Adding jenkinsfile for ci/cd pipeline
This commit is contained in:
adelyaou
parent
093d543717
commit
ab59b1c683
102
.gitlab-ci.yml
102
.gitlab-ci.yml
|
|
@ -1,102 +0,0 @@
|
|||
stages:
|
||||
- build
|
||||
- push
|
||||
- deploy
|
||||
|
||||
variables:
|
||||
DOCKER_DRIVER: overlay2
|
||||
IMAGE_BACKEND: $CI_REGISTRY/$CI_PROJECT_PATH/backend
|
||||
IMAGE_FRONTEND: $CI_REGISTRY/$CI_PROJECT_PATH/frontend
|
||||
|
||||
before_script:
|
||||
- echo "Logging in to GitLab Container Registry..."
|
||||
- echo $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER $CI_REGISTRY --password-stdin
|
||||
|
||||
# BUILD BACKEND
|
||||
build-backend:
|
||||
stage: build
|
||||
script:
|
||||
- |
|
||||
if [[ "$CI_COMMIT_BRANCH" == "main" ]]; then
|
||||
TAG="prod-latest"
|
||||
ENVIRONMENT="prod"
|
||||
elif [[ "$CI_COMMIT_BRANCH" == "staging" ]]; then
|
||||
TAG="staging-latest"
|
||||
ENVIRONMENT="stag"
|
||||
else
|
||||
TAG="dev-latest"
|
||||
ENVIRONMENT="dev"
|
||||
fi
|
||||
- echo "Building backend image for $ENVIRONMENT"
|
||||
- docker build -t $IMAGE_BACKEND:$TAG employee-be
|
||||
only:
|
||||
- main
|
||||
- staging
|
||||
- dev
|
||||
|
||||
# BUILD FRONTEND
|
||||
build-frontend:
|
||||
stage: build
|
||||
script:
|
||||
- |
|
||||
if [[ "$CI_COMMIT_BRANCH" == "main" ]]; then
|
||||
TAG="prod-latest"
|
||||
ENVIRONMENT="prod"
|
||||
elif [[ "$CI_COMMIT_BRANCH" == "staging" ]]; then
|
||||
TAG="staging-latest"
|
||||
ENVIRONMENT="stag"
|
||||
else
|
||||
TAG="dev-latest"
|
||||
ENVIRONMENT="dev"
|
||||
fi
|
||||
- echo "Building frontend image for $ENVIRONMENT"
|
||||
- docker build -t $IMAGE_FRONTEND:$TAG employee-fe
|
||||
only:
|
||||
- main
|
||||
- staging
|
||||
- dev
|
||||
|
||||
# PUSH IMAGES TO REGISTRY
|
||||
push-images:
|
||||
stage: push
|
||||
script:
|
||||
- |
|
||||
if [[ "$CI_COMMIT_BRANCH" == "main" ]]; then
|
||||
TAG="prod-latest"
|
||||
elif [[ "$CI_COMMIT_BRANCH" == "staging" ]]; then
|
||||
TAG="staging-latest"
|
||||
else
|
||||
TAG="dev-latest"
|
||||
fi
|
||||
- echo "Pushing images with tag $TAG..."
|
||||
- docker push $IMAGE_BACKEND:$TAG
|
||||
- docker push $IMAGE_FRONTEND:$TAG
|
||||
only:
|
||||
- main
|
||||
- staging
|
||||
- dev
|
||||
|
||||
# DEPLOY USING KUSTOMIZE
|
||||
|
||||
deploy:
|
||||
stage: deploy
|
||||
image:
|
||||
name: bitnami/kubectl:latest
|
||||
entrypoint: [""]
|
||||
script:
|
||||
- echo "$KUBECONFIG_DATA" | base64 -d > kubeconfig.yaml
|
||||
- export KUBECONFIG=$(pwd)/kubeconfig.yaml
|
||||
- |
|
||||
if [[ "$CI_COMMIT_BRANCH" == "main" ]]; then
|
||||
ENVIRONMENT="prod"
|
||||
elif [[ "$CI_COMMIT_BRANCH" == "staging" ]]; then
|
||||
ENVIRONMENT="stag"
|
||||
else
|
||||
ENVIRONMENT="dev"
|
||||
fi
|
||||
- echo "Deploying to $ENVIRONMENT environment..."
