Zimin A.N.
303a5f0402
CI: path-filtering (наконец-то) - Backend jobs (maven-test, maven-package, docker-app/read-api/projection-writer/migrations, resolve-backend-tag) запускаются только при backend-changes (Java модули, pom.xml, CI yml). - Frontend (docker-admin-ui, resolve-frontend-tag) — только при ordinis-admin-ui/**. - Trigger downstream передаёт BACKEND_IMAGE_TAG и/или FRONTEND_IMAGE_TAG. Backwards compat для старого UPSTREAM_IMAGE_TAG сохранён в infra pipeline. - Frontend-only PR теперь не катит backend rolling update (raньше каждый push тегал ВСЕ сервисы новым sha и роллил). Edit dialog UX (bitemporal): - При Edit validFrom default = now() (а не historical validFrom существующей записи). Раньше юзер сдвигал validFrom назад → backend не находил активной версии в этот момент → 'record_not_active'. Теперь по умолчанию 'новая версия с этого момента'. - nowIsoLocal() в timezone браузера (с offset). - validTo default пустой = бессрочно. Backend: понятное сообщение для record_not_active с инструкцией.
252 lines
7.1 KiB
YAML
252 lines
7.1 KiB
YAML
# =============================================================
|
||
# Ordinis — build & push images.
|
||
# Path-aware CI: backend и frontend jobs запускаются только когда меняются
|
||
# соответствующие пути. Trigger downstream передаёт BACKEND_IMAGE_TAG и/или
|
||
# FRONTEND_IMAGE_TAG; infra-pipeline применяет helm upgrade с per-service
|
||
# overrides — сервисы которые не пересобирались не катятся.
|
||
# =============================================================
|
||
|
||
stages:
|
||
- test
|
||
- build
|
||
- publish
|
||
- trigger-deploy
|
||
|
||
variables:
|
||
MAVEN_OPTS: "-Dmaven.repo.local=$CI_PROJECT_DIR/.m2/repository -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn"
|
||
MAVEN_CLI_OPTS: "-B -ntp --batch-mode"
|
||
IMAGE_TAG: $CI_COMMIT_REF_SLUG-$CI_COMMIT_SHORT_SHA
|
||
REGISTRY: repo.nstart.cloud
|
||
IMAGE_REPO: terravault
|
||
DOCKER_BUILDKIT: "1"
|
||
|
||
cache:
|
||
key:
|
||
files: ["pom.xml"]
|
||
paths:
|
||
- .m2/repository
|
||
|
||
default:
|
||
retry:
|
||
max: 2
|
||
when:
|
||
- runner_system_failure
|
||
- stuck_or_timeout_failure
|
||
- script_failure
|
||
|
||
# Backend changes триггерят maven + docker для всех Java-сервисов + миграции.
|
||
.backend-changes: &backend-changes
|
||
- "ordinis-app/**/*"
|
||
- "ordinis-read-api/**/*"
|
||
- "ordinis-projection-writer/**/*"
|
||
- "ordinis-rest-api/**/*"
|
||
- "ordinis-domain/**/*"
|
||
- "ordinis-validation/**/*"
|
||
- "ordinis-events-api/**/*"
|
||
- "ordinis-outbox/**/*"
|
||
- "ordinis-auth/**/*"
|
||
- "ordinis-cuod-bundle/**/*"
|
||
- "ordinis-migrations/**/*"
|
||
- "pom.xml"
|
||
- ".gitlab-ci.yml"
|
||
|
||
# Frontend changes — только admin-ui.
|
||
.frontend-changes: &frontend-changes
|
||
- "ordinis-admin-ui/**/*"
|
||
|
||
# ─── TEST ──────────────────────────────────────
|
||
maven-test:
|
||
stage: test
|
||
image: repo.nstart.cloud/library/maven:3.9.9-eclipse-temurin-21
|
||
script:
|
||
- mvn $MAVEN_CLI_OPTS verify
|
||
artifacts:
|
||
when: always
|
||
reports:
|
||
junit: '**/target/surefire-reports/TEST-*.xml'
|
||
expire_in: 1 week
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
# ─── BUILD (Maven jars) ────────────────────────
|
||
maven-package:
|
||
stage: build
|
||
image: repo.nstart.cloud/library/maven:3.9.9-eclipse-temurin-21
|
||
script:
|
||
- mvn $MAVEN_CLI_OPTS package -DskipTests
|
||
artifacts:
|
||
paths:
|
||
- "**/target/*.jar"
|
||
- ordinis-migrations/src/main/resources/db/changelog/**
|
||
expire_in: 1 day
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
# ─── PUBLISH (Docker images) ───────────────────
|
||
.docker_base:
|
||
stage: publish
|
||
image: repo.nstart.cloud/nstart/docker-cli-buildx:1.0.0
|
||
services:
|
||
- name: repo.nstart.cloud/library/docker:29.1.2-dind
|
||
alias: docker
|
||
command: ["--tls=false"]
|
||
variables:
|
||
DOCKER_HOST: tcp://docker:2375
|
||
DOCKER_TLS_CERTDIR: ""
|
||
DOCKER_BUILDKIT: "1"
|
||
|
||
.publish_script: &publish_script |
|
||
for i in $(seq 1 30); do docker info >/dev/null 2>&1 && break; sleep 1; done
|
||
echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY" -u "$REGISTRY_USER" --password-stdin
|
||
IMG="$REGISTRY/$IMAGE_REPO/$SVC"
|
||
docker build -f "$DOCKERFILE" \
|
||
-t "$IMG:$IMAGE_TAG" -t "$IMG:latest" -t "$IMG:$CI_COMMIT_REF_SLUG" \
|
||
--build-arg BUILDKIT_INLINE_CACHE=1 \
|
||
"$BUILD_CONTEXT"
|
||
docker push "$IMG:$IMAGE_TAG"
|
||
docker push "$IMG:latest"
|
||
docker push "$IMG:$CI_COMMIT_REF_SLUG"
|
||
|
||
docker-app:
|
||
extends: .docker_base
|
||
needs: [maven-package]
|
||
variables:
|
||
SVC: ordinis-app
|
||
DOCKERFILE: ordinis-app/Dockerfile
|
||
BUILD_CONTEXT: .
