Compare commits
5 Commits
lesson4-ci
...
lesson6-s3
| Author | SHA1 | Date | |
|---|---|---|---|
| e9c29b117c | |||
| b1f61020af | |||
| 95c46bbda0 | |||
|
24fd31fff4 | ||
|
|
cfdd245655 |
3
.gitignore
vendored
3
.gitignore
vendored
@@ -3,5 +3,6 @@
|
||||
data/gitlab-test/gitlab
|
||||
data/gitlab-test/postgresql
|
||||
data/gitlab-test/redis
|
||||
data/gitlab-test/gitlab-runner*
|
||||
|
||||
Addons/
|
||||
Addons/gpg*
|
||||
|
||||
7
Addons/cleaner/.env.axample
Normal file
7
Addons/cleaner/.env.axample
Normal file
@@ -0,0 +1,7 @@
|
||||
CLEAN_PERIOD=1800
|
||||
DELAY_TIME=86400
|
||||
KEEP_IMAGES=hub.bildme.ru/*
|
||||
KEEP_CONTAINERS=
|
||||
KEEP_CONTAINERS_NAMED=traefik*
|
||||
LOOP=true
|
||||
DEBUG=1
|
||||
16
Addons/cleaner/docker-compose.yaml
Normal file
16
Addons/cleaner/docker-compose.yaml
Normal file
@@ -0,0 +1,16 @@
|
||||
version: '3'
|
||||
services:
|
||||
cleanup:
|
||||
image: meltwater/docker-cleanup
|
||||
restart: always
|
||||
volumes:
|
||||
- /var/lib/docker:/var/lib/docker:rw
|
||||
- /var/run/docker.sock:/var/run/docker.sock:rw
|
||||
environment:
|
||||
- CLEAN_PERIOD=${CLEAN_PERIOD}
|
||||
- DELAY_TIME=${DELAY_TIME}
|
||||
- KEEP_IMAGES=${KEEP_IMAGES}
|
||||
- KEEP_CONTAINERS=${KEEP_CONTAINERS}
|
||||
- KEEP_CONTAINERS_NAMED=${KEEP_CONTAINERS_NAMED}
|
||||
- LOOP=${LOOP}
|
||||
- DEBUG=${DEBUG}
|
||||
14
Addons/minio-srotage/storage-policy.json
Normal file
14
Addons/minio-srotage/storage-policy.json
Normal file
@@ -0,0 +1,14 @@
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Action": [
|
||||
"s3:*"
|
||||
],
|
||||
"Resource": [
|
||||
"arn:aws:s3:::gitlab-storage/*"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -1,107 +0,0 @@
|
||||
# полный реферерс тут
|
||||
# https://docs.gitlab.com/ee/ci/yaml/index.html
|
||||
# а тут доступные переменные
|
||||
# https://docs.gitlab.com/ee/ci/variables/predefined_variables.html
|
||||
|
||||
image: docker:20.10.16
|
||||
|
||||
variables:
|
||||
REGISTRY: hub.bildme.ru
|
||||
GITLAB: git.bildme.ru
|
||||
IMAGE_NAME: $REGISTRY/$CI_PROJECT_PATH:latest
|
||||
RELEASE_NAME: go-site
|
||||
VERSION: 0.0.5
|
||||
PACKAGE_REGISTRY_URL: https://${GITLAB}/api/v4/projects/${CI_PROJECT_ID}/packages/generic/${RELEASE_NAME}/${VERSION}
|
||||
|
||||
stages:
|
||||
- build
|
||||
- push
|
||||
- artifacts
|
||||
- release
|
||||
- deploy
|
||||
|
||||
.rules: &rules
|
||||
rules:
|
||||
- if: $CI_COMMIT_TAG
|
||||
when: never
|
||||
- if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
|
||||
|
||||
build_main:
|
||||
stage: build
|
||||
image: golang:latest
|
||||
<<: *rules
|
||||
script:
|
||||
- cd app
|
||||
- CGO_ENABLED=0 GOOS=linux GO111MODULE=auto go build -a -ldflags="-X 'main.Version=v${VERSION}'" -installsuffix cgo -o go-site .
|
||||
artifacts:
|
||||
paths:
|
||||
- app/go-site
|
||||
tags:
|
||||
- docker
|
||||
|
||||
push_image:
|
||||
stage: push
|
||||
<<: *rules
|
||||
before_script:
|
||||
- docker login -u gitlab-ci-token -p $CI_BUILD_TOKEN $REGISTRY
|
||||
script:
|
||||
- docker build -t $IMAGE_NAME .
