Дмитрий Соловьев
c2a847fc2e
Run pipeline + RUN_ALL=true прогоняет test/build/package всех бэкендов независимо от changes; deploy:dev остаётся ручным. Обычный пуш по-прежнему собирает только изменившийся сервис. pcp-tgu-ui-service source-guard-нут (только push), чтобы не попадать в RUN_ALL/web-пайплайны.
219 lines
7.5 KiB
YAML
219 lines
7.5 KiB
YAML
variables:
|
|
GRADLE_USER_HOME: "$CI_PROJECT_DIR/.gradle"
|
|
|
|
CONFIG_SERVER_SERVICE_DIR: "services/spring-cloud-config-server"
|
|
CONFIG_SERVER_HELM_CHART_DIR: "helm/spring-cloud-config-server"
|
|
CONFIG_SERVER_HELM_RELEASE: "spring-cloud-config-server"
|
|
CONFIG_SERVER_IMAGE_REPOSITORY: "$INTERNAL_REGISTRY/pcp-cloud-config-server"
|
|
CONFIG_SERVER_IMAGE_TAG: "$CI_COMMIT_SHORT_SHA"
|
|
CONFIG_SERVER_K8S_NAMESPACE_DEV: "pcp-dev"
|
|
CONFIG_SERVER_GIT_SECRET_NAME: "spring-cloud-config-server-git"
|
|
CONFIG_GIT_URI: "https://git.nstart.cloud/emelianov.an/pcp.git"
|
|
CONFIG_GIT_USERNAME: "gitlab+deploy-token-1"
|
|
CONFIG_GIT_DEFAULT_LABEL: "master"
|
|
CONFIG_GIT_SEARCH_PATHS: "config-repo"
|
|
CONFIG_GIT_SKIP_SSL_VALIDATION: "true"
|
|
|
|
.config_server_changes: &config_server_changes
|
|
- services/spring-cloud-config-server/**/*
|
|
- build.gradle.kts
|
|
- settings.gradle.kts
|
|
- .gitlab/ci/spring-cloud-config-server.yml
|
|
- helm/spring-cloud-config-server/**/*
|
|
- deploy/**/*
|
|
|
|
.config-server:rules:build-and-image:
|
|
rules:
|
|
- if: '$RUN_ALL == "true"'
|
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
changes: *config_server_changes
|
|
- if: '$CI_COMMIT_BRANCH == "dev"'
|
|
changes: *config_server_changes
|
|
- if: '$CI_COMMIT_BRANCH == "master"'
|
|
changes: *config_server_changes
|
|
- when: never
|
|
|
|
.config-server:rules:test:
|
|
rules:
|
|
- if: '$RUN_ALL == "true"'
|
|
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
|
|
changes: *config_server_changes
|
|
- if: '$CI_COMMIT_BRANCH == "dev"'
|
|
changes: *config_server_changes
|
|
when: manual
|
|
- if: '$CI_COMMIT_BRANCH == "master"'
|
|
changes: *config_server_changes
|
|
- when: never
|
|
|
|
.config-server:rules:deploy-dev:
|
|
rules:
|
|
- if: '$RUN_ALL == "true"'
|
|
when: manual
|
|
- if: '$CI_COMMIT_BRANCH == "dev"'
|
|
changes: *config_server_changes
|
|
when: manual
|
|
- when: never
|
|
|
|
.config-server:gradle-cache:
|
|
cache:
|
|
key: "gradle-config-server-$CI_DEFAULT_BRANCH"
|
|
paths:
|
|
- .gradle/wrapper
|
|
- .gradle/caches
|
|
policy: pull-push
|
|
|
|
.config-server:docker-build:
|
|
image: repo.nstart.cloud/library/docker:26
|
|
services:
|
|
- name: repo.nstart.cloud/library/docker:26-dind
|
|
alias: docker
|
|
command: ["--tls=false", "--insecure-registry=registry.k8s.265.nstart.local"]
|
|
variables:
|
|
DOCKER_HOST: tcp://docker:2375
|
|
DOCKER_TLS_CERTDIR: ""
|
|
DOCKER_BUILDKIT: "1"
|
|
before_script:
|
|
- docker version
|
|
- docker info
|
|
|
|
.config-server:helm-deploy:
|
|
image: repo.nstart.cloud/dtzar/helm-kubectl:3.14.0
|
|
before_script:
|
|
- mkdir -p /root/.kube
|
|
- helm version
|
|
after_script:
|
|
- rm -f /root/.kube/config
|
|
|
|
config-server:test:
|
|
stage: test
|
|
image: repo.nstart.cloud/library/gradle:jdk21-ubi10