|
||||
- kubectl apply -k employee-manifest/overlays/$ENVIRONMENT
|
||||
only:
|
||||
- main
|
||||
- staging
|
||||
- dev
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
FROM jenkins/jenkins:2.516.2-jdk21
|
||||
|
||||
USER root
|
||||
|
||||
RUN apt-get update && apt-get install -y lsb-release
|
||||
RUN curl -fsSLo /usr/share/keyrings/docker-archive-keyring.asc \
|
||||
https://download.docker.com/linux/debian/gpg
|
||||
RUN echo "deb [arch=$(dpkg --print-architecture) \
|
||||
signed-by=/usr/share/keyrings/docker-archive-keyring.asc] \
|
||||
https://download.docker.com/linux/debian \
|
||||
$(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list
|
||||
RUN apt-get update && apt-get install -y docker-ce-cli
|
||||
|
||||
RUN jenkins-plugin-cli --plugins "blueocean docker-workflow json-path-api"
|
||||
|
|
@ -0,0 +1,127 @@
|
|||
pipeline {
|
||||
agent any
|
||||
|
||||
environment {
|
||||
// --- Konfigurasi umum ---
|
||||
REGISTRY = "docker.io/adelyao"
|
||||
APP_NAME = "employee"
|
||||
MANIFEST_REPO = "https://git.winteraccess.id/adel/employee-manifest.git"
|
||||
APP_REPO = "https://git.winteraccess.id/adel/employee-app.git"
|
||||
MANIFEST_CRED_ID = "GIT_CRED_ID"
|
||||
DOCKER_CRED_ID = "DOCKER_CRED_ID"
|
||||
BRANCH = "main"
|
||||
}
|
||||
|
||||
parameters {
|
||||
string(name: 'IMAGE_TAG', defaultValue: '', description: 'Image tag (e.g., commit SHA or build number)')
|
||||
}
|
||||
|
||||
stages {
|
||||
|
||||
stage('Clean Workspace') {
|
||||
steps {
|
||||
cleanWs()
|
||||
}
|
||||
}
|
||||
|
||||
stage('Install yq') {
|
||||
steps {
|
||||
sh '''
|
||||
if ! command -v yq &> /dev/null; then
|
||||
echo "Installing yq..."
|
||||
wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O /usr/local/bin/yq
|
||||
chmod +x /usr/local/bin/yq
|
||||
else
|
||||
echo "yq already installed"
|
||||
fi
|
||||
yq --version
|
||||
'''
|
||||
}
|
||||
}
|
||||
|
||||
stage('Checkout Application Repo') {
|
||||
steps {
|
||||
script {
|
||||
git branch: 'main', url: env.APP_REPO
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Build and Push Docker Image') {
|
||||
steps {
|
||||
script {
|
||||
def tag = params.IMAGE_TAG ?: "build-${env.BUILD_NUMBER}"
|
||||
echo "Building and pushing image with tag: ${tag}"
|
||||
|
||||
withCredentials([usernamePassword(credentialsId: env.DOCKER_CRED_ID, usernameVariable: 'DOCKER_USER', passwordVariable: 'DOCKER_PASS')]) {
|
||||
sh """
|
||||
echo "$DOCKER_PASS" | docker login -u "$DOCKER_USER" --password-stdin
|
||||
docker build -t ${REGISTRY}/${APP_NAME}-be:${tag} ./backend
|
||||
docker build -t ${REGISTRY}/${APP_NAME}-fe:${tag} ./frontend
|
||||
docker push ${REGISTRY}/${APP_NAME}-be:${tag}
|
||||
docker push ${REGISTRY}/${APP_NAME}-fe:${tag}
|
||||
docker logout
|
||||
"""
|
||||
}
|
||||
|
||||
env.IMAGE_TAG_FINAL = tag
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Checkout Manifest Repo') {
|
||||
steps {
|
||||
script {
|
||||
checkout([$class: 'GitSCM',
|
||||
branches: [[name: env.BRANCH]],
|
||||
userRemoteConfigs: [[url: env.MANIFEST_REPO, credentialsId: env.MANIFEST_CRED_ID]]
|
||||
])
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Update Image Tags in Manifests') {
|
||||
steps {
|
||||
script {
|
||||
echo "Updating manifests to tag: ${env.IMAGE_TAG_FINAL}"
|
||||
|
||||
sh """
|
||||
yq e -i '.images[] |= (.newTag = "${env.IMAGE_TAG_FINAL}")' base/kustomization.yaml || true
|
||||
|
||||
yq e -i '.spec.template.spec.containers[0].image = "${REGISTRY}/${APP_NAME}-be:${env.IMAGE_TAG_FINAL}"' base/backend-deployment.yaml
|
||||
yq e -i '.spec.template.spec.containers[0].image = "${REGISTRY}/${APP_NAME}-fe:${env.IMAGE_TAG_FINAL}"' base/frontend-deployment.yaml
|
||||
"""
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Commit & Push Manifest Updates') {
|
||||
steps {
|
||||
withCredentials([usernamePassword(credentialsId: env.MANIFEST_CRED_ID, usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) {
|
||||
sh """
|
||||
git config user.email "jenkins@local"
|
||||
git config user.name "jenkins"
|
||||
git add -A
|
||||
git diff --staged --quiet || (git commit -m "chore: update image to ${env.IMAGE_TAG_FINAL}" && git push https://${GIT_USER}:${GIT_PASS}@${env.MANIFEST_REPO#https://} ${env.BRANCH})
|
||||
"""
|
||||
echo "Manifest repo updated successfully"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('ArgoCD Sync (optional)') {
|
||||
steps {
|
||||
echo "If ArgoCD auto-sync is enabled, deployment will update automatically."
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
post {
|
||||
success {
|
||||
echo "GitOps pipeline completed successfully!"
|
||||
}
|
||||
failure {
|
||||
echo "Pipeline failed."
|
||||
}
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue