stages: - deploy_ocf_staging - delete_ocf_staging - deploy_ocf_dev - delete_ocf_dev variables: NAMESPACE_DEV: "ocf-dev-$CI_ENVIRONMENT_SLUG" NAMESPACE_STAGING: "ocf-staging" DOMAIN_STAGING: staging.int DOMAIN_DEV: developer.int DOMAIN_PROD: prod.int CI_JOB_TOKEN: $CI_JOB_TOKEN IMAGE_TAG_DEV: $CI_COMMIT_REF_SLUG IMAGE_TAG_STAGING: $CI_COMMIT_REF_SLUG VAULT_HOSTNAME: $VAULT_HOSTNAME VAULT_PORT: $VAULT_PORT VAULT_ACCESS_TOKEN: $VAULT_ACCESS_TOKEN CI_REGISTRY: $CI_REGISTRY .main_common: &main_common only: - merge_requests except: variables: # - $CI_MERGE_REQUEST_TARGET_BRANCH_NAME != "main" - $CI_MERGE_REQUEST_TARGET_BRANCH_NAME != "staging" tags: - shell .staging_common: &staging_common only: - merge_requests except: variables: - $CI_MERGE_REQUEST_TARGET_BRANCH_NAME != "staging" tags: - shell .dev_common: &dev_common tags: - shell deploy_ocf_staging: stage: deploy_ocf_staging needs: - staging_build_and_push <<: *staging_common environment: name: review/staging url: https://capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_STAGING on_stop: delete_ocf_staging auto_stop_in: 3 day # rules: # - if: $CI_COMMIT_BRANCH == "main" # when: never # - if: $CI_COMMIT_BRANCH == "staging" script: # - echo "### git clone OCF repo ###" # - git clone https://oauth2:${CI_JOB_TOKEN}@labs.etsi.org/rep/ocf/capif.git # - echo "### install helm###" # - curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 # - chmod 700 get_helm.sh # - sudo ./get_helm.sh - whoami - helm version - kubectl version --output=yaml - echo "### setting kubeconfig###" - whoami - kubectl cluster-info - yq --version - ls -rtt helm/capif - cat helm/capif/Chart.yaml - yq e -i ".appVersion = \"$IMAGE_TAG_STAGING\"" helm/capif/Chart.yaml - cat helm/capif/Chart.yaml - echo "### download dependencies###" - helm dependency build helm/capif - echo "### updating capif###" # - helm uninstall -n $NAMESPACE_STAGING ocf-staging || true # - helm upgrade --install -n $NAMESPACE_STAGING ocf-staging helm/capif/ \ # --set nginx.nginx.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_STAGING \ # --set nginx.nginx.env.registerHostname=register-$CI_ENVIRONMENT_SLUG.$DOMAIN_STAGING \ # --set monitoring.prometheus.enable="" \ # --set monitoring.grafana.ingress.hosts[0].host="grafana-$CI_ENVIRONMENT_SLUG.$DOMAIN_STAGING" \ # --set monitoring.grafana.ingress.hosts[0].paths[0].path="/" \ # --set monitoring.grafana.ingress.hosts[0].paths[0].pathType="Prefix" \ # --set monitoring.grafana.env.prometheusURL=http://prometheus.ocf.pre-production \ # --set tempo.tempo.metricsGenerator.remoteWriteUrl=http://prometheus.ocf.pre-production/api/v1/write \ # --set parametersVault.env.vaultHostname=$VAULT_HOSTNAME \ # --set parametersVault.env.vaultPort=$VAULT_PORT \ # --set parametersVault.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \ # --set ingress.ip=10.43.107.132 \ # --wait --timeout=10m \ # --create-namespace --atomic delete_ocf_staging: stage: delete_ocf_staging <<: *staging_common script: - echo "### deleting environment $NAMESPACE_STAGING###" # - helm uninstall -n $NAMESPACE_STAGING ocf-staging when: manual environment: name: review/staging action: stop ## dev ### deploy_ocf_dev: stage: deploy_ocf_dev needs: - dev_build_and_push <<: *dev_common environment: name: review/$CI_COMMIT_REF_SLUG url: https://capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV on_stop: delete_ocf_dev auto_stop_in: 3 day # rules: # - if: $CI_COMMIT_BRANCH == "main" # when: never # - if: $CI_COMMIT_BRANCH == "staging" # when: never # - if: $CI_COMMIT_BRANCH script: - | helm version kubectl version --output=yaml echo "### setting kubeconfig###" kubectl cluster-info yq --version cat helm/capif/Chart.yaml yq e -i ".appVersion = \"$IMAGE_TAG_DEV\"" helm/capif/Chart.yaml cat helm/capif/Chart.yaml echo "### download dependencies###" helm dependency build helm/capif echo "### updating capif###" ## helm uninstall -n $NAMESPACE_DEV ocf-developer || true helm upgrade --install -n $NAMESPACE_DEV ocf-developer helm/capif/ \ --set accessControlPolicy.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-access-control-policy-api:$CI_COMMIT_REF_SLUG \ --set apiInvocationLogs.apiInvocationLogs.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-logging-api-invocation-api:$CI_COMMIT_REF_SLUG \ --set apiInvokerManagement.apiInvokerManagement.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-api-invoker-management-api:$CI_COMMIT_REF_SLUG \ --set apiProviderManagement.apiProviderManagement.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-api-provider-management-api:$CI_COMMIT_REF_SLUG \ --set capifEvents.capifEvents.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-events-api:$CI_COMMIT_REF_SLUG \ --set capifRoutingInfo.capifRoutingInfo.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-routing-info-api:$CI_COMMIT_REF_SLUG \ --set capifSecurity.capifSecurity.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-security-api:$CI_COMMIT_REF_SLUG \ --set register.register.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/register:$CI_COMMIT_REF_SLUG \ --set logs.logs.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-auditing-api:$CI_COMMIT_REF_SLUG \ --set nignx.nginx.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/nginx:$CI_COMMIT_REF_SLUG \ --set publishedApis.publishedApis.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-publish-service-api:$CI_COMMIT_REF_SLUG \ --set serviceApis.serviceApis.image.repository=$CI_REGISTRY/ocf/capif/$CI_COMMIT_REF_SLUG/ocf-discover-service-api:$CI_COMMIT_REF_SLUG \ --set nginx.nginx.env.capifHostname=capif-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \ --set nginx.nginx.env.registerHostname=register-$CI_ENVIRONMENT_SLUG.$DOMAIN_DEV \ --set monitoring.grafana.ingress.hosts[0].host="grafana-$CI_ENVIRONMENT_SLUG.$DOMAIN_PROD" \ --set monitoring.grafana.ingress.hosts[0].paths[0].path="/" \ --set monitoring.grafana.ingress.hosts[0].paths[0].pathType="Prefix" \ --set monitoring.grafana.env.prometheusURL=http://prometheus.ocf.pre-production \ --set tempo.tempo.metricsGenerator.remoteWriteUrl=http://prometheus.ocf.pre-production/api/v1/write \ --set parametersVault.env.vaultHostname=$VAULT_HOSTNAME \ --set parametersVault.env.vaultPort=$VAULT_PORT \ --set parametersVault.env.vaultAccessToken=$VAULT_ACCESS_TOKEN \ --set ingress.ip=10.43.107.132 \ --wait --timeout=10m --create-namespace delete_ocf_dev: stage: delete_ocf_dev <<: *staging_common script: - echo "### deleting environment $NAMESPACE_DEV###" # - helm uninstall -n $NAMESPACE_DEV ocf-dev when: manual environment: name: review/$CI_COMMIT_REF_SLUG action: stop