|
||||
- docker push $IMAGE_NAME
|
||||
tags:
|
||||
- docker
|
||||
|
||||
package:
|
||||
stage: release
|
||||
<<: *rules
|
||||
before_script:
|
||||
- apk add curl
|
||||
script:
|
||||
- FILE_NAME=${RELEASE_NAME}
|
||||
- cd app
|
||||
- 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file ${FILE_NAME} ${PACKAGE_REGISTRY_URL}/${FILE_NAME}'
|
||||
|
||||
release:
|
||||
stage: release
|
||||
image: registry.gitlab.com/gitlab-org/release-cli:latest
|
||||
<<: *rules
|
||||
script:
|
||||
- echo "Release ${RELEASE_NAME}"
|
||||
release:
|
||||
name: 'Release $VERSION'
|
||||
description: 'Release $VERSION'
|
||||
tag_name: '$VERSION'
|
||||
ref: '$CI_COMMIT_SHA'
|
||||
assets:
|
||||
links:
|
||||
- name: '${RELEASE_NAME}'
|
||||
url: '${PACKAGE_REGISTRY_URL}/${RELEASE_NAME}'
|
||||
|
||||
deploy_prod:
|
||||
stage: deploy
|
||||
image: hub.realmanual.ru/pub/openssh-client:latest
|
||||
<<: *rules
|
||||
variables:
|
||||
DOCKER_SERVER: 192.168.9.199
|
||||
before_script:
|
||||
- eval $(ssh-agent -s)
|
||||
- echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add -
|
||||
- mkdir -p ~/.ssh
|
||||
- chmod 700 ~/.ssh
|
||||
- ssh-keyscan ${DOCKER_SERVER} >> ~/.ssh/known_hosts
|
||||
- chmod 644 ~/.ssh/known_hosts
|
||||
script:
|
||||
- ssh root@${DOCKER_SERVER} "docker rm -f main-go; docker pull hub.bildme.ru/firstgroup/go-site && docker run -d --rm --name main-go -p 3000:3000 hub.bildme.ru/firstgroup/go-site:latest"
|
||||
environment:
|
||||
name: production
|
||||
url: http://${DOCKER_SERVER}:3000/
|
||||
tags:
|
||||
- docker
|
||||
# when:
|
||||
# manual
|
||||
|
||||
|
||||
### Что можно добавить ?
|
||||
### - версионирование тегов
|
||||
### - возможность откатываться назад на версию (на нужную версию через ввод переменной)
|
||||
### - тестирование кода линтером перед деплоем
|
||||
### - возможность деплоя на два окружения (сценарий, когда сначала на стейдж, потом в ручную по тригеру на прод)
|
||||
@@ -1,10 +0,0 @@
|
||||
FROM alpine
|
||||
ENV LANGUAGE="ru"
|
||||
|
||||
COPY app/go-site /app/
|
||||
WORKDIR /app
|
||||
|
||||
RUN apk add --no-cache ca-certificates &&\
|
||||
chmod +x go-site
|
||||
|
||||
CMD [ "./go-site" ]
|
||||
@@ -1,26 +0,0 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"net/http"
|
||||
"os"
|
||||
"fmt"
|
||||
)
|
||||
|
||||
var Version = "0.0.1"
|
||||
|
||||
func indexHandler(w http.ResponseWriter, r *http.Request) {
|
||||
w.Write([]byte("<h1>Hello World, im ver:"+Version+" !</h1>"))
|
||||
}
|
||||
|
||||
func main() {
|
||||
port := os.Getenv("PORT")
|
||||
if port == "" {
|
||||
port = "3000"
|
||||
}
|
||||
|
||||
fmt.Print("\nVersion:", Version, ", Im run in http://127.0.0.1:", port)
|
||||
|
||||
mux := http.NewServeMux()
|
||||
mux.HandleFunc("/", indexHandler)
|
||||
http.ListenAndServe(":"+port, mux)
|
||||
}
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
docker pull hub.bildme.ru/firstgroup/go-site:latest
|
||||
docker run --rm --name main-go -p 3000:3000 hub.bildme.ru/firstgroup/go-site:latest
|
||||
@@ -128,14 +128,14 @@ services:
|
||||
- REGISTRY_AUTH_TOKEN_ISSUER=gitlab-issuer
|
||||
- REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/certs/registry.crt
|
||||
- REGISTRY_STORAGE_DELETE_ENABLED=true
|
||||
- REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/registry
|
||||
# - REGISTRY_STORAGE=s3
|
||||
# - REGISTRY_STORAGE_S3_ACCESSKEY
|
||||
# - REGISTRY_STORAGE_S3_SECRETKEY
|
||||
# - REGISTRY_STORAGE_S3_REGIONENDPOINT
|
||||
# - REGISTRY_STORAGE_S3_REGION
|
||||
# - REGISTRY_STORAGE_S3_BUCKET
|
||||
# - REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR=inmemory
|
||||
# - REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/registry
|
||||
- REGISTRY_STORAGE=s3
|
||||
- REGISTRY_STORAGE_S3_ACCESSKEY
|
||||
- REGISTRY_STORAGE_S3_SECRETKEY
|
||||
- REGISTRY_STORAGE_S3_REGIONENDPOINT
|
||||
- REGISTRY_STORAGE_S3_REGION
|
||||
- REGISTRY_STORAGE_S3_BUCKET
|
||||
- REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR=inmemory
|
||||
expose:
|
||||
- 5000
|
||||
networks:
|
||||
@@ -172,47 +172,69 @@ services:
|
||||
volumes:
|
||||
- ${SERVICE_DATA}/${SERVICE_NAME}/redis:/var/lib/redis:Z
|
||||
|
||||
# runner_1: &runner
|
||||
# image: ${DOCKER_IMAGE_RUNNER}
|
||||
# container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_1
|
||||
# restart: always
|
||||
