173 lines
7.4 KiB
YAML
173 lines
7.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Sensor
|
|
metadata:
|
|
name: webhook-build
|
|
namespace: argo-events
|
|
spec:
|
|
template:
|
|
serviceAccountName: operate-workflow-sa
|
|
dependencies:
|
|
- name: gitea-push
|
|
eventSourceName: webhook
|
|
eventName: user-microservice
|
|
triggers:
|
|
- template:
|
|
name: trigger-build-workflow
|
|
k8s:
|
|
group: argoproj.io
|
|
version: v1alpha1
|
|
resource: workflows
|
|
operation: create
|
|
source:
|
|
resource:
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Workflow
|
|
metadata:
|
|
generateName: build-workflow-
|
|
namespace: argo-events
|
|
spec:
|
|
entrypoint: main
|
|
serviceAccountName: operate-workflow-sa
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: workspace
|
|
spec:
|
|
accessModes: ["ReadWriteOnce"]
|
|
resources:
|
|
requests:
|
|
storage: 128Mi
|
|
volumes:
|
|
- name: secrets-store
|
|
csi:
|
|
driver: secrets-store.csi.k8s.io
|
|
readOnly: true
|
|
volumeAttributes:
|
|
secretProviderClass: azure-keyvault
|
|
templates:
|
|
- name: main
|
|
steps:
|
|
- - name: checkout
|
|
template: checkout
|
|
- - name: tests
|
|
template: tests
|
|
- - name: build-and-push-image
|
|
template: build-and-push-image
|
|
arguments:
|
|
parameters:
|
|
- name: git-sha
|
|
value: "{{steps.checkout.outputs.parameters.git-sha}}"
|
|
- - name: gitops-commit
|
|
template: gitops-commit
|
|
arguments:
|
|
parameters:
|
|
- name: git-sha
|
|
value: "{{steps.checkout.outputs.parameters.git-sha}}"
|
|
- name: checkout
|
|
container:
|
|
image: alpine/git
|
|
command: [sh, -c]
|
|
workingDir: /workspace
|
|
env:
|
|
- name: REPO_URL
|
|
value: https://gitea.marcin00.pl/pikram/user-microservice.git
|
|
- name: REPO_BRANCH
|
|
value: argo-workflows
|
|
args:
|
|
- |
|
|
git clone --depth 1 --branch "${REPO_BRANCH}" --single-branch "${REPO_URL}" repo
|
|
cd repo
|
|
git rev-parse HEAD > /tmp/gitsha.txt
|
|
volumeMounts:
|
|
- name: workspace
|
|
mountPath: /workspace
|
|
outputs:
|
|
parameters:
|
|
- name: git-sha
|
|
valueFrom:
|
|
path: /tmp/gitsha.txt
|
|
- name: tests
|
|
script:
|
|
image: python:3.11.7-alpine
|
|
command: [sh]
|
|
workingDir: /workspace/repo/api
|
|
source: |
|
|
python3 -m venv env
|
|
source env/bin/activate
|
|
pip install -r requirements.txt pytest
|
|
python3 -m pytest --junit-xml=pytest_junit.xml
|
|
volumeMounts:
|
|
- name: workspace
|
|
mountPath: /workspace
|
|
- name: build-and-push-image
|
|
inputs:
|
|
parameters:
|
|
- name: git-sha
|
|
podSpecPatch: |
|
|
runtimeClassName: sysbox-runc
|
|
metadata:
|
|
annotations:
|
|
io.kubernetes.cri-o.userns-mode: "auto:size=65536"
|
|
container:
|
|
image: marcin00.azurecr.io/azure-cli-docker:slim-bookworm
|
|
command: [sh, -c]
|
|
workingDir: /workspace/repo
|
|
env:
|
|
- name: DOCKER_IMAGE
|
|
value: marcin00.azurecr.io/user-microservice:{{inputs.parameters.git-sha}}
|
|
- name: CLIENT_ID
|
|
value: c302726f-fafb-4143-94c1-67a70975574a
|
|
- name: ACR_NAME
|
|
value: marcin00
|
|
args:
|
|
- |
|
|
dockerd &
|
|
docker build -t $DOCKER_IMAGE --build-arg APP_VERSION={{inputs.parameters.git-sha}} --build-arg BUILD_DATE=$(date -u +"%Y-%m-%dT%H:%M:%SZ") .
|
|
az login --identity --client-id ${CLIENT_ID}
|
|
az acr login --name ${ACR_NAME}
|
|
docker push ${DOCKER_IMAGE}
|
|
volumeMounts:
|
|
- name: workspace
|
|
mountPath: /workspace
|
|
- name: gitops-commit
|
|
inputs:
|
|
parameters:
|
|
- name: git-sha
|
|
container:
|
|
image: alpine/git
|
|
command: [sh, -c]
|
|
env:
|
|
- name: DEPLOY_REPO_URL
|
|
value: ssh://git@srv22.mikr.us:20343/pikram/user-microservice-deploy.git
|
|
- name: DEPLOY_REPO_BRANCH
|
|
value: argo-deploy
|
|
- name: CI_COMMIT_SHA
|
|
value: "{{inputs.parameters.git-sha}}"
|
|
args:
|
|
- |
|
|
mkdir -p ~/.ssh
|
|
cp /mnt/secrets/gitea-known-host ~/.ssh/known_hosts
|
|
chmod 644 ~/.ssh/known_hosts
|
|
cp /mnt/secrets/gitea-deploy-key ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
git config --global user.name "argo[bot]"
|
|
git config --global user.email "argo@marcin00.pl"
|
|
git clone --depth 1 --branch $DEPLOY_REPO_BRANCH --single-branch $DEPLOY_REPO_URL repo
|
|
cd repo
|
|
awk -v commit="$CI_COMMIT_SHA" '
|
|
$0 ~ /name:[[:space:]]*api/ { in_api_container = 1; print; next }
|
|
in_api_container && $0 ~ /^[[:space:]]*image:[[:space:]]*/ {
|
|
sub(/:[^:[:space:]]+$/, ":" commit)
|
|
in_api_container = 0
|
|
print
|
|
next
|
|
}
|
|
{ print }
|
|
' deploy.yaml > deploy.tmp && mv deploy.tmp deploy.yaml
|
|
git add deploy.yaml
|
|
git diff-index --quiet HEAD || git commit -m "Argo: Changed deployed version to $CI_COMMIT_SHA"
|
|
git push origin $DEPLOY_REPO_BRANCH
|
|
volumeMounts:
|
|
- name: secrets-store
|
|
mountPath: "/mnt/secrets"
|
|
readOnly: true
|