mirror of
https://gitlab.com/mbugroup/lti-web-client.git
synced 2026-05-20 13:32:00 +00:00
GitLab Deploy Bot
102 lines
3.5 KiB
YAML
102 lines
3.5 KiB
YAML
stages:
|
|
- build
|
|
- cleanup
|
|
- deploy
|
|
|
|
variables:
|
|
DOCKER_DRIVER: overlay2
|
|
IMAGE_NAME: "${CI_REGISTRY_IMAGE}/web-lti"
|
|
DEPLOY_ENV: development
|
|
KEEP_IMAGES: 3
|
|
BUILD_MODE: static
|
|
|
|
# =====================================================
|
|
# 🔑 AUTH TO REGISTRY
|
|
# =====================================================
|
|
before_script:
|
|
- echo "🔐 Logging in to GitLab Container Registry..."
|
|
- echo "$GITLAB_TOKEN" | docker login -u "$GITLAB_USER" --password-stdin "$CI_REGISTRY"
|
|
|
|
# =====================================================
|
|
# 🧱 BUILD IMAGE
|
|
# =====================================================
|
|
build-image:
|
|
stage: build
|
|
image: docker:27.0.2
|
|
services:
|
|
- docker:dind
|
|
variables:
|
|
DOCKER_TLS_CERTDIR: ""
|
|
script:
|
|
- echo "🚀 Building Docker image for ${DEPLOY_ENV} branch..."
|
|
|
|
# Tag format: web-lti:development_<commit>
|
|
- export TAG="${DEPLOY_ENV}_${CI_COMMIT_SHORT_SHA}"
|
|
|
|
- echo "🧱 Tagging image as: $IMAGE_NAME:$TAG"
|
|
- docker build \
|
|
--build-arg NEXT_PUBLIC_API_BASE_URL=$NEXT_PUBLIC_API_BASE_URL \
|
|
--build-arg NEXT_PUBLIC_LTI_API_START_URL=$NEXT_PUBLIC_LTI_API_START_URL \
|
|
--build-arg NEXT_PUBLIC_LTI_CLIENT_ID=$NEXT_PUBLIC_LTI_CLIENT_ID \
|
|
--build-arg BUILD_MODE=$BUILD_MODE \
|
|
-t "$IMAGE_NAME:$TAG" \
|
|
-t "$IMAGE_NAME:$DEPLOY_ENV" .
|
|
|
|
- echo "📦 Pushing images to registry..."
|
|
- docker push "$IMAGE_NAME:$TAG"
|
|
- docker push "$IMAGE_NAME:$DEPLOY_ENV"
|
|
only:
|
|
- development
|
|
|
|
# =====================================================
|
|
# 🧹 CLEANUP OLD IMAGES (KEEP 3)
|
|
# =====================================================
|
|
cleanup-registry:
|
|
stage: cleanup
|
|
image: alpine:3.20
|
|
script:
|
|
- apk add --no-cache curl jq
|
|
- echo "🧹 Cleaning up old images (keeping ${KEEP_IMAGES})..."
|
|
|
|
- TOKEN=$(curl --silent --request POST --header "Content-Type: application/json" \
|
|
--data "{\"login\": \"$GITLAB_USER\", \"password\": \"$GITLAB_TOKEN\"}" \
|
|
"${CI_REGISTRY}/jwt/auth" | jq -r '.token')
|
|
|
|
- ALL_TAGS=$(curl --silent --header "Authorization: Bearer $TOKEN" \
|
|
"${CI_REGISTRY}/v2/${CI_PROJECT_PATH}/web-lti/tags/list" \
|
|
| jq -r '.tags | sort | reverse | .['$KEEP_IMAGES':] | @sh' | tr -d "'")
|
|
|
|
- |
|
|
for tag in $ALL_TAGS; do
|
|
echo "🗑️ Deleting old image tag: $tag"
|
|
DIGEST=$(curl --silent -H "Authorization: Bearer $TOKEN" \
|
|
"${CI_REGISTRY}/v2/${CI_PROJECT_PATH}/web-lti/manifests/$tag" | jq -r '.config.digest')
|
|
curl --silent -X DELETE -H "Authorization: Bearer $TOKEN" \
|
|
"${CI_REGISTRY}/v2/${CI_PROJECT_PATH}/web-lti/manifests/${DIGEST}"
|
|
done
|
|
only:
|
|
- development
|
|
when: always
|
|
|
|
# =====================================================
|
|
# 🚀 DEPLOY TO SERVER (VIA SSH)
|
|
# =====================================================
|
|
deploy:
|
|
stage: deploy
|
|
image: alpine:3.20
|
|
before_script:
|
|
- apk add --no-cache openssh
|
|
- mkdir -p ~/.ssh
|
|
- echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_rsa
|
|
- chmod 600 ~/.ssh/id_rsa
|
|
- ssh-keyscan -H "$SERVER_IP" >> ~/.ssh/known_hosts
|
|
script:
|
|
- echo "🚀 Deploying $IMAGE_NAME:$DEPLOY_ENV to $SERVER_USER@$SERVER_IP"
|
|
- ssh $SERVER_USER@$SERVER_IP "
|
|
docker login -u '$GITLAB_USER' -p '$GITLAB_TOKEN' $CI_REGISTRY &&
|
|
docker pull $IMAGE_NAME:$DEPLOY_ENV &&
|
|
docker compose -f /home/devops/docker/deployment/development/compose/docker-compose.web-lti.yaml up -d dev-web-lti &&
|
|
docker image prune -f
|
|
"
|
|
only:
|
|
- development |