add CI/CD files
This commit is contained in:
parent
647dd96b47
commit
34335abc92
4
deployment/Jenkinsfile
vendored
4
deployment/Jenkinsfile
vendored
@ -44,7 +44,7 @@ podTemplate(
|
|||||||
withSonarQubeEnv('SonarQube') {
|
withSonarQubeEnv('SonarQube') {
|
||||||
sh """
|
sh """
|
||||||
${sonarScannerHome}/bin/sonar-scanner \
|
${sonarScannerHome}/bin/sonar-scanner \
|
||||||
-Dsonar.projectKey=lifesub-web-lifesub-web-dg0400 \
|
-Dsonar.projectKey=lifesub-web-dg0400 \
|
||||||
-Dsonar.sources=src \
|
-Dsonar.sources=src \
|
||||||
-Dsonar.tests=src \
|
-Dsonar.tests=src \
|
||||||
-Dsonar.test.inclusions=src/**/*.test.js,src/**/*.test.jsx \
|
-Dsonar.test.inclusions=src/**/*.test.js,src/**/*.test.jsx \
|
||||||
@ -105,6 +105,7 @@ podTemplate(
|
|||||||
export lifesub_web_image_path=${props.registry}/${props.image_org}/lifesub-web:${imageTag}
|
export lifesub_web_image_path=${props.registry}/${props.image_org}/lifesub-web:${imageTag}
|
||||||
export replicas=${props.replicas}
|
export replicas=${props.replicas}
|
||||||
export export_port=${props.export_port}
|
export export_port=${props.export_port}
|
||||||
|
export ingress_host=${props.ingress_host}
|
||||||
export resources_requests_cpu=${props.resources_requests_cpu}
|
export resources_requests_cpu=${props.resources_requests_cpu}
|
||||||
export resources_requests_memory=${props.resources_requests_memory}
|
export resources_requests_memory=${props.resources_requests_memory}
|
||||||
export resources_limits_cpu=${props.resources_limits_cpu}
|
export resources_limits_cpu=${props.resources_limits_cpu}
|
||||||
@ -126,7 +127,6 @@ podTemplate(
|
|||||||
echo "Waiting for service external IP..."
|
echo "Waiting for service external IP..."
|
||||||
while [[ -z \$(kubectl -n ${namespace} get svc lifesub-web-service -o jsonpath='{.status.loadBalancer.ingress[0].ip}') ]]; do
|
while [[ -z \$(kubectl -n ${namespace} get svc lifesub-web-service -o jsonpath='{.status.loadBalancer.ingress[0].ip}') ]]; do
|
||||||
sleep 5
|
sleep 5
|
||||||
echo "Still waiting for external IP assignment..."
|
|
||||||
done
|
done
|
||||||
echo "Service external IP: \$(kubectl -n ${namespace} get svc lifesub-web-service -o jsonpath='{.status.loadBalancer.ingress[0].ip}')"
|
echo "Service external IP: \$(kubectl -n ${namespace} get svc lifesub-web-service -o jsonpath='{.status.loadBalancer.ingress[0].ip}')"
|
||||||
"""
|
"""
|
||||||
|
|||||||
@ -1,136 +0,0 @@
|
|||||||
def PIPELINE_ID = "${env.BUILD_NUMBER}"
|
|
||||||
|
|
||||||
def getImageTag() {
|
|
||||||
def dateFormat = new java.text.SimpleDateFormat('yyyyMMddHHmmss')
|
|
||||||
def currentDate = new Date()
|
|
||||||
return dateFormat.format(currentDate)
|
|
||||||
}
|
|
||||||
|
|
||||||
podTemplate(
|
|
||||||
label: "${PIPELINE_ID}",
|
|
||||||
serviceAccount: 'jenkins',
|
|
||||||
containers: [
|
|
||||||
containerTemplate(name: 'node', image: 'node:20-slim', ttyEnabled: true, command: 'cat'),
|
|
||||||
containerTemplate(name: 'podman', image: "mgoltzsche/podman", ttyEnabled: true, command: 'cat', privileged: true),
|
|
||||||
containerTemplate(name: 'azure-cli', image: 'hiondal/azure-kubectl:latest', command: 'cat', ttyEnabled: true),
|
|
||||||
containerTemplate(name: 'envsubst', image: "hiondal/envsubst", command: 'sleep', args: '1h'),
|
|
||||||