|
||
script:
|
||
- *publish_script
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
docker-read-api:
|
||
extends: .docker_base
|
||
needs: [maven-package]
|
||
variables:
|
||
SVC: ordinis-read-api
|
||
DOCKERFILE: ordinis-read-api/Dockerfile
|
||
BUILD_CONTEXT: .
|
||
script:
|
||
- *publish_script
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
docker-projection-writer:
|
||
extends: .docker_base
|
||
needs: [maven-package]
|
||
variables:
|
||
SVC: ordinis-projection-writer
|
||
DOCKERFILE: ordinis-projection-writer/Dockerfile
|
||
BUILD_CONTEXT: .
|
||
script:
|
||
- *publish_script
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
docker-migrations:
|
||
extends: .docker_base
|
||
needs: [maven-package]
|
||
variables:
|
||
SVC: ordinis-migrations
|
||
DOCKERFILE: ordinis-migrations/Dockerfile
|
||
BUILD_CONTEXT: ordinis-migrations/
|
||
script:
|
||
- *publish_script
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
docker-admin-ui:
|
||
extends: .docker_base
|
||
needs: []
|
||
variables:
|
||
SVC: ordinis-admin-ui
|
||
DOCKERFILE: ordinis-admin-ui/Dockerfile
|
||
BUILD_CONTEXT: ordinis-admin-ui/
|
||
script:
|
||
- *publish_script
|
||
rules:
|
||
- changes: *frontend-changes
|
||
|
||
# ─── TRIGGER DEPLOY ───────────────────────────
|
||
# Два resolve job'а: один на backend, другой на frontend. Каждый бьётся в dotenv,
|
||
# trigger downstream получает обе переменные (или одну, если изменения в одной зоне).
|
||
# infra применяет --set <svc>.tag=$X только для тех сервисов где tag непустой.
|
||
|
||
resolve-backend-tag:
|
||
stage: trigger-deploy
|
||
image: repo.nstart.cloud/library/alpine:3.20
|
||
needs: [maven-package]
|
||
script:
|
||
- echo "BACKEND_IMAGE_TAG=$IMAGE_TAG" > backend.env
|
||
- cat backend.env
|
||
artifacts:
|
||
reports:
|
||
dotenv: backend.env
|
||
rules:
|
||
- changes: *backend-changes
|
||
|
||
resolve-frontend-tag:
|
||
stage: trigger-deploy
|
||
image: repo.nstart.cloud/library/alpine:3.20
|
||
needs: [docker-admin-ui]
|
||
script:
|
||
- echo "FRONTEND_IMAGE_TAG=$IMAGE_TAG" > frontend.env
|
||
- cat frontend.env
|
||
artifacts:
|
||
reports:
|
||
dotenv: frontend.env
|
||
rules:
|
||
- changes: *frontend-changes
|
||
|
||
trigger-deploy-staging:
|
||
stage: trigger-deploy
|
||
needs:
|
||
- job: resolve-backend-tag
|
||
optional: true
|
||
- job: resolve-frontend-tag
|
||
optional: true
|
||
trigger:
|
||
project: 2-6/2-6-4/terravault/ordinis-infra
|
||
branch: main
|
||
strategy: depend
|
||
variables:
|
||
BACKEND_IMAGE_TAG: $BACKEND_IMAGE_TAG
|
||
FRONTEND_IMAGE_TAG: $FRONTEND_IMAGE_TAG
|
||
DEPLOY_ENV: staging
|
||
rules:
|
||
- if: '$CI_COMMIT_BRANCH == "main"'
|
||
changes:
|
||
- "ordinis-app/**/*"
|
||
- "ordinis-read-api/**/*"
|
||
- "ordinis-projection-writer/**/*"
|
||
- "ordinis-rest-api/**/*"
|
||
- "ordinis-domain/**/*"
|
||
- "ordinis-validation/**/*"
|
||
- "ordinis-events-api/**/*"
|
||
- "ordinis-outbox/**/*"
|
||
- "ordinis-auth/**/*"
|
||
- "ordinis-cuod-bundle/**/*"
|
||
- "ordinis-migrations/**/*"
|
||
- "ordinis-admin-ui/**/*"
|
||
- "pom.xml"
|
||
- ".gitlab-ci.yml"
|
||
|
||
trigger-deploy-prod:
|
||
stage: trigger-deploy
|
||
needs:
|
||
- job: resolve-backend-tag
|
||
optional: true
|
||
- job: resolve-frontend-tag
|
||
optional: true
|
||
trigger:
|
||
project: 2-6/2-6-4/terravault/ordinis-infra
|
||
branch: main
|
||
strategy: depend
|
||
variables:
|
||
BACKEND_IMAGE_TAG: $BACKEND_IMAGE_TAG
|
||
FRONTEND_IMAGE_TAG: $FRONTEND_IMAGE_TAG
|
||
DEPLOY_ENV: prod
|
||
rules:
|
||
- if: '$CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+$/'
|
||
when: manual
|