.gitlab-ci.yml

---
stages:
  - build
  - deploy-to-test
  - deploy-to-prod

build-image-tag:
  stage: build
  image:
    name: gcr.io/kaniko-project/executor:debug
    entrypoint: [""]
  script:
    - mkdir -p /kaniko/.docker
    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json
    - env
    - /kaniko/executor --context $CI_PROJECT_DIR/app
      --dockerfile Dockerfile
      --cache
      --build-arg CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
      --build-arg CI_COMMIT_TAG=${CI_COMMIT_TAG}
      --build-arg CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
      --destination $CI_REGISTRY_IMAGE/web-site:$CI_COMMIT_TAG
  only:
    - tags
  except:
    - /^(?!proxmox).+@/

build-image-branch:
  stage: build
  image:
    name: gcr.io/kaniko-project/executor:debug
    entrypoint: [""]
  script:
    - mkdir -p /kaniko/.docker
    - env
    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$CI_REGISTRY_USER\",\"password\":\"$CI_REGISTRY_PASSWORD\"}}}" > /kaniko/.docker/config.json
    - /kaniko/executor --context $CI_PROJECT_DIR/app
      --dockerfile Dockerfile
      --cache
      --build-arg CI_COMMIT_REF_SLUG=${CI_COMMIT_REF_SLUG}
      --build-arg CI_COMMIT