containerTemplate(name: 'sonar-scanner', image: 'sonarsource/sonar-scanner-cli:latest', command: 'cat', ttyEnabled: true),
|
|
||||||
containerTemplate(name: 'git', image: 'alpine/git:latest', command: 'cat', ttyEnabled: true)
|
|
||||||
],
|
|
||||||
volumes: [
|
|
||||||
emptyDirVolume(mountPath: '/root/.azure', memory: false),
|
|
||||||
emptyDirVolume(mountPath: '/opt/sonar-scanner/.sonar/cache', memory: false)
|
|
||||||
]
|
|
||||||
) {
|
|
||||||
node(PIPELINE_ID) {
|
|
||||||
def props
|
|
||||||
def imageTag = getImageTag()
|
|
||||||
def manifest = "deploy.yaml"
|
|
||||||
def namespace
|
|
||||||
def sonarScannerHome = '/opt/sonar-scanner'
|
|
||||||
def MANIFEST_REPO = "https://github.com/cna-bootcamp/lifesub-manifest.git"
|
|
||||||
def MANIFEST_BRANCH = "main"
|
|
||||||
|
|
||||||
stage("Get Source") {
|
|
||||||
checkout scm
|
|
||||||
props = readProperties file: "deployment/deploy_env_vars"
|
|
||||||
namespace = "${props.namespace}"
|
|
||||||
}
|
|
||||||
|
|
||||||
stage('Code Analysis & Quality Gate') {
|
|
||||||
container('node') {
|
|
||||||
sh "npm install"
|
|
||||||
sh "npm test -- --coverage --passWithNoTests" //test code 없어도 통과되게 함
|
|
||||||
}
|
|
||||||
|
|
||||||
container('sonar-scanner') {
|
|
||||||
withSonarQubeEnv('SonarQube') {
|
|
||||||
sh """
|
|
||||||
${sonarScannerHome}/bin/sonar-scanner \
|
|
||||||
-Dsonar.projectKey=lifesub-web \
|
|
||||||
-Dsonar.sources=src \
|
|
||||||
-Dsonar.tests=src \
|
|
||||||
-Dsonar.test.inclusions=src/**/*.test.js,src/**/*.test.jsx \
|
|
||||||
-Dsonar.javascript.lcov.reportPaths=coverage/lcov.info
|
|
||||||
"""
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
timeout(time: 10, unit: 'MINUTES') {
|
|
||||||
def qg = waitForQualityGate()
|
|
||||||
if (qg.status != 'OK') {
|
|
||||||
error "Pipeline aborted due to quality gate failure: ${qg.status}"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
stage("Setup AKS") {
|
|
||||||
container('azure-cli') {
|
|
||||||
withCredentials([azureServicePrincipal('azure-credentials')]) {
|
|
||||||
sh """
|
|
||||||
az login --service-principal -u \$AZURE_CLIENT_ID -p \$AZURE_CLIENT_SECRET -t \$AZURE_TENANT_ID
|
|
||||||
az aks get-credentials --resource-group ictcoe-edu --name ${props.teamid}-aks --overwrite-existing
|
|
||||||
kubectl create namespace ${namespace} --dry-run=client -o yaml | kubectl apply -f -
|
|
||||||
"""
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
stage('Build & Push Image') {
|
|
||||||
container('podman') {
|
|
||||||
withCredentials([usernamePassword(
|
|
||||||
credentialsId: 'acr-credentials',
|
|
||||||
usernameVariable: 'USERNAME',
|
|
||||||
passwordVariable: 'PASSWORD'
|
|
||||||
)]) {
|
|
||||||
def imagePath = "${props.registry}/${props.image_org}/lifesub-web:${imageTag}"
|
|
||||||
|
|
||||||
sh """
|
|
||||||
podman login ${props.registry} --username \$USERNAME --password \$PASSWORD
|
|
||||||
|
|
||||||
podman build \
|
|
||||||
--build-arg PROJECT_FOLDER="." \
|
|
||||||
--build-arg REACT_APP_MEMBER_URL="${props.react_app_member_url}" \
|
|
||||||
--build-arg REACT_APP_MYSUB_URL="${props.react_app_mysub_url}" \
|
|
||||||
--build-arg REACT_APP_RECOMMEND_URL="${props.react_app_recommend_url}" \
|
|
||||||
--build-arg BUILD_FOLDER="deployment" \
|
|
||||||
--build-arg EXPORT_PORT="${props.export_port}" \
|
|
||||||
-f deployment/Dockerfile-lifesub-web \
|
|
||||||
-t ${imagePath} .
