Loading .dockerignore 0 → 100644 +2 −0 Original line number Diff line number Diff line * !/dist/*.jar .env 0 → 100644 +2 −0 Original line number Diff line number Diff line MICROSERVICE_NAME=ais MICROSERVICE_PORT=8090 .gitignore 0 → 100644 +7 −0 Original line number Diff line number Diff line .* !.gitignore !.gitlab-ci.yml !.dockerignore !.env target dist .gitlab-ci.yml 0 → 100644 +149 −0 Original line number Diff line number Diff line stages: - build - package - test-package - deploy maven-build: stage: build image: redmic/maven-gitlab variables: SPRING_PROFILES_ACTIVE: test MAVEN_OPTS: "-Dmaven.repo.local=.m2/repository -Daishub.service.username=${AISHUB_SERVICE_USERNAME}" only: - branches cache: paths: - .m2/repository/ script: - mvn verify spring-boot:repackage -B - "COVERAGE=$(xmllint --html --xpath '//table[@id=\"coveragetable\"]/tfoot//td[@class=\"ctr2\"][1]/text()' target/site/jacoco/index.html)" - 'echo "Coverage: ${COVERAGE}"' after_script: - rm -r .m2/repository/es artifacts: name: "${CI_PROJECT_NAME}" expire_in: '6 months' paths: - dist/*.jar docker-build-commit: stage: package image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 services: - docker:dind only: - branches except: - master script: - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY} - docker build -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_REF_NAME}-latest . - docker push ${CI_REGISTRY_IMAGE} docker-build-tag: stage: package image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 services: - docker:dind only: - tags script: - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY} - docker build -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_TAG} -t ${CI_REGISTRY_IMAGE}:latest . - docker push ${CI_REGISTRY_IMAGE} container_scanning: stage: test-package image: docker:stable variables: DOCKER_DRIVER: overlay2 allow_failure: true services: - docker:stable-dind only: - branches except: - master script: - docker run -d --name db arminc/clair-db:latest - docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.1 - apk add -U wget ca-certificates - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY} - docker pull ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} - wget https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64 - mv clair-scanner_linux_amd64 clair-scanner - chmod +x clair-scanner - touch clair-whitelist.yml - ./clair-scanner -c http://docker:6060 --ip $(hostname -i) -r gl-sast-container-report.json -l clair.log -w clair-whitelist.yml ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} || true artifacts: paths: [gl-sast-container-report.json] deploy-dev: stage: deploy image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 SSH_REMOTE: ${DEV_SSH_REMOTE} SERVICE: ${CI_PROJECT_NAME} IMAGE_TAG: ${CI_COMMIT_SHA} JAVA_OPTS: -Xmx512m -Xss512m -Daishub.service.username=${AISHUB_SERVICE_USERNAME} COMPOSE_FILE: docker-compose.tmpl.yml:docker-compose.dev.yml services: - docker:dind script: - deploy.sh SPRING_PROFILES_ACTIVE=pre IMAGE_TAG=${IMAGE_TAG} COMPOSE_FILE=${COMPOSE_FILE} JAVA_OPTS=${JAVA_OPTS} environment: name: dev url: https://appdev.${DEV_PUBLIC_HOSTNAME}/api/${CI_PROJECT_NAME} only: - dev deploy-supporting-branch: stage: deploy image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 SSH_REMOTE: ${DEV_SSH_REMOTE} SERVICE: ${CI_PROJECT_NAME} IMAGE_TAG: ${CI_COMMIT_SHA} JAVA_OPTS: -Xmx512m -Xss512m -Daishub.service.username=${AISHUB_SERVICE_USERNAME} COMPOSE_FILE: docker-compose.tmpl.yml:docker-compose.dev.yml services: - docker:dind script: - deploy.sh SPRING_PROFILES_ACTIVE=pre IMAGE_TAG=${IMAGE_TAG} COMPOSE_FILE=${COMPOSE_FILE} JAVA_OPTS=${JAVA_OPTS} environment: name: dev url: https://appdev.${DEV_PUBLIC_HOSTNAME}/api/${CI_PROJECT_NAME} only: - branches except: - master - dev when: manual deploy-pro: stage: deploy image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 SSH_REMOTE: ${PRO_SSH_REMOTE} SERVICE: ${CI_PROJECT_NAME} IMAGE_TAG: ${CI_COMMIT_TAG} JAVA_OPTS: -Xmx512m -Xss512m -Daishub.service.username=${AISHUB_SERVICE_USERNAME} COMPOSE_FILE: docker-compose.tmpl.yml:docker-compose.prod.yml services: - docker:dind script: - deploy.sh SPRING_PROFILES_ACTIVE=prod IMAGE_TAG=${IMAGE_TAG} COMPOSE_FILE=${COMPOSE_FILE} JAVA_OPTS=${JAVA_OPTS} environment: name: pro url: https://${PRO_PUBLIC_HOSTNAME}/api/${CI_PROJECT_NAME} only: - tags when: manual Dockerfile 0 → 100644 +10 −0 Original line number Diff line number Diff line FROM redmic/redmic-server COPY /dist/*.jar ./ EXPOSE 8090 ENTRYPOINT java $JAVA_OPTS \ -Djava.security.egd=file:/dev/./urandom \ -Dlogging.level.org.springframework=${LOG_LEVEL} \ -jar ${DIRPATH}/ais.jar Loading
