74 lines
2.3 KiB
YAML
74 lines
2.3 KiB
YAML
# You can override the included template(s) by including variable overrides
|
|
# SAST customization: https://docs.gitlab.com/ee/user/application_security/sast/#customizing-the-sast-settings
|
|
# Secret Detection customization: https://docs.gitlab.com/ee/user/application_security/secret_detection/#customizing-settings
|
|
# Dependency Scanning customization: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#customizing-the-dependency-scanning-settings
|
|
# Container Scanning customization: https://docs.gitlab.com/ee/user/application_security/container_scanning/#customizing-the-container-scanning-settings
|
|
# Note that environment variables can be set in several places
|
|
# See https://docs.gitlab.com/ee/ci/variables/#cicd-variable-precedence
|
|
stages:
|
|
- build
|
|
- test
|
|
- deploy
|
|
- review
|
|
- dast
|
|
- staging
|
|
- canary
|
|
- production
|
|
- incremental rollout 10%
|
|
- incremental rollout 25%
|
|
- incremental rollout 50%
|
|
- incremental rollout 100%
|
|
- performance
|
|
- cleanup
|
|
image: debian
|
|
docker-build-push:
|
|
image: docker:latest
|
|
stage: build
|
|
services:
|
|
- docker:dind
|
|
before_script:
|
|
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
|
script:
|
|
- |
|
|
if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
|
|
tag=""
|
|
echo "Running on default branch '$CI_DEFAULT_BRANCH': tag = 'latest'"
|
|
else
|
|
tag=":$CI_COMMIT_REF_SLUG"
|
|
echo "Running on branch '$CI_COMMIT_BRANCH': tag = $tag"
|
|
fi
|
|
- docker build --pull -t "$CI_REGISTRY_IMAGE${tag}" .
|
|
- docker push "$CI_REGISTRY_IMAGE${tag}"
|
|
only:
|
|
- master
|
|
- dev
|
|
docker-build:
|
|
image: docker:latest
|
|
stage: build
|
|
services:
|
|
- docker:dind
|
|
before_script:
|
|
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
|
script:
|
|
- docker build --pull -t "$CI_REGISTRY_IMAGE" .
|
|
except:
|
|
- master
|
|
- dev
|
|
before_script:
|
|
- apt-get update -qq
|
|
- which ssh-agent || ( apt-get install -qq openssh-client )
|
|
- eval $(ssh-agent -s)
|
|
- ssh-add <(echo "$SSH_PRIVATE_KEY")
|
|
- mkdir -p ~/.ssh
|
|
- '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
|
|
deploy_staging:
|
|
stage: deploy
|
|
script:
|
|
- ssh $SSH_SERVER "cd /root && docker-compose pull shbot && docker-compose up -d
|
|
shbot && exit"
|
|
only:
|
|
- master
|
|
sast:
|
|
stage: test
|
|
include:
|
|
- template: Auto-DevOps.gitlab-ci.yml
|