Skip to content
cd-deploy-ocf.gitlab-ci.yml 27.1 KiB
Newer Older
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
stages:
  - deploy_ocf_oficial_staging
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  - deploy_ocf_staging
  - delete_ocf_staging
  - deploy_ocf_dev
  - delete_ocf_dev

variables:
  NAMESPACE_DEV: "ocf-dev-$CI_ENVIRONMENT_SLUG"
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  NAMESPACE_STAGING: "ocf-staging"
  DOMAIN_STAGING: staging.int
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  DOMAIN_DEV: developer.int
  DOMAIN_PROD: prod.int
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  CI_JOB_TOKEN: $CI_JOB_TOKEN
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  IMAGE_TAG_DEV: $CI_COMMIT_REF_SLUG
  IMAGE_TAG_STAGING: $CI_COMMIT_REF_SLUG
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  VAULT_HOSTNAME: $VAULT_HOSTNAME
  VAULT_PORT: $VAULT_PORT
  VAULT_ACCESS_TOKEN: $VAULT_ACCESS_TOKEN
  CI_REGISTRY: $CI_REGISTRY
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed

.staging_common: &staging_common
  only:
    - merge_requests
  except:
    variables:
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      - $CI_MERGE_REQUEST_TARGET_BRANCH_NAME != "staging"
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
.dev_common: &dev_common
  tags:
    - shell


## staging before mr ###
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
deploy_ocf_staging:
  stage: deploy_ocf_staging
  needs:
    - staging_build_and_push
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  <<: *staging_common
  environment:
    name: review/dev_to_staging
    url: https://capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_STAGING
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
    on_stop: delete_ocf_staging
    auto_stop_in: 3 day
  script:
    - |
      helm version
      kubectl version --output=yaml
      echo "### setting kubeconfig###"
      whoami
      kubectl cluster-info
      yq --version
      ls -rtt helm/capif
      cat helm/capif/Chart.yaml
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/Chart.yaml
      cat helm/capif/Chart.yaml
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed

      ### Chart mock-server###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/mock-server/Chart.yaml
      ### Chart nginx###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/nginx/Chart.yaml
      ### Chart ocf-access-control-policy###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-access-control-policy/Chart.yaml
      ### Chart ocf-api-invocation-logs###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-api-invocation-logs/Chart.yaml
      ### Chart ocf-api-invoker-management###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-api-invoker-management/Chart.yaml
      ### Chart ocf-api-provider-management###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-api-provider-management/Chart.yaml
      ### Chart ocf-auditing-api-logs###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-auditing-api-logs/Chart.yaml
      ### Chart ocf-discover-service-api###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-discover-service-api/Chart.yaml
      ### Chart ocf-events###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-events/Chart.yaml
      ### Chart ocf-helper###
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-helper/Chart.yaml
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      ### Chart ocf-publish-service-api###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-publish-service-api/Chart.yaml
      ### Chart ocf-register###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-register/Chart.yaml
      ### Chart ocf-routing-info###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-routing-info/Chart.yaml
      ### Chart ocf-security###
      yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/charts/ocf-security/Chart.yaml

