Changed CI Layout split into multiple files
This commit is contained in:
Phil
parent
5555eb20d2
commit
a0346f3f88
5 changed files with 185 additions and 187 deletions
191
.gitlab-ci.yml
191
.gitlab-ci.yml
|
|
@ -7,191 +7,8 @@ stages:
|
|||
- build-binary
|
||||
- build-docker
|
||||
|
||||
check-format:
|
||||
image: golang:latest
|
||||
stage: test
|
||||
before_script:
|
||||
- mkdir -p $GOPATH/src/$(dirname $REPO_NAME)
|
||||
- ln -svf $CI_PROJECT_DIR $GOPATH/src/$REPO_NAME
|
||||
- cd $GOPATH/src/$REPO_NAME
|
||||
script:
|
||||
- go fmt $(go list ./... | grep -v /vendor/)
|
||||
- go vet $(go list ./... | grep -v /vendor/)
|
||||
- go test -race $(go list ./... | grep -v /vendor/)
|
||||
only:
|
||||
- merge_requests
|
||||
|
||||
check-gosec:
|
||||
image: golang:latest
|
||||
before_script:
|
||||
- mkdir -p $GOPATH/src/$(dirname $REPO_NAME)
|
||||
- ln -svf $CI_PROJECT_DIR $GOPATH/src/$REPO_NAME
|
||||
- cd $GOPATH/src/$REPO_NAME
|
||||
script:
|
||||
- go install github.com/securego/gosec/v2/cmd/gosec@latest
|
||||
- go get -v -d .
|
||||
- gosec ./...
|
||||
only:
|
||||
- merge_requests
|
||||
|
||||
release-prod-linux-amd64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "linux"
|
||||
GOARCH: "amd64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o linux-amd64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file linux-amd64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/linux-amd64"'
|
||||
- rm linux-amd64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-linux-arm64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "linux"
|
||||
GOARCH: "arm64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o linux-arm64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file linux-arm64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/linux-arm64"'
|
||||
- rm linux-arm64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-darwin-amd64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "darwin"
|
||||
GOARCH: "amd64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o darwin-amd64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file darwin-amd64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/darwin-amd64"'
|
||||
- rm darwin-amd64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-darwin-arm64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "darwin"
|
||||
GOARCH: "arm64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o darwin-arm64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file darwin-arm64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/darwin-arm64"'
|
||||
- rm darwin-arm64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-windows-amd64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "windows"
|
||||
GOARCH: "amd64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o windows-amd64.exe .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file windows-amd64.exe "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/windows-amd64.exe"'
|
||||
- rm windows-amd64.exe
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
docker-build-prod-latest:
|
||||
image: ezkrg/buildx
|
||||
stage: build-docker
|
||||
services:
|
||||
- docker:dind
|
||||
before_script:
|
||||
- docker buildx create --use
|
||||
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
||||
script:
|
||||
- |
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
--build-arg CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH \
|
||||
--build-arg CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA \
|
||||
--build-arg CI_COMMIT_TAG=$CI_COMMIT_TAG \
|
||||
--push \
|
||||
--tag $CI_REGISTRY_IMAGE:latest \
|
||||
.
|
||||
only:
|
||||
- main
|
||||
|
||||
docker-build-prod-tagged:
|
||||
image: ezkrg/buildx
|
||||
stage: build-docker
|
||||
services:
|
||||
- docker:dind
|
||||
before_script:
|
||||
- docker buildx create --use
|
||||
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
||||
script:
|
||||
- |
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
--no-cache \
|
||||
--build-arg CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH \
|
||||
--build-arg CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA \
|
||||
--build-arg CI_COMMIT_TAG=$CI_COMMIT_TAG \
|
||||
--push \
|
||||
--tag $CI_REGISTRY_IMAGE:$CI_COMMIT_TAG \
|
||||
.
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
docker-build-dry-run:
|
||||
image: docker:latest
|
||||
stage: build-docker
|
||||
services:
|
||||
- docker:dind
|
||||
script:
|
||||
- |
|
||||
if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
|
||||
tag=""
|
||||
echo "Running on default branch '$CI_DEFAULT_BRANCH': tag = 'latest'"
|
||||
else
|
||||
tag=":$CI_COMMIT_REF_SLUG"
|
||||
echo "Running on branch '$CI_COMMIT_BRANCH': tag = $tag"
|
||||
fi
|
||||
- docker build --pull -t "$CI_REGISTRY_IMAGE${tag}" .
|
||||
only:
|
||||
- merge_requests
|
||||
|
||||
include:
|
||||
- template: Security/SAST.gitlab-ci.yml
|
||||
- template: Security/SAST-IaC.latest.gitlab-ci.yml
|
||||
- '/.gitlab/ci/always.yml'
|
||||
- '/.gitlab/ci/main-branch.yml'
|
||||
- '/.gitlab/ci/merge-request.yml'
|
||||
- '/.gitlab/ci/tagged-build.yml'
|
||||
22
.gitlab/ci/always.yml
Normal file
22
.gitlab/ci/always.yml
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
check-format:
|
||||
image: golang:latest
|
||||
stage: test
|
||||
before_script:
|
||||
- mkdir -p $GOPATH/src/$(dirname $REPO_NAME)
|
||||
- ln -svf $CI_PROJECT_DIR $GOPATH/src/$REPO_NAME
|
||||
- cd $GOPATH/src/$REPO_NAME
|
||||
script:
|
||||
- go fmt $(go list ./... | grep -v /vendor/)
|
||||
- go vet $(go list ./... | grep -v /vendor/)
|
||||
- go test -race $(go list ./... | grep -v /vendor/)
|
||||
|
||||
check-gosec:
|
||||
image: golang:latest
|
||||
before_script:
|
||||
- mkdir -p $GOPATH/src/$(dirname $REPO_NAME)
|
||||
- ln -svf $CI_PROJECT_DIR $GOPATH/src/$REPO_NAME
|
||||
- cd $GOPATH/src/$REPO_NAME
|
||||
script:
|
||||
- go install github.com/securego/gosec/v2/cmd/gosec@latest
|
||||
- go get -v -d .
