mirror of
https://github.com/commercialhaskell/stackage-server.git
synced 2026-01-12 12:18:29 +01:00
106 lines
3.6 KiB
YAML
106 lines
3.6 KiB
YAML
image: registry.gitlab.fpcomplete.com/fpco/default-build-image:17
|
|
|
|
cache:
|
|
key: "$CI_BUILD_NAME"
|
|
paths:
|
|
- .stack-work/
|
|
- .stack-root/
|
|
- static/combined/
|
|
|
|
stages:
|
|
- build
|
|
- deploy
|
|
|
|
variables:
|
|
STACK_ROOT: "${CI_PROJECT_DIR}/.stack-root"
|
|
DEPLOYMENT_IMAGE: "${CI_REGISTRY_IMAGE}:${CI_BUILD_REF_SLUG}_${CI_PIPELINE_ID}"
|
|
DEPLOYMENT_NAME: "stackage-server-${CI_BUILD_REF_SLUG}"
|
|
DEPLOYMENT_APP: "${CI_ENVIRONMENT_SLUG}"
|
|
|
|
# This creates anchors for bits of script that are reused between builds
|
|
.anchors:
|
|
# The KUBE_* variables are set by Gitlab's Kubernetes deployment service
|
|
- &KUBELOGIN
|
|
echo "$KUBE_CA_PEM" >"$HOME/ca.pem" &&
|
|
kubectl config set-cluster cluster --server="$KUBE_URL" --certificate-authority="$HOME/ca.pem" &&
|
|
kubectl config set-credentials cluster --token="$KUBE_TOKEN" && kubectl config set-context cluster --cluster=cluster --user=cluster --namespace="$KUBE_NAMESPACE" &&
|
|
kubectl config use-context cluster
|
|
- &KUBEAPPLY
|
|
kubectl apply -f <(envsubst <etc/kube/service_template.yaml) &&
|
|
kubectl apply -f <(envsubst <etc/kube/deployment_template.yaml) &&
|
|
kubectl rollout status -f <(envsubst <etc/kube/deployment_template.yaml)
|
|
|
|
build:
|
|
stage: build
|
|
script:
|
|
# Clear *_TOKEN variables during code build so that compile-time code can't access them
|
|
- CI_BUILD_TOKEN="" KUBE_TOKEN="" PROD_KUBE_TOKEN="" PROD_DOCKER_PASSWORD="" etc/scripts/stage_docker.sh --install-ghc --test
|
|
- docker build -t "${DEPLOYMENT_IMAGE}" etc/docker
|
|
- docker login -u gitlab-ci-token -p "${CI_BUILD_TOKEN}" "${CI_REGISTRY}"
|
|
- docker push "${DEPLOYMENT_IMAGE}"
|
|
- |
|
|
if [[ "$CI_BUILD_REF_NAME" == "master" ]]; then
|
|
docker tag "${DEPLOYMENT_IMAGE}" "${CI_REGISTRY_IMAGE}:latest"
|
|
docker push "${CI_REGISTRY_IMAGE}:latest"
|
|
fi
|
|
|
|
deploy_review:
|
|
stage: deploy
|
|
only:
|
|
- branches
|
|
except:
|
|
- master
|
|
environment:
|
|
name: stackage-server-review/$CI_BUILD_REF_NAME
|
|
url: https://stackage-server-$CI_BUILD_REF_SLUG.review.fpco-untrusted.fpcomplete.com/
|
|
on_stop: stop_review
|
|
variables:
|
|
APPROOT: https://stackage-server-$CI_BUILD_REF_SLUG.review.fpco-untrusted.fpcomplete.com/
|
|
script:
|
|
- *KUBELOGIN
|
|
- echo $KUBE_URL
|
|
- echo $APPROOT
|
|
- *KUBEAPPLY
|
|
|
|
stop_review:
|
|
stage: deploy
|
|
only:
|
|
- branches
|
|
except:
|
|
- master
|
|
when: manual
|
|
environment:
|
|
name: stackage-server-review/$CI_BUILD_REF_NAME
|
|
action: stop
|
|
script:
|
|
- *KUBELOGIN
|
|
- kubectl delete service,deployment -l app=${CI_ENVIRONMENT_SLUG}
|
|
|
|
deploy_prod:
|
|
stage: deploy
|
|
only:
|
|
- master
|
|
environment:
|
|
name: stackage-server-prod
|
|
url: https://www.stackage.org/
|
|
variables:
|
|
DEPLOYMENT_NAME: "stackage-server-prod"
|
|
CRON_DEPLOYMENT_NAME: "stackage-server-cron-prod"
|
|
PROD_DEPLOYMENT_IMAGE: "fpco/stackage-server-prod:${CI_BUILD_REF_SLUG}_${CI_PIPELINE_ID}"
|
|
script:
|
|
- export
|
|
KUBE_CA_PEM="$PROD_KUBE_CA_PEM"
|
|
KUBE_URL="$PROD_KUBE_URL"
|
|
KUBE_TOKEN="$PROD_KUBE_TOKEN"
|
|
KUBE_NAMESPACE="$PROD_KUBE_NAMESPACE"
|
|
- *KUBELOGIN
|
|
- docker login -u "$PROD_DOCKER_USERNAME" -p "${PROD_DOCKER_PASSWORD}"
|
|
- docker tag "$DEPLOYMENT_IMAGE" "$PROD_DEPLOYMENT_IMAGE"
|
|
- docker push "$PROD_DEPLOYMENT_IMAGE"
|
|
- docker tag "$DEPLOYMENT_IMAGE" "fpco/stackage-server-prod:latest"
|
|
- docker push "fpco/stackage-server-prod:latest"
|
|
- kubectl set image "deployment/$DEPLOYMENT_NAME" stackage-server="$PROD_DEPLOYMENT_IMAGE"
|
|
- kubectl set image "deployment/$CRON_DEPLOYMENT_NAME" stackage-server-cron="$PROD_DEPLOYMENT_IMAGE"
|
|
- kubectl rollout status "deployment/$DEPLOYMENT_NAME"
|
|
- kubectl rollout status "deployment/$CRON_DEPLOYMENT_NAME"
|