diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 8ed84308aaeac6362b450ff5ecc15d8cf844448b..13c9dcf0885b43522a028ffffe3e9abd8232bdc7 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -4,11 +4,7 @@ image: python:3.11 # - postgres:13 variables: - POSTGRES_DB: kszkepzes - CONTAINER_IMAGE: 'harbor.sch.bme.hu/kszk/$CI_PROJECT_NAME:$CI_COMMIT_REF_NAME' - CI_REGISTRY_IMAGE: '$CONTAINER_IMAGE' - CS_REGISTRY_USER: '$REGISTRY_USER' - CS_REGISTRY_PASSWORD: '$REGISTRY_PASSWORD' + CONTAINER_IMAGE: 'harbor.sch.bme.hu/kszk-kepzes/backend:$CI_COMMIT_REF_NAME' cache: key: '$CI_JOB_NAME-$CI_COMMIT_REF_SLUG' @@ -19,32 +15,13 @@ cache: stages: - Test and Flake8 - Docker Build - - Scan Container - deploy -container_scanning: - stage: Scan Container - tags: [kszk] - rules: - - if: '$CI_COMMIT_TAG' - variables: - CS_DEFAULT_BRANCH_IMAGE: $CONTAINER_IMAGE - -sast: - tags: [kszk] - stage: Test and Flake8 - -secret_detection: - tags: [kszk] - rules: - - if: '$CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_TAG || $CI_COMMIT_REF_NAME == "dev"' - stage: Test and Flake8 Flake8: stage: Test and Flake8 rules: - if: '$CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_TAG || $CI_COMMIT_REF_NAME == "dev"' - tags: [kszk] script: - python -V - python3 -m venv env @@ -73,7 +50,6 @@ Flake8: Docker build to KSZK registry: stage: Docker Build - tags: [kszk] rules: - if: '$CI_COMMIT_TAG' image: @@ -83,27 +59,22 @@ Docker build to KSZK registry: - echo "{\"auths\":{\"harbor.sch.bme.hu\":{\"username\":\"$REGISTRY_USER\",\"password\":\"$REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --destination $CONTAINER_IMAGE -Deploy to Kubernetes: - stage: deploy - image: alpine - tags: [kszk] - environment: - name: master - before_script: - - chmod 600 $KUBECONFIG - - apk add --no-cache curl - - curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" - - chmod +x ./kubectl - - mv ./kubectl /usr/local/bin/kubectl - - kubectl version - script: - - cd k8s - - sed -i "s|##IMAGETAG##|${CI_COMMIT_REF_NAME}|" deployment.yml - - kubectl apply -f deployment.yml - rules: - - if: '$CI_COMMIT_TAG' - -include: -- template: Security/SAST.gitlab-ci.yml -- template: Jobs/Secret-Detection.gitlab-ci.yml -- template: Jobs/Container-Scanning.gitlab-ci.yml +# Deploy to Kubernetes: +# stage: deploy +# image: alpine +# tags: [k9r] +# environment: +# name: master +# before_script: +# - chmod 600 $KUBECONFIG +# - apk add --no-cache curl +# - curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" +# - chmod +x ./kubectl +# - mv ./kubectl /usr/local/bin/kubectl +# - kubectl version +# script: +# - cd k8s +# - sed -i "s|##IMAGETAG##|${CI_COMMIT_REF_NAME}|" deployment.yml +# - kubectl apply -f deployment.yml +# rules: +# - if: '$CI_COMMIT_TAG'