|
|
||||||
|
|
||||||
podman push ${imagePath}
|
|
||||||
"""
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
stage('Update Manifest Repository') {
|
|
||||||
container('git') {
|
|
||||||
// 임시 디렉토리 생성
|
|
||||||
sh "mkdir -p /tmp/manifests"
|
|
||||||
|
|
||||||
// Clone manifest repository
|
|
||||||
withCredentials([usernamePassword(credentialsId: 'github-credentials', usernameVariable: 'GIT_USERNAME', passwordVariable: 'GIT_PASSWORD')]) {
|
|
||||||
sh """
|
|
||||||
git config --global user.email "jenkins@example.com"
|
|
||||||
git config --global user.name "Jenkins Pipeline"
|
|
||||||
|
|
||||||
git clone https://${GIT_USERNAME}:${GIT_PASSWORD}@github.com/cna-bootcamp/lifesub-manifest.git /tmp/manifests
|
|
||||||
cd /tmp/manifests
|
|
||||||
|
|
||||||
# Update frontend image tag
|
|
||||||
if [ -f lifesub-web/deployments/lifesub-web-deployment.yaml ]; then
|
|
||||||
sed -i "s|image: ${props.registry}/${props.image_org}/lifesub-web:.*|image: ${props.registry}/${props.image_org}/lifesub-web:${imageTag}|g" lifesub-web/deployments/lifesub-web-deployment.yaml
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Commit and push changes
|
|
||||||
git add .
|
|
||||||
git commit -m "Update frontend image tag to ${imageTag}" || true
|
|
||||||
git push
|
|
||||||
"""
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@ -7,9 +7,9 @@ metadata:
|
|||||||
data:
|
data:
|
||||||
runtime-env.js: |
|
runtime-env.js: |
|
||||||
window.__runtime_config__ = {
|
window.__runtime_config__ = {
|
||||||
MEMBER_URL: 'http://dg0400.20.214.196.128.nip.io/api/auth',
|
MEMBER_URL: 'http://${ingress_host}/api/auth',
|
||||||
MYSUB_URL: 'http://dg0400.20.214.196.128.nip.io/api/mysub',
|
MYSUB_URL: 'http://${ingress_host}/api/mysub',
|
||||||
RECOMMEND_URL: 'http://dg0400.20.214.196.128.nip.io/api/recommend'
|
RECOMMEND_URL: 'http://${ingress_host}/api/recommend'
|
||||||
};
|
};
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|||||||
@ -10,6 +10,7 @@ image_org=dg0400
|
|||||||
# Application Settings
|
# Application Settings
|
||||||
replicas=1
|
replicas=1
|
||||||
export_port=18080
|
export_port=18080
|
||||||
|
ingress_host=dg0400.20.214.196.128.nip.io
|
||||||
|
|
||||||
# Resource Settings
|
# Resource Settings
|
||||||
resources_requests_cpu=256m
|
resources_requests_cpu=256m
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user