.env 0 → 100644 +2 −0 Original line number Diff line number Diff line MICROSERVICE_NAME=ais MICROSERVICE_PORT=8090
.gitignore 0 → 100644 +7 −0 Original line number Diff line number Diff line .* !.gitignore !.gitlab-ci.yml !.dockerignore !.env target dist
.gitlab-ci.yml 0 → 100644 +149 −0 Original line number Diff line number Diff line stages: - build - package - test-package - deploy maven-build: stage: build image: redmic/maven-gitlab variables: SPRING_PROFILES_ACTIVE: test MAVEN_OPTS: "-Dmaven.repo.local=.m2/repository -Daishub.service.username=${AISHUB_SERVICE_USERNAME}" only: - branches cache: paths: - .m2/repository/ script: - mvn verify spring-boot:repackage -B - "COVERAGE=$(xmllint --html --xpath '//table[@id=\"coveragetable\"]/tfoot//td[@class=\"ctr2\"][1]/text()' target/site/jacoco/index.html)" - 'echo "Coverage: ${COVERAGE}"' after_script: - rm -r .m2/repository/es artifacts: name: "${CI_PROJECT_NAME}" expire_in: '6 months' paths: - dist/*.jar docker-build-commit: stage: package image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 services: - docker:dind only: - branches except: - master script: - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY} - docker build -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_REF_NAME}-latest . - docker push ${CI_REGISTRY_IMAGE} docker-build-tag: stage: package image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 services: - docker:dind only: - tags script: - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY} - docker build -t ${CI_REGISTRY_IMAGE}:${CI_COMMIT_TAG} -t ${CI_REGISTRY_IMAGE}:latest . - docker push ${CI_REGISTRY_IMAGE} container_scanning: stage: test-package image: docker:stable variables: DOCKER_DRIVER: overlay2 allow_failure: true services: - docker:stable-dind only: - branches except: - master script: - docker run -d --name db arminc/clair-db:latest - docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.1 - apk add -U wget ca-certificates - docker login -u gitlab-ci-token -p ${CI_JOB_TOKEN} ${CI_REGISTRY} - docker pull ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} - wget https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64 - mv clair-scanner_linux_amd64 clair-scanner - chmod +x clair-scanner - touch clair-whitelist.yml - ./clair-scanner -c http://docker:6060 --ip $(hostname -i) -r gl-sast-container-report.json -l clair.log -w clair-whitelist.yml ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA} || true artifacts: paths: [gl-sast-container-report.json] deploy-dev: stage: deploy image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 SSH_REMOTE: ${DEV_SSH_REMOTE} SERVICE: ${CI_PROJECT_NAME} IMAGE_TAG: ${CI_COMMIT_SHA} JAVA_OPTS: -Xmx512m -Xss512m -Daishub.service.username=${AISHUB_SERVICE_USERNAME} COMPOSE_FILE: docker-compose.tmpl.yml:docker-compose.dev.yml services: - docker:dind script: - deploy.sh SPRING_PROFILES_ACTIVE=pre IMAGE_TAG=${IMAGE_TAG} COMPOSE_FILE=${COMPOSE_FILE} JAVA_OPTS=${JAVA_OPTS} environment: name: dev url: https://appdev.${DEV_PUBLIC_HOSTNAME}/api/${CI_PROJECT_NAME} only: - dev deploy-supporting-branch: stage: deploy image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 SSH_REMOTE: ${DEV_SSH_REMOTE} SERVICE: ${CI_PROJECT_NAME} IMAGE_TAG: ${CI_COMMIT_SHA} JAVA_OPTS: -Xmx512m -Xss512m -Daishub.service.username=${AISHUB_SERVICE_USERNAME} COMPOSE_FILE: docker-compose.tmpl.yml:docker-compose.dev.yml services: - docker:dind script: - deploy.sh SPRING_PROFILES_ACTIVE=pre IMAGE_TAG=${IMAGE_TAG} COMPOSE_FILE=${COMPOSE_FILE} JAVA_OPTS=${JAVA_OPTS} environment: name: dev url: https://appdev.${DEV_PUBLIC_HOSTNAME}/api/${CI_PROJECT_NAME} only: - branches except: - master - dev when: manual deploy-pro: stage: deploy image: redmic/docker-gitlab variables: DOCKER_DRIVER: overlay2 SSH_REMOTE: ${PRO_SSH_REMOTE} SERVICE: ${CI_PROJECT_NAME} IMAGE_TAG: ${CI_COMMIT_TAG} JAVA_OPTS: -Xmx512m -Xss512m -Daishub.service.username=${AISHUB_SERVICE_USERNAME} COMPOSE_FILE: docker-compose.tmpl.yml:docker-compose.prod.yml services: - docker:dind script: - deploy.sh SPRING_PROFILES_ACTIVE=prod IMAGE_TAG=${IMAGE_TAG} COMPOSE_FILE=${COMPOSE_FILE} JAVA_OPTS=${JAVA_OPTS} environment: name: pro url: https://${PRO_PUBLIC_HOSTNAME}/api/${CI_PROJECT_NAME} only: - tags when: manual
Dockerfile 0 → 100644 +10 −0 Original line number Diff line number Diff line FROM redmic/redmic-server COPY /dist/*.jar ./ EXPOSE 8090 ENTRYPOINT java $JAVA_OPTS \ -Djava.security.egd=file:/dev/./urandom \ -Dlogging.level.org.springframework=${LOG_LEVEL} \ -jar ${DIRPATH}/ais.jar