298 lines
8.5 KiB
Groovy
298 lines
8.5 KiB
Groovy
pipeline {
|
|
agent {
|
|
kubernetes {
|
|
label 'bstein-dev-home'
|
|
defaultContainer 'builder'
|
|
yaml """
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
labels:
|
|
app: bstein-dev-home
|
|
spec:
|
|
nodeSelector:
|
|
kubernetes.io/arch: arm64
|
|
node-role.kubernetes.io/worker: "true"
|
|
containers:
|
|
- name: dind
|
|
image: docker:27-dind
|
|
securityContext:
|
|
privileged: true
|
|
env:
|
|
- name: DOCKER_TLS_CERTDIR
|
|
value: ""
|
|
args:
|
|
- --mtu=1400
|
|
- --host=unix:///var/run/docker.sock
|
|
- --host=tcp://0.0.0.0:2375
|
|
volumeMounts:
|
|
- name: dind-storage
|
|
mountPath: /var/lib/docker
|
|
- name: builder
|
|
image: docker:27
|
|
command: ["cat"]
|
|
tty: true
|
|
env:
|
|
- name: DOCKER_HOST
|
|
value: tcp://localhost:2375
|
|
- name: DOCKER_TLS_CERTDIR
|
|
value: ""
|
|
volumeMounts:
|
|
- name: workspace-volume
|
|
mountPath: /home/jenkins/agent
|
|
- name: docker-config-writable
|
|
mountPath: /root/.docker
|
|
- name: harbor-config
|
|
mountPath: /docker-config
|
|
- name: tester
|
|
image: python:3.12-slim
|
|
command: ["cat"]
|
|
tty: true
|
|
volumeMounts:
|
|
- name: workspace-volume
|
|
mountPath: /home/jenkins/agent
|
|
- name: frontend
|
|
image: mcr.microsoft.com/playwright:v1.51.0-jammy
|
|
command: ["cat"]
|
|
tty: true
|
|
volumeMounts:
|
|
- name: workspace-volume
|
|
mountPath: /home/jenkins/agent
|
|
volumes:
|
|
- name: workspace-volume
|
|
emptyDir: {}
|
|
- name: docker-config-writable
|
|
emptyDir: {}
|
|
- name: dind-storage
|
|
emptyDir: {}
|
|
- name: harbor-config
|
|
secret:
|
|
secretName: harbor-bstein-robot
|
|
items:
|
|
- key: .dockerconfigjson
|
|
path: config.json
|
|
"""
|
|
}
|
|
}
|
|
environment {
|
|
REGISTRY = 'registry.bstein.dev/bstein'
|
|
FRONT_IMAGE = "${REGISTRY}/bstein-dev-home-frontend"
|
|
BACK_IMAGE = "${REGISTRY}/bstein-dev-home-backend"
|
|
VERSION_TAG = 'dev'
|
|
SEMVER = 'dev'
|
|
SUITE_NAME = 'bstein-home'
|
|
PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091'
|
|
}
|
|
options {
|
|
disableConcurrentBuilds()
|
|
}
|
|
triggers {
|
|
// Poll every 2 minutes; notifyCommit can also trigger, but polling keeps it moving without webhook tokens.
|
|
pollSCM('H/2 * * * *')
|
|
}
|
|
stages {
|
|
stage('Checkout') {
|
|
steps {
|
|
checkout scm
|
|
}
|
|
}
|
|
|
|
stage('Prep toolchain') {
|
|
steps {
|
|
container('builder') {
|
|
withCredentials([usernamePassword(credentialsId: 'harbor-robot', usernameVariable: 'HARBOR_USERNAME', passwordVariable: 'HARBOR_PASSWORD')]) {
|
|
sh '''
|
|
set -eu
|
|
for attempt in 1 2 3 4 5; do
|
|
if apk add --no-cache bash git jq curl; then
|
|
break
|
|
fi
|
|
if [ "$attempt" -eq 5 ]; then
|
|
echo "apk add failed after ${attempt} attempts" >&2
|
|
exit 1
|
|
fi
|
|
sleep $((attempt * 2))
|
|
done
|
|
mkdir -p /root/.docker
|
|
printf '%s' "${HARBOR_PASSWORD}" | docker login registry.bstein.dev -u "${HARBOR_USERNAME}" --password-stdin
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Compute version') {
|
|
steps {
|
|
container('builder') {
|
|
script {
|
|
sh '''
|
|
set -eu
|
|
if git describe --tags --exact-match >/dev/null 2>&1; then
|
|
SEMVER="$(git describe --tags --exact-match)"
|
|
else
|
|
BASE="$(jq -r '.version' frontend/package.json || echo '0.1.0')"
|
|
SEMVER="${BASE}-${BUILD_NUMBER}"