      echo "### download dependencies###"
      helm dependency build helm/capif
      echo "### updating capif###"
      helm upgrade --install -n $NAMESPACE_DEV ocf-pre-staging helm/capif/ \
      --set monitoring.grafana.ingress.hosts[0].host=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set monitoring.grafana.ingress.hosts[0].paths[0].path="/" \
      --set monitoring.grafana.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set monitoring.grafana.env.prometheusURL=http://prometheus.ocf.pre-production \
      --set tempo.tempo.metricsGenerator.remoteWriteUrl=http://prometheus.ocf.pre-production/api/v1/write \
      --set ocf-access-control-policy.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-access-control-policy-api \
      --set ocf-access-control-policy.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-access-control-policy.image.env.capifHostname=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set ocf-access-control-policy.monitoring="true" \
      --set ocf-api-invocation-logs.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-logging-api-invocation-api \
      --set ocf-api-invocation-logs.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-api-invocation-logs.env.monitoring="true" \
      --set ocf-api-invocation-logs.env.capifHostname=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set ocf-api-invocation-logs.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-invocation-logs.env.vaultPort=$VAULT_PORT \
      --set ocf-api-invocation-logs.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-api-invoker-management.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-api-invoker-management-api \
      --set ocf-api-invoker-management.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-api-invoker-management.env.monitoring="true" \
      --set ocf-api-invoker-management.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-invoker-management.env.vaultPort=$VAULT_PORT \
      --set ocf-api-invoker-management.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-api-provider-management.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-api-provider-management-api \
      --set ocf-api-provider-management.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-api-provider-management.env.monitoring="true" \
      --set ocf-api-provider-management.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-provider-management.env.vaultPort=$VAULT_PORT \
      --set ocf-api-provider-management.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-events.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-events-api \
      --set ocf-events.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-events.env.monitoring="true" \
      --set ocf-routing-info.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-routing-info-api \
      --set ocf-routing-info.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-routing-info.env.monitoring="true" \
      --set ocf-security.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-security-api \
      --set ocf-security.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-security.env.monitoring="true" \
      --set ocf-security.env.capifHostname=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set ocf-security.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-security.env.vaultPort=$VAULT_PORT \
      --set ocf-security.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-register.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/register \
      --set ocf-register.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-register.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-register.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-register.env.vaultPort=$VAULT_PORT \
      --set ocf-register.env.mongoHost=mongo-register \
      --set ocf-register.env.mongoPort=27017 \
      --set ocf-register.ingress.enabled=true \
      --set ocf-register.ingress.hosts[0].host=register-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set ocf-register.ingress.hosts[0].paths[0].path="/" \
      --set ocf-register.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set ocf-auditing-api-logs.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-auditing-api \
      --set ocf-auditing-api-logs.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-auditing-api-logs.env.monitoring="true" \
      --set ocf-publish-service-api.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-publish-service-api \
      --set ocf-publish-service-api.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-publish-service-api.env.monitoring="true" \
      --set ocf-discover-service-api.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-discover-service-api \
      --set ocf-discover-service-api.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-discover-service-api.env.monitoring="true" \
      --set nginx.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/nginx \
      --set nginx.image.tag=$CI_COMMIT_REF_SLUG \
      --set nginx.env.capifHostname=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set nginx.env.vaultHostname=$VAULT_HOSTNAME \
      --set nginx.env.vaultPort=$VAULT_PORT \
      --set nginx.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set nginx.ingress.enabled=true \
      --set nginx.ingress.hosts[0].host=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set nginx.ingress.hosts[0].paths[0].path="/" \
      --set nginx.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set ocf-helper.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/helper \
      --set ocf-helper.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-helper.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-helper.env.vaultPort=$VAULT_PORT \
      --set ocf-helper.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-helper.env.capifHostname=capif-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set mock-server.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/mock-server \
      --set mock-server.image.tag=$CI_COMMIT_REF_SLUG \
      --set mock-server.ingress.enabled=true \
      --set mock-server.ingress.hosts[0].host=mock-server-$CI_COMMIT_REF_SLUG.$DOMAIN_STAGING \
      --set mock-server.ingress.hosts[0].paths[0].path="/" \
      --set mock-server.ingress.hosts[0].paths[0].pathType="Prefix" \
      --wait --timeout=10m --create-namespace --atomic
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed

delete_ocf_staging:
  stage: delete_ocf_staging
  <<: *staging_common
  script:
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
    - echo "### deleting environment $NAMESPACE_STAGING###"
    - helm uninstall -n $NAMESPACE_DEV ocf-staging-$CI_COMMIT_REF_SLUG
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  when: manual
  environment:
    name: review/dev_to_staging
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
    action: stop

### staging branch merged ###
deploy_ocf_oficial_staging:
  stage: deploy_ocf_oficial_staging
#  <<: *staging_common
  rules:
    - if: '$CI_COMMIT_REF_NAME == "staging"'
      when: always
  needs:
    - staging_build_and_push_mr
  environment:
    name: review/oficial-staging
    url: https://capif-staging.$DOMAIN_STAGING
  script:
    - |
      helm version
      kubectl version --output=yaml
      echo "### setting kubeconfig###"
      whoami
      kubectl cluster-info
      yq --version
      ls -rtt helm/capif
      cat helm/capif/Chart.yaml
      yq e -i ".appVersion = \"staging\"" helm/capif/Chart.yaml
      cat helm/capif/Chart.yaml
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed

