93 lines
2.8 KiB
YAML
93 lines
2.8 KiB
YAML
|
include:
|
|||
|
|
- template: Security/SAST.gitlab-ci.yml
|
|||
|
|
|
|||
|
|
sast:
|
|||
|
|
stage: build
|
|||
|
|
|
|||
|
|
nodejs-scan-sast:
|
|||
|
|
rules:
|
|||
|
|
- if: $SAST_DISABLED
|
|||
|
|
when: never
|
|||
|
|
- if: $CI_COMMIT_BRANCH != "develop"
|
|||
|
|
when: never
|
|||
|
|
- if: $CI_COMMIT_BRANCH &&
|
|||
|
|
$SAST_DEFAULT_ANALYZERS =~ /nodejs-scan/
|
|||
|
|
exists:
|
|||
|
|
- 'package.json'
|
|||
|
|
|
|||
|
|
eslint-sast:
|
|||
|
|
rules:
|
|||
|
|
- if: $SAST_DISABLED
|
|||
|
|
when: never
|
|||
|
|
- if: $CI_COMMIT_BRANCH != "develop"
|
|||
|
|
when: never
|
|||
|
|
- if: $CI_COMMIT_BRANCH &&
|
|||
|
|
$SAST_DEFAULT_ANALYZERS =~ /eslint/
|
|||
|
|
exists:
|
|||
|
|
- '**/*.html'
|
|||
|
|
- '**/*.js'
|
|||
|
|
- '**/*.jsx'
|
|||
|
|
- '**/*.ts'
|
|||
|
|
- '**/*.tsx'
|
|||
|
|
|
|||
|
|
|
|||
|
|
stages:
|
|||
|
|
- build
|
|||
|
|
- deploy
|
|||
|
|
|
|||
|
|
dev-build-job:
|
|||
|
|
stage: build
|
|||
|
|
only:
|
|||
|
|
- develop
|
|||
|
|
- merge_requests
|
|||
|
|
image: docker:stable
|
|||
|
|
variables:
|
|||
|
|
POSTGRES_USER: postgres
|
|||
|
|
POSTGRES_PASSWORD: password
|
|||
|
|
POSTGRES_DB: demo_server
|
|||
|
|
services:
|
|||
|
|
- name: registry.lawsnote.com/postgres:13-pgroonga
|
|||
|
|
alias: postgres
|
|||
|
|
- name: redis:5-alpine
|
|||
|
|
alias: redis
|
|||
|
|
script:
|
|||
|
|
# 用 DATE-CI_COMMIT_SHA 當做 docker image 的 tag
|
|||
|
|
- DOCKER_IMAGE_TAG=$(date +%Y%m%d%H%M%S)-${CI_COMMIT_SHA:0:8}
|
|||
|
|
- DOCKER_BUILDKIT=1 docker build
|
|||
|
|
--ssh default="$SSH_PRIVATE_KEY"
|
|||
|
|
--build-arg CI_COMMIT_SHA="$CI_COMMIT_SHA"
|
|||
|
|
-t registry.lawsnote.com/professorx-dev:$DOCKER_IMAGE_TAG .
|
|||
|
|
# 使用 build 好的 image 測試
|
|||
|
|
- docker run
|
|||
|
|
--rm
|
|||
|
|
-e DB_HOST=$POSTGRES_PORT_5432_TCP_ADDR
|
|||
|
|
-e DB_USER=postgres
|
|||
|
|
-e DB_PASSWORD=password
|
|||
|
|
-e DB_NAME=demo_server
|
|||
|
|
-e REDIS_HOST=$REDIS_PORT_6379_TCP_ADDR
|
|||
|
|
-e SMS_VENDER=empty
|
|||
|
|
-e NODE_ENV=test
|
|||
|
|
registry.lawsnote.com/professorx-dev:$DOCKER_IMAGE_TAG yarn test-with-db
|
|||
|
|
# push docker image
|
|||
|
|
- docker push registry.lawsnote.com/professorx-dev:$DOCKER_IMAGE_TAG
|
|||
|
|
# tag latest
|
|||
|
|
- docker tag registry.lawsnote.com/professorx-dev:$DOCKER_IMAGE_TAG registry.lawsnote.com/professorx-dev:latest
|
|||
|
|
- docker push registry.lawsnote.com/professorx-dev:latest
|
|||
|
|
# delete local image
|
|||
|
|
- docker rmi registry.lawsnote.com/professorx-dev:latest
|
|||
|
|
# 執行 Galactus 來刪除不必要的 image，只保留 10 個舊版
|
|||
|
|
- docker run --rm --env TARGET_IMAGE=professorx-dev --env KEEP_COUNT=10 --env FORCE=1 registry.lawsnote.com/galactus:latest
|
|||
|
|
tags:
|
|||
|
|
- docker
|
|||
|
|
|
|||
|
|
dev-deploy-job:
|
|||
|
|
stage: deploy
|
|||
|
|
only:
|
|||
|
|
- develop
|
|||
|
|
script:
|
|||
|
|
- docker pull registry.lawsnote.com/professorx-dev:latest
|
|||
|
|
- if [ "$(docker inspect -f '{{.State.Running}}' professorx-dev 2> /dev/null)" == "true" ]; then docker rm -f -v professorx-dev; fi
|
|||
|
|
- docker run --detach --restart always --log-driver=json-file --log-opt max-size=16m --log-opt max-file=2 --publish 30041:10230 --name professorx-dev --env-file "$DEV_SERVICE_ENV" registry.lawsnote.com/professorx-dev:latest
|
|||
|
|
tags:
|
|||
|
|
- office
|