88 lines
3.6 KiB
YAML
88 lines
3.6 KiB
YAML
|
|
# Use the acc-py-devtools templates found at
|
|
# https://gitlab.cern.ch/-/ide/project/acc-co/devops/python/acc-py-devtools/blob/master/-/acc_py_devtools/templates/gitlab-ci/python.yml.
|
|
include:
|
|
- project: acc-co/devops/python/acc-py-devtools
|
|
file: acc_py_devtools/templates/gitlab-ci/python.yml
|
|
|
|
variables:
|
|
project_name: cara
|
|
PY_VERSION: "3.6" # This is what we have running in OpenShift currently.
|
|
|
|
|
|
# A full installation of CARA, tested with pytest.
|
|
test_install:
|
|
extends: .acc_py_full_test
|
|
|
|
|
|
# A development installation of CARA tested with pytest.
|
|
test_dev:
|
|
extends: .acc_py_dev_test
|
|
|
|
|
|
# A development installation of CARA tested with pytest.
|
|
test_dev-39:
|
|
variables:
|
|
PY_VERSION: "3.9"
|
|
extends: .acc_py_dev_test
|
|
|
|
|
|
.image_builder:
|
|
# Build and push images to the openshift instance, which automatically triggers an application re-deployment.
|
|
stage: deploy
|
|
image:
|
|
# Based on guidance at https://gitlab.cern.ch/gitlabci-examples/build_docker_image.
|
|
name: gitlab-registry.cern.ch/ci-tools/docker-image-builder
|
|
entrypoint: [""]
|
|
rules:
|
|
- if: '$OPENSHIFT_DOCKER_TOKEN_TEST != "" && $CI_COMMIT_BRANCH == "live/test-cara"'
|
|
variables:
|
|
DOCKER_REGISTRY: "${OPENSHIFT_DOCKER_REGISTRY_TEST}"
|
|
DOCKER_TOKEN: "${OPENSHIFT_DOCKER_TOKEN_TEST}"
|
|
- if: '$OPENSHIFT_DOCKER_TOKEN_PROD != "" && $CI_COMMIT_BRANCH == "master"'
|
|
variables:
|
|
DOCKER_REGISTRY: "${OPENSHIFT_DOCKER_REGISTRY_PROD}"
|
|
DOCKER_TOKEN: "${OPENSHIFT_DOCKER_TOKEN_PROD}"
|
|
script:
|
|
- echo "{\"auths\":{\"$DOCKER_REGISTRY\":{\"auth\":\"$DOCKER_TOKEN\"}}}" > /kaniko/.docker/config.json
|
|
- /kaniko/executor --context $CI_PROJECT_DIR/$DOCKERFILE_DIRECTORY --dockerfile $CI_PROJECT_DIR/$DOCKERFILE_DIRECTORY/Dockerfile --destination $DOCKER_REGISTRY/$IMAGE_NAME:latest
|
|
|
|
|
|
auth-service-image_builder:
|
|
extends:
|
|
- .image_builder
|
|
variables:
|
|
IMAGE_NAME: auth-service
|
|
DOCKERFILE_DIRECTORY: app-config/auth-service
|
|
|
|
|
|
trigger_build_on_openshift:
|
|
stage: deploy
|
|
rules:
|
|
- if: '$OPENSHIFT_BUILD_WEBHOOK_SECRET'
|
|
script:
|
|
- curl -X POST -k https://openshift.cern.ch:443/apis/build.openshift.io/v1/namespaces/cara/buildconfigs/cara-router/webhooks/${OPENSHIFT_BUILD_WEBHOOK_SECRET}/generic
|
|
- curl -X POST -k https://openshift.cern.ch:443/apis/build.openshift.io/v1/namespaces/cara/buildconfigs/cara-webservice/webhooks/${OPENSHIFT_BUILD_WEBHOOK_SECRET}/generic
|
|
|
|
|
|
deploy_to_test:
|
|
stage: deploy
|
|
rules:
|
|
- if: '$CI_COMMIT_BRANCH == "live/test-cara" && $OPENSHIFT_TEST_BUILD_WEBHOOK_SECRET'
|
|
script:
|
|
- curl -X POST -k https://openshift-dev.cern.ch:443/apis/build.openshift.io/v1/namespaces/test-cara/buildconfigs/cara-router/webhooks/${OPENSHIFT_TEST_BUILD_WEBHOOK_SECRET}/generic
|
|
- curl -X POST -k https://openshift-dev.cern.ch:443/apis/build.openshift.io/v1/namespaces/test-cara/buildconfigs/cara-webservice/webhooks/${OPENSHIFT_TEST_BUILD_WEBHOOK_SECRET}/generic
|
|
|
|
|
|
oci_calculator:
|
|
# A convenient way for users to run the CARA calculator.
|
|
stage: deploy
|
|
rules:
|
|
# Only run if branch is master (the default branch).
|
|
- if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
|
|
image:
|
|
name: gitlab-registry.cern.ch/ci-tools/docker-image-builder
|
|
entrypoint: [""]
|
|
script:
|
|
- echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json
|
|
- /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --destination $CI_REGISTRY_IMAGE/calculator:latest
|