      ### Chart mock-server###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/mock-server/Chart.yaml
      ### Chart nginx###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/nginx/Chart.yaml
      ### Chart ocf-access-control-policy###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-access-control-policy/Chart.yaml
      ### Chart ocf-api-invocation-logs###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-api-invocation-logs/Chart.yaml
      ### Chart ocf-api-invoker-management###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-api-invoker-management/Chart.yaml
      ### Chart ocf-api-provider-management###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-api-provider-management/Chart.yaml
      ### Chart ocf-auditing-api-logs###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-auditing-api-logs/Chart.yaml
      ### Chart ocf-discover-service-api###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-discover-service-api/Chart.yaml
      ### Chart ocf-events###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-events/Chart.yaml
      ### Chart ocf-helper###
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-helper/Chart.yaml
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      ### Chart ocf-publish-service-api###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-publish-service-api/Chart.yaml
      ### Chart ocf-register###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-register/Chart.yaml
      ### Chart ocf-routing-info###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-routing-info/Chart.yaml
      ### Chart ocf-security###
      yq e -i ".appVersion = \"staging\"" helm/capif/charts/ocf-security/Chart.yaml 

      echo "### download dependencies###"
      helm dependency build helm/capif
      echo "### updating capif###"
      helm upgrade --install -n $NAMESPACE_STAGING ocf-developer helm/capif/ \
      --set monitoring.grafana.ingress.hosts[0].host=capif-staging.$DOMAIN_STAGING \
      --set monitoring.grafana.ingress.hosts[0].paths[0].path="/" \
      --set monitoring.grafana.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set monitoring.grafana.env.prometheusURL=http://prometheus.ocf.pre-production \
      --set tempo.tempo.metricsGenerator.remoteWriteUrl=http://prometheus.ocf.pre-production/api/v1/write \
      --set ocf-access-control-policy.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-access-control-policy-api \
      --set ocf-access-control-policy.image.tag=staging \
      --set ocf-access-control-policy.image.env.capifHostname=capif-staging.$DOMAIN_STAGING \
      --set ocf-access-control-policy.monitoring="true" \
      --set ocf-api-invocation-logs.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-logging-api-invocation-api \
      --set ocf-api-invocation-logs.image.tag=staging \
      --set ocf-api-invocation-logs.env.monitoring="true" \
      --set ocf-api-invocation-logs.env.capifHostname=capif-staging.$DOMAIN_STAGING \
      --set ocf-api-invocation-logs.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-invocation-logs.env.vaultPort=$VAULT_PORT \
      --set ocf-api-invocation-logs.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-api-invoker-management.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-api-invoker-management-api \
      --set ocf-api-invoker-management.image.tag=staging \
      --set ocf-api-invoker-management.env.monitoring="true" \
      --set ocf-api-invoker-management.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-invoker-management.env.vaultPort=$VAULT_PORT \
      --set ocf-api-invoker-management.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-api-provider-management.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-api-provider-management-api \
      --set ocf-api-provider-management.image.tag=staging \
      --set ocf-api-provider-management.env.monitoring="true" \
      --set ocf-api-provider-management.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-provider-management.env.vaultPort=$VAULT_PORT \
      --set ocf-api-provider-management.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-events.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-events-api \
      --set ocf-events.image.tag=staging \
      --set ocf-events.env.monitoring="true" \
      --set ocf-routing-info.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-routing-info-api \
      --set ocf-routing-info.image.tag=staging \