|
|
fi
|
|
# Accept bare semver or leading v (with optional prerelease).
|
|
if ! echo "$SEMVER" | grep -Eq '^v?[0-9]+\\.[0-9]+\\.[0-9]+([-.][0-9A-Za-z]+)?$'; then
|
|
SEMVER="0.1.0-${BUILD_NUMBER}"
|
|
fi
|
|
echo "SEMVER=${SEMVER}" > build.env
|
|
'''
|
|
def props = readProperties file: 'build.env'
|
|
env.SEMVER = props['SEMVER'] ?: "0.1.0-${env.BUILD_NUMBER}"
|
|
env.VERSION_TAG = env.SEMVER
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Buildx setup') {
|
|
steps {
|
|
container('builder') {
|
|
sh '''
|
|
set -eu
|
|
ready=0
|
|
for i in $(seq 1 10); do
|
|
if docker info >/dev/null 2>&1; then
|
|
ready=1
|
|
break
|
|
fi
|
|
sleep 2
|
|
done
|
|
if [ "${ready}" -ne 1 ]; then
|
|
echo "docker daemon did not become ready on ${DOCKER_HOST}" >&2
|
|
docker version || true
|
|
exit 1
|
|
fi
|
|
BUILDER_NAME="bstein-builder-${BUILD_NUMBER}"
|
|
docker buildx rm "${BUILDER_NAME}" >/dev/null 2>&1 || true
|
|
docker buildx create --name "${BUILDER_NAME}" --driver docker-container \
|
|
--driver-opt image=moby/buildkit:buildx-stable-1 \
|
|
--bootstrap --use
|
|
docker buildx inspect "${BUILDER_NAME}" --bootstrap
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Backend unit tests') {
|
|
steps {
|
|
container('tester') {
|
|
sh '''
|
|
set -eu
|
|
mkdir -p build
|
|
export PYTHONPATH="${WORKSPACE}/backend:${PYTHONPATH:-}"
|
|
python -m pip install --no-cache-dir -r backend/requirements.txt -r backend/requirements-dev.txt
|
|
python -m pytest backend/tests -q --cov=backend/atlas_portal --cov-report=xml:build/backend-coverage.xml --junitxml=build/junit-backend.xml
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Frontend tests') {
|
|
steps {
|
|
container('frontend') {
|
|
sh '''
|
|
set -eu
|
|
mkdir -p build
|
|
cd frontend
|
|
npm ci
|
|
npm run lint
|
|
npm run test:unit
|
|
npm run test:component
|
|
npm run test:e2e
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Unified quality gate') {
|
|
steps {
|
|
container('tester') {
|
|
sh '''
|
|
set -eu
|
|
export PYTHONPATH="${WORKSPACE}:${PYTHONPATH:-}"
|
|
python -m testing.ci.quality_gate \
|
|
--backend-coverage build/backend-coverage.xml \
|
|
--frontend-coverage frontend/coverage/coverage-summary.json \
|
|
--report build/quality-gate.json
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Build & push frontend') {
|
|
steps {
|
|
container('builder') {
|
|
sh '''
|
|
set -eu
|
|
VERSION_TAG="$(cut -d= -f2 build.env)"
|
|
docker buildx build \
|
|
--platform linux/arm64 \
|
|
--tag "${FRONT_IMAGE}:${VERSION_TAG}" \
|
|
--tag "${FRONT_IMAGE}:latest" \
|
|
--file Dockerfile.frontend \
|
|
--push \
|
|
.
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Build & push backend') {
|
|
steps {
|
|
container('builder') {
|
|
sh '''
|
|
set -eu
|
|
VERSION_TAG="$(cut -d= -f2 build.env)"
|
|
docker buildx build \
|
|
--platform linux/arm64 \
|
|
--tag "${BACK_IMAGE}:${VERSION_TAG}" \
|
|
--tag "${BACK_IMAGE}:latest" \
|
|
--file Dockerfile.backend \
|
|
--push \
|
|
.
|
|
'''
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
post {
|
|
success {
|
|
container('tester') {
|
|
sh '''
|
|
set -eu
|
|
python -m testing.ci.publish_metrics \
|
|
--gateway "${PUSHGATEWAY_URL}" \
|
|
--suite "${SUITE_NAME}" \
|
|
--job platform-quality-ci \
|
|
--status ok \
|
|
--junit build/junit-backend.xml build/junit-frontend-unit.xml build/junit-frontend-component.xml build/junit-frontend-e2e.xml
|
|
'''
|
|
}
|
|
}
|
|
failure {
|
|
container('tester') {
|
|
sh '''
|
|
set -eu
|
|
python -m testing.ci.publish_metrics \
|
|
--gateway "${PUSHGATEWAY_URL}" \
|
|
--suite "${SUITE_NAME}" \
|
|
--job platform-quality-ci \
|
|
--status failed \
|
|
--junit build/junit-backend.xml build/junit-frontend-unit.xml build/junit-frontend-component.xml build/junit-frontend-e2e.xml
|
|
'''
|
|
}
|
|
}
|
|
always {
|
|
script {
|
|
def props = fileExists('build.env') ? readProperties(file: 'build.env') : [:]
|
|
echo "Build complete for ${props['SEMVER'] ?: env.VERSION_TAG}"
|
|
}
|
|
archiveArtifacts artifacts: 'build/junit-backend.xml,build/junit-frontend-unit.xml,build/junit-frontend-component.xml,build/junit-frontend-e2e.xml,build/quality-gate.json', allowEmptyArchive: true
|
|
}
|
|
}
|
|
}
|