|
|
extends:
|
|
- .config-server:rules:test
|
|
- .config-server:gradle-cache
|
|
before_script:
|
|
- chmod +x gradlew
|
|
script:
|
|
- ./gradlew --no-daemon :services:spring-cloud-config-server:test
|
|
artifacts:
|
|
when: always
|
|
reports:
|
|
junit:
|
|
- services/spring-cloud-config-server/build/test-results/test/*.xml
|
|
paths:
|
|
- services/spring-cloud-config-server/build/reports/tests/
|
|
expire_in: 7 days
|
|
|
|
config-server:build:
|
|
stage: build
|
|
image: repo.nstart.cloud/library/gradle:jdk21-ubi10
|
|
extends:
|
|
- .config-server:rules:build-and-image
|
|
- .config-server:gradle-cache
|
|
needs:
|
|
- job: config-server:test
|
|
artifacts: true
|
|
before_script:
|
|
- chmod +x gradlew
|
|
script:
|
|
- ./gradlew --no-daemon :services:spring-cloud-config-server:bootJar
|
|
artifacts:
|
|
when: always
|
|
paths:
|
|
- services/spring-cloud-config-server/build/libs/*.jar
|
|
expire_in: 7 days
|
|
|
|
config-server:package:
|
|
stage: package
|
|
extends:
|
|
- .config-server:rules:build-and-image
|
|
- .config-server:docker-build
|
|
needs:
|
|
- job: config-server:build
|
|
artifacts: true
|
|
script:
|
|
- 'echo "CONFIG_SERVER_IMAGE_REPOSITORY=$CONFIG_SERVER_IMAGE_REPOSITORY"'
|
|
- |
|
|
JAR_COUNT="$(find "$CONFIG_SERVER_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | wc -l)"
|
|
|
|
if [ "$JAR_COUNT" -ne 1 ]; then
|
|
echo "Expected exactly one executable jar, found: $JAR_COUNT"
|
|
find "$CONFIG_SERVER_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' -print || true
|
|
exit 1
|
|
fi
|
|
|
|
JAR_FILE="$(find "$CONFIG_SERVER_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | head -n 1)"
|
|
- rm -rf docker-context
|
|
- mkdir -p docker-context/build/libs
|
|
- cp "$CONFIG_SERVER_SERVICE_DIR/Dockerfile" docker-context/Dockerfile
|
|
- cp "$JAR_FILE" docker-context/build/libs/app.jar
|
|
- find docker-context -maxdepth 4 -type f -print -exec ls -la {} \;
|
|
- docker build --file docker-context/Dockerfile --tag "$CONFIG_SERVER_IMAGE_REPOSITORY:$CONFIG_SERVER_IMAGE_TAG" docker-context
|
|
- docker push "$CONFIG_SERVER_IMAGE_REPOSITORY:$CONFIG_SERVER_IMAGE_TAG"
|
|
- printf "CONFIG_SERVER_IMAGE=%s\n" "$CONFIG_SERVER_IMAGE_REPOSITORY:$CONFIG_SERVER_IMAGE_TAG" > config-server-image.env
|
|
artifacts:
|
|
reports:
|
|
dotenv: config-server-image.env
|
|
expire_in: 7 days
|
|
|
|
config-server:deploy:dev:
|
|
stage: deploy
|
|
extends:
|
|
- .config-server:rules:deploy-dev
|
|
- .config-server:helm-deploy
|
|
needs:
|
|
- job: config-server:package
|
|
artifacts: true
|
|
environment:
|
|
name: dev/spring-cloud-config-server
|
|
script:
|
|
- |
|
|
if [ -n "${KUBE_CONFIG_DEV:-}" ]; then
|
|
printf '%s' "$KUBE_CONFIG_DEV" > /root/.kube/config
|
|
elif [ -n "${KUBE_CONFIG_DEV_B64:-}" ]; then
|
|
if printf '%s' "$KUBE_CONFIG_DEV_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then
|
|
printf '%s' "$KUBE_CONFIG_DEV_B64" > /root/.kube/config
|
|
elif ! printf '%s' "$KUBE_CONFIG_DEV_B64" | base64 -d > /root/.kube/config; then
|
|
echo "KUBE_CONFIG_DEV_B64 is not valid base64. Set KUBE_CONFIG_DEV to raw kubeconfig or KUBE_CONFIG_DEV_B64 to base64 kubeconfig."
|
|
exit 1
|
|
fi
|
|
else
|
|
echo "KUBE_CONFIG_DEV or KUBE_CONFIG_DEV_B64 must be set."
|
|
exit 1
|
|
fi
|
|
- chmod 600 /root/.kube/config
|
|
- export KUBECONFIG=/root/.kube/config
|
|
- |
|
|
if [ -z "${CONFIG_GIT_TOKEN:-}" ]; then
|
|
echo "CONFIG_GIT_TOKEN must be set as a GitLab CI/CD variable."
|
|
exit 1
|
|
fi
|
|
- kubectl create namespace "$CONFIG_SERVER_K8S_NAMESPACE_DEV" --dry-run=client -o yaml | kubectl apply -f -
|
|
- >
|
|
kubectl create secret generic "$CONFIG_SERVER_GIT_SECRET_NAME"
|
|
--namespace "$CONFIG_SERVER_K8S_NAMESPACE_DEV"
|
|
--from-literal=token="$CONFIG_GIT_TOKEN"
|
|
--dry-run=client
|
|
-o yaml
|
|
| kubectl apply -f -
|
|
- 'export IMAGE_REPOSITORY="${CONFIG_SERVER_IMAGE%:*}"'
|
|
- 'export IMAGE_TAG="${CONFIG_SERVER_IMAGE##*:}"'
|
|
- 'echo "Deploy image: $IMAGE_REPOSITORY:$IMAGE_TAG"'
|
|
- >
|
|
helm upgrade --install "$CONFIG_SERVER_HELM_RELEASE"
|
|
"$CONFIG_SERVER_HELM_CHART_DIR"
|
|
--namespace "$CONFIG_SERVER_K8S_NAMESPACE_DEV"
|
|
--create-namespace
|
|
--values "$CONFIG_SERVER_HELM_CHART_DIR/values.yaml"
|
|
--values "$CONFIG_SERVER_HELM_CHART_DIR/values-dev.yaml"
|
|
--set-string image.repository="$IMAGE_REPOSITORY"
|
|
--set-string image.tag="$IMAGE_TAG"
|
|
--set-string app.configGitUri="$CONFIG_GIT_URI"
|
|
--set-string app.configGitUsername="$CONFIG_GIT_USERNAME"
|
|
--set-string app.configGitDefaultLabel="$CONFIG_GIT_DEFAULT_LABEL"
|
|
--set-string app.configGitSearchPaths="$CONFIG_GIT_SEARCH_PATHS"
|
|
--set-string app.configGitSkipSslValidation="$CONFIG_GIT_SKIP_SSL_VALIDATION"
|
|
--set-string gitTokenSecret.name="$CONFIG_SERVER_GIT_SECRET_NAME"
|
|
--atomic
|
|
--wait
|
|
--timeout 15m
|