      --set ocf-routing-info.env.monitoring="true" \
      --set ocf-security.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-security-api \
      --set ocf-security.image.tag=staging \
      --set ocf-security.env.monitoring="true" \
      --set ocf-security.env.capifHostname=capif-staging.$DOMAIN_STAGING \
      --set ocf-security.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-security.env.vaultPort=$VAULT_PORT \
      --set ocf-security.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-register.image.repository=$CI_REGISTRY/ocf/capif/staging/register \
      --set ocf-register.image.tag=staging \
      --set ocf-register.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-register.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-register.env.vaultPort=$VAULT_PORT \
      --set ocf-register.env.mongoHost=mongo-register \
      --set ocf-register.env.mongoPort=27017 \
      --set ocf-register.ingress.enabled=true \
      --set ocf-register.ingress.hosts[0].host=register-staging.$DOMAIN_STAGING \
      --set ocf-register.ingress.hosts[0].paths[0].path="/" \
      --set ocf-register.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set ocf-auditing-api-logs.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-auditing-api \
      --set ocf-auditing-api-logs.image.tag=staging \
      --set ocf-auditing-api-logs.env.monitoring="true" \
      --set ocf-publish-service-api.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-publish-service-api \
      --set ocf-publish-service-api.image.tag=staging \
      --set ocf-publish-service-api.env.monitoring="true" \
      --set ocf-discover-service-api.image.repository=$CI_REGISTRY/ocf/capif/staging/ocf-discover-service-api \
      --set ocf-discover-service-api.image.tag=staging \
      --set ocf-discover-service-api.env.monitoring="true" \
      --set nginx.image.repository=$CI_REGISTRY/ocf/capif/staging/nginx \
      --set nginx.image.tag=staging \
      --set nginx.env.capifHostname=capif-staging.$DOMAIN_STAGING \
      --set nginx.env.vaultHostname=$VAULT_HOSTNAME \
      --set nginx.env.vaultPort=$VAULT_PORT \
      --set nginx.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set nginx.ingress.enabled=true \
      --set nginx.ingress.hosts[0].host=capif-staging.$DOMAIN_STAGING \
      --set nginx.ingress.hosts[0].paths[0].path="/" \
      --set nginx.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set ocf-helper.image.repository=$CI_REGISTRY/ocf/capif/staging/helper \
      --set ocf-helper.image.tag=staging \
      --set ocf-helper.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-helper.env.vaultPort=$VAULT_PORT \
      --set ocf-helper.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-helper.env.capifHostname=capif-staging.$DOMAIN_STAGING \
      --set mock-server.image.repository=$CI_REGISTRY/ocf/capif/staging/mock-server \
      --set mock-server.image.tag=staging \
      --set mock-server.ingress.enabled=true \
      --set mock-server.ingress.hosts[0].host=mock-server-staging.$DOMAIN_STAGING \
      --set mock-server.ingress.hosts[0].paths[0].path="/" \
      --set mock-server.ingress.hosts[0].paths[0].pathType="Prefix" \
      --wait --timeout=10m --create-namespace --atomic
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
## dev ###
deploy_ocf_dev:
  stage: deploy_ocf_dev
  needs:
    - dev_build_and_push
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  <<: *dev_common
  environment:
    name: review/$CI_COMMIT_REF_SLUG
    url: https://capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
    on_stop: delete_ocf_dev
    auto_stop_in: 3 day
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
#  rules:
#    - if: $CI_COMMIT_BRANCH == "main"
#      when: never
#    - if: $CI_COMMIT_BRANCH == "staging"
#      when: never      
#    - if: $CI_COMMIT_BRANCH
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  script:
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
    - |
      helm version
      kubectl version --output=yaml
      echo "### setting kubeconfig###"
      kubectl cluster-info
      yq --version
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      ### Chart main ocf###
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      cat helm/capif/Chart.yaml
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/Chart.yaml
      cat helm/capif/Chart.yaml
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed

