authentik/.gitlab-ci.yml

# Global Variables
stages:
  - build-buildimage
  - test
  - build
  - docs
  - deploy
image: docker.pkg.beryju.org/passbook-build-base:latest
services:
  - postgres:latest
  - redis:latest

variables:
  POSTGRES_DB: passbook
  POSTGRES_USER: passbook
  POSTGRES_PASSWORD: "EK-5jnKfjrGRm<77"

include:
  - /client-packages/allauth/.gitlab-ci.yml

create-build-image:
  image:
    name: gcr.io/kaniko-project/executor:debug
    entrypoint: [""]
  before_script:
    - echo "{\"auths\":{\"docker.$NEXUS_URL\":{\"auth\":\"$NEXUS_AUTH\"}}}" > /kaniko/.docker/config.json
  script:
    - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile.build-base --destination docker.pkg.beryju.org/passbook-build-base:latest --destination docker.pkg.beryju.org/passbook-build-base:0.1.32-beta
  stage: build-buildimage
  only:
    refs:
      - tags
      - /^version/.*$/

isort:
  script:
    - isort -c -sg env
  stage: test
migrations:
  script:
    - python manage.py migrate
  stage: test
prospector:
  script:
    - prospector
  stage: test
pylint:
  script:
    - pylint passbook
  stage: test
coverage:
  script:
    - python manage.py collectstatic --no-input
    - coverage run manage.py test
    - coverage report
  stage: test
bandit:
  script:
    - bandit -r passbook
  stage: test

package-docker:
  image:
    name: gcr.io/kaniko-project/executor:debug
    entrypoint: [""]
  before_script:
    - echo "{\"auths\":{\"docker.$NEXUS_URL\":{\"auth\":\"$NEXUS_AUTH\"}}}" > /kaniko/.docker/config.json
  script:
    - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --destination docker.pkg.beryju.org/passbook:latest --destination docker.pkg.beryju.org/passbook:0.1.32-beta
  stage: build
  only:
    - tags
    - /^version/.*$/
package-helm:
  stage: build
  script:
    - curl https://raw.githubusercontent.com/helm/helm/master/scripts/get | bash
    - helm init --client-only
    - helm package helm/passbook
    - ./manage.py nexus_upload --method put --url $NEXUS_URL --auth $NEXUS_AUTH --repo helm *.tgz
  only:
    - tags
    - /^version/.*$/
package-debian:
  before_script:
    - apt update
    - apt install -y --no-install-recommends build-essential debhelper devscripts equivs python3 python3-dev python3-pip libsasl2-dev libldap2-dev
    - mk-build-deps debian/control
    - apt install ./*build-deps*deb -f -y
    - python3 -m pip install -U virtualenv pip
    - virtualenv env
    - source env/bin/activate
    - pip3 install -U -r requirements.txt -r requirements-dev.txt
    - ./manage.py collectstatic --no-input
  image: ubuntu:18.04
  script:
    - debuild -us -uc
    - cp ../passbook*.deb .
    - ./manage.py nexus_upload --method post --url $NEXUS_URL --auth $NEXUS_AUTH --repo apt passbook*deb
  artifacts:
    paths:
      - passbook*deb
    expire_in: 2 days
  stage: build
  only:
    - tags
    - /^version/.*$/

package-client-package-allauth:
  script:
    - cd client-packages/allauth
    - python setup.py sdist
    - twine upload --username $TWINE_USERNAME --password $TWINE_PASSWORD dist/*
  stage: build
  only:
    refs:
      - tags
      - /^version/.*$/
    changes:
      - client-packages/allauth/**

package-client-package-sentry:
  script:
    - cd client-packages/sentry-auth-passbook
    - python setup.py sdist
    - twine upload --username $TWINE_USERNAME --password $TWINE_PASSWORD dist/*
  stage: build
  only:
    refs:
      - tags
      - /^version/.*$/
    changes:
      - client-packages/sentry-auth-passbook/**
# docs:
#   stage: docs
#   only:
#   - master
#   - tags
#   - /^debian/.*$/
#   environment:
#     name: docs
#     url: "https://passbook.beryju.org/docs/"
#   script:
#     - apt update
#     - apt install -y rsync
#     - "mkdir ~/.ssh"
#     - "cp .gitlab/known_hosts ~/.ssh/"
#     - "pip3 install -U -r requirements-docs.txt"
#     - "eval $(ssh-agent -s)"
#     - "echo \"${CI_SSH_PRIVATE}\" | ssh-add -"
#     - mkdocs build
#     - 'rsync -avh --delete web/* "beryjuorg@ory1-web-prod-1.ory1.beryju.org:passbook.beryju.org/"'
#     - 'rsync -avh --delete site/* "beryjuorg@ory1-web-prod-1.ory1.beryju.org:passbook.beryju.org/docs/"'

# deploy:
#   environment:
#     name: production
#     url: https://passbook-prod.default.k8s.beryju.org/
#   stage: deploy
#   only:
#   - tags
#   - /^version/.*$/
#   script:
#     - curl https://raw.githubusercontent.com/helm/helm/master/scripts/get | bash
#     - helm init
#     - helm upgrade passbook-prod helm/passbook --devel