# depends_on:
|
||||
# - gitlab
|
||||
# command: --debug run --user=gitlab-runner --working-directory=/home/gitlab-runner
|
||||
# environment:
|
||||
# - CI_SERVER_URL=https://${GITLAB_HOST}
|
||||
# - CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
||||
# - CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
||||
# - RUNNER_TOKEN=${RUNNER_TOKEN}
|
||||
# - RUNNER_DESCRIPTION=gitab-runner_1
|
||||
# - RUNNER_EXECUTOR=docker
|
||||
# - DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
||||
# networks:
|
||||
# - ${SERVICE_NETWORK}
|
||||
# volumes:
|
||||
# - ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_1:/etc/gitlab-runner
|
||||
# - /var/run/docker.sock:/var/run/docker.sock
|
||||
runner_1: &runner
|
||||
image: ${DOCKER_IMAGE_RUNNER}
|
||||
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_1
|
||||
restart: always
|
||||
depends_on:
|
||||
- gitlab
|
||||
command: --debug run --user=gitlab-runner --working-directory=/home/gitlab-runner
|
||||
environment:
|
||||
- CI_SERVER_URL=https://${GITLAB_HOST}
|
||||
- CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
||||
- CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
||||
- RUNNER_TOKEN=${RUNNER_TOKEN}
|
||||
- RUNNER_DESCRIPTION=gitab-runner_1
|
||||
- RUNNER_EXECUTOR=docker
|
||||
- DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
||||
networks:
|
||||
- ${SERVICE_NETWORK}
|
||||
volumes:
|
||||
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_1:/etc/gitlab-runner
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
|
||||
# runner_2:
|
||||
# <<: *runner
|
||||
# container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_2
|
||||
# environment:
|
||||
# - RUNNER_DESCRIPTION=gitab-runner_2
|
||||
# volumes:
|
||||
# - ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_2:/etc/gitlab-runner
|
||||
runner_2:
|
||||
<<: *runner
|
||||
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_2
|
||||
command: --debug run --user=gitlab-runner --working-directory=/home/gitlab-runner
|
||||
environment:
|
||||
- CI_SERVER_URL=https://${GITLAB_HOST}
|
||||
- CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
||||
- CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
||||
- RUNNER_TOKEN=${RUNNER_TOKEN}
|
||||
- RUNNER_DESCRIPTION=gitab-runner_2
|
||||
- RUNNER_EXECUTOR=docker
|
||||
- DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
||||
volumes:
|
||||
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_2:/etc/gitlab-runner
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
|
||||
# runner_3:
|
||||
# <<: *runner
|
||||
# container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_3
|
||||
# environment:
|
||||
# - RUNNER_DESCRIPTION=gitab-runner_3
|
||||
# volumes:
|
||||
# - ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_3:/etc/gitlab-runner
|
||||
runner_3:
|
||||
<<: *runner
|
||||
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_3
|
||||
environment:
|
||||
- CI_SERVER_URL=https://${GITLAB_HOST}
|
||||
- CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
||||
- CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
||||
- RUNNER_TOKEN=${RUNNER_TOKEN}
|
||||
- RUNNER_DESCRIPTION=gitab-runner_3
|
||||
- RUNNER_EXECUTOR=docker
|
||||
- DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
||||
volumes:
|
||||
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_3:/etc/gitlab-runner
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
|
||||
# runner_4:
|
||||
# <<: *runner
|
||||
# container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_4
|
||||
# environment:
|
||||
# - RUNNER_DESCRIPTION=gitab-runner_4
|
||||
# volumes:
|
||||
# - ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_4:/etc/gitlab-runner
|
||||
runner_4:
|
||||
<<: *runner
|
||||
container_name: ${SERVICE_NAME}_${CONTAINER_NAME_RUNNER}_4
|
||||
environment:
|
||||
- CI_SERVER_URL=https://${GITLAB_HOST}
|
||||
- CI_SERVER_LOCAL_IP=${CI_SERVER_LOCAL_IP}
|
||||
- CI_SERVER_WITH_RUNNER=${CI_SERVER_WITH_RUNNER}
|
||||
- RUNNER_TOKEN=${RUNNER_TOKEN}
|
||||
- RUNNER_DESCRIPTION=gitab-runner_4
|
||||
- RUNNER_EXECUTOR=docker
|
||||
- DOCKER_IMAGE=gitlab/gitlab-runner-helper:x86_64-latest
|
||||
volumes:
|
||||
- ${SERVICE_DATA}/${SERVICE_NAME}/gitlab-runner_4:/etc/gitlab-runner
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
|
||||
Reference in New Issue
Block a user