|
||||
- gosec ./...
|
||||
20
.gitlab/ci/main-branch.yml
Normal file
20
.gitlab/ci/main-branch.yml
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
docker-build-prod-latest:
|
||||
image: ezkrg/buildx
|
||||
stage: build-docker
|
||||
services:
|
||||
- docker:dind
|
||||
before_script:
|
||||
- docker buildx create --use
|
||||
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
||||
script:
|
||||
- |
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
--build-arg CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH \
|
||||
--build-arg CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA \
|
||||
--build-arg CI_COMMIT_TAG=$CI_COMMIT_TAG \
|
||||
--push \
|
||||
--tag $CI_REGISTRY_IMAGE:latest \
|
||||
.
|
||||
only:
|
||||
- main
|
||||
21
.gitlab/ci/merge-request.yml
Normal file
21
.gitlab/ci/merge-request.yml
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
docker-build-dry-run:
|
||||
image: docker:latest
|
||||
stage: build-docker
|
||||
services:
|
||||
- docker:dind
|
||||
script:
|
||||
- |
|
||||
if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
|
||||
tag=""
|
||||
echo "Running on default branch '$CI_DEFAULT_BRANCH': tag = 'latest'"
|
||||
else
|
||||
tag=":$CI_COMMIT_REF_SLUG"
|
||||
echo "Running on branch '$CI_COMMIT_BRANCH': tag = $tag"
|
||||
fi
|
||||
- docker build --pull -t "$CI_REGISTRY_IMAGE${tag}" .
|
||||
only:
|
||||
- merge_requests
|
||||
|
||||
include:
|
||||
- template: Security/SAST.gitlab-ci.yml
|
||||
- template: Security/SAST-IaC.latest.gitlab-ci.yml
|
||||
118
.gitlab/ci/tagged-build.yml
Normal file
118
.gitlab/ci/tagged-build.yml
Normal file
|
|
@ -0,0 +1,118 @@
|
|||
release-prod-linux-amd64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "linux"
|
||||
GOARCH: "amd64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o linux-amd64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file linux-amd64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/linux-amd64"'
|
||||
- rm linux-amd64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-linux-arm64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "linux"
|
||||
GOARCH: "arm64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o linux-arm64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file linux-arm64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/linux-arm64"'
|
||||
- rm linux-arm64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-darwin-amd64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "darwin"
|
||||
GOARCH: "amd64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o darwin-amd64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file darwin-amd64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/darwin-amd64"'
|
||||
- rm darwin-amd64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-darwin-arm64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "darwin"
|
||||
GOARCH: "arm64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o darwin-arm64 .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file darwin-arm64 "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/darwin-arm64"'
|
||||
- rm darwin-arm64
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
release-prod-windows-amd64:
|
||||
image: golang:latest
|
||||
stage: build-binary
|
||||
variables:
|
||||
GOOS: "windows"
|
||||
GOARCH: "amd64"
|
||||
CGO_ENABLED: 0
|
||||
before_script:
|
||||
- go get -d -v ./...
|
||||
- apt install curl -y
|
||||
script:
|
||||
- go build -a -installsuffix cgo -ldflags="-X $I_PACKAGE.CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA -X $I_PACKAGE.CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH -X $I_PACKAGE.CI_COMMIT_TAG=$CI_COMMIT_TAG" -o windows-amd64.exe .
|
||||
- 'curl --header "JOB-TOKEN: $CI_JOB_TOKEN" --upload-file windows-amd64.exe "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic/release-${CI_COMMIT_TAG}/${CI_COMMIT_TAG}/windows-amd64.exe"'
|
||||
- rm windows-amd64.exe
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
|
||||
docker-build-prod-tagged:
|
||||
image: ezkrg/buildx
|
||||
stage: build-docker
|
||||
services:
|
||||
- docker:dind
|
||||
before_script:
|
||||
- docker buildx create --use
|
||||
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
||||
script:
|
||||
- |
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
--no-cache \
|
||||
--build-arg CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH \
|
||||
--build-arg CI_COMMIT_SHORT_SHA=$CI_COMMIT_SHORT_SHA \
|
||||
--build-arg CI_COMMIT_TAG=$CI_COMMIT_TAG \
|
||||
--push \
|
||||
--tag $CI_REGISTRY_IMAGE:$CI_COMMIT_TAG \
|
||||
.
|
||||
only:
|
||||
- tags
|
||||
except:
|
||||
- branches
|
||||
Loading…
Reference in a new issue