      ### Chart mock-server###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/mock-server/Chart.yaml
      ### Chart nginx###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/nginx/Chart.yaml
      ### Chart ocf-access-control-policy###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-access-control-policy/Chart.yaml
      ### Chart ocf-api-invocation-logs###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-api-invocation-logs/Chart.yaml
      ### Chart ocf-api-invoker-management###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-api-invoker-management/Chart.yaml
      ### Chart ocf-api-provider-management###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-api-provider-management/Chart.yaml
      ### Chart ocf-auditing-api-logs###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-auditing-api-logs/Chart.yaml
      ### Chart ocf-discover-service-api###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-discover-service-api/Chart.yaml
      ### Chart ocf-events###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-events/Chart.yaml
      ### Chart ocf-helper###
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-helper/Chart.yaml
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      ### Chart ocf-publish-service-api###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-publish-service-api/Chart.yaml
      ### Chart ocf-register###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-register/Chart.yaml
      ### Chart ocf-routing-info###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-routing-info/Chart.yaml
      ### Chart ocf-security###
      yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/charts/ocf-security/Chart.yaml

Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
      echo "### download dependencies###"
      helm dependency build helm/capif
      echo "### updating capif###"
      helm upgrade --install -n $NAMESPACE_DEV ocf-developer helm/capif/ 
      --set monitoring.grafana.ingress.hosts[0].host=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set monitoring.grafana.ingress.hosts[0].paths[0].path="/" \
      --set monitoring.grafana.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set monitoring.grafana.env.prometheusURL=http://prometheus.ocf.pre-production \
      --set tempo.tempo.metricsGenerator.remoteWriteUrl=http://prometheus.ocf.pre-production/api/v1/write \
      --set ocf-access-control-policy.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-access-control-policy-api \
      --set ocf-access-control-policy.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-access-control-policy.image.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set ocf-access-control-policy.monitoring="true" \
      --set ocf-api-invocation-logs.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-logging-api-invocation-api \
      --set ocf-api-invocation-logs.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-api-invocation-logs.env.monitoring="true" \
      --set ocf-api-invocation-logs.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set ocf-api-invocation-logs.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-invocation-logs.env.vaultPort=$VAULT_PORT \
      --set ocf-api-invocation-logs.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-api-invoker-management.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-api-invoker-management-api \
      --set ocf-api-invoker-management.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-api-invoker-management.env.monitoring="true" \
      --set ocf-api-invoker-management.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-invoker-management.env.vaultPort=$VAULT_PORT \
      --set ocf-api-invoker-management.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-api-provider-management.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-api-provider-management-api \
      --set ocf-api-provider-management.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-api-provider-management.env.monitoring="true" \
      --set ocf-api-provider-management.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-api-provider-management.env.vaultPort=$VAULT_PORT \
      --set ocf-api-provider-management.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-events.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-events-api \
      --set ocf-events.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-events.env.monitoring="true" \
      --set ocf-routing-info.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-routing-info-api \
      --set ocf-routing-info.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-routing-info.env.monitoring="true" \
      --set ocf-security.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-security-api \
      --set ocf-security.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-security.env.monitoring="true" \
      --set ocf-security.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set ocf-security.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-security.env.vaultPort=$VAULT_PORT \
      --set ocf-security.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-register.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/register \
      --set ocf-register.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-register.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-register.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-register.env.vaultPort=$VAULT_PORT \
      --set ocf-register.env.mongoHost=mongo-register \
      --set ocf-register.env.mongoPort=27017 \
      --set ocf-register.ingress.enabled=true \
      --set ocf-register.ingress.hosts[0].host=register-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set ocf-register.ingress.hosts[0].paths[0].path="/" \
      --set ocf-register.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set ocf-auditing-api-logs.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-auditing-api \
      --set ocf-auditing-api-logs.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-auditing-api-logs.env.monitoring="true" \
      --set ocf-publish-service-api.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-publish-service-api \
      --set ocf-publish-service-api.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-publish-service-api.env.monitoring="true" \
      --set ocf-discover-service-api.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-discover-service-api \
      --set ocf-discover-service-api.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-discover-service-api.env.monitoring="true" \
      --set nginx.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/nginx \
      --set nginx.image.tag=$CI_COMMIT_REF_SLUG \
      --set nginx.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set nginx.env.vaultHostname=$VAULT_HOSTNAME \
      --set nginx.env.vaultPort=$VAULT_PORT \
      --set nginx.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set nginx.ingress.enabled=true \
      --set nginx.ingress.hosts[0].host=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set nginx.ingress.hosts[0].paths[0].path="/" \
      --set nginx.ingress.hosts[0].paths[0].pathType="Prefix" \
      --set ocf-helper.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/helper \
      --set ocf-helper.image.tag=$CI_COMMIT_REF_SLUG \
      --set ocf-helper.env.vaultHostname=$VAULT_HOSTNAME \
      --set ocf-helper.env.vaultPort=$VAULT_PORT \
      --set ocf-helper.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \
      --set ocf-helper.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set mock-server.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/mock-server \
      --set mock-server.image.tag=$CI_COMMIT_REF_SLUG \
      --set mock-server.ingress.enabled=true \
      --set mock-server.ingress.hosts[0].host=mock-server-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \
      --set mock-server.ingress.hosts[0].paths[0].path="/" \
      --set mock-server.ingress.hosts[0].paths[0].pathType="Prefix" \
      --wait --timeout=10m --create-namespace --atomic
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed

delete_ocf_dev:
  stage: delete_ocf_dev
  <<: *staging_common
  script:
    - echo "### deleting environment $NAMESPACE_DEV###"
    - helm uninstall -n $NAMESPACE_DEV ocf-developer
Andres Anaya Amariels's avatar
Andres Anaya Amariels committed
  when: manual
  environment:
    name: review/$CI_COMMIT_REF_SLUG
    action: stop