set."
|
|
exit 1
|
|
fi
|
|
- chmod 600 /root/.kube/config
|
|
- export KUBECONFIG=/root/.kube/config
|
|
- 'export IMAGE_REPOSITORY="${UI_IMAGE%:*}"'
|
|
- 'export IMAGE_TAG="${UI_IMAGE##*:}"'
|
|
- 'echo "Deploy image: $IMAGE_REPOSITORY:$IMAGE_TAG"'
|
|
- >
|
|
helm upgrade --install "$UI_HELM_RELEASE"
|
|
"$UI_HELM_CHART_DIR"
|
|
--namespace "$UI_K8S_NAMESPACE_MASTER"
|
|
--create-namespace
|
|
--wait
|
|
--atomic
|
|
--timeout 10m
|
|
-f "$UI_HELM_CHART_DIR/values.yaml"
|
|
-f "$UI_HELM_CHART_DIR/values-master.yaml"
|
|
--set image.repository="$IMAGE_REPOSITORY"
|
|
--set image.tag="$IMAGE_TAG"
|
|
--set app.profile=master
|
|
--set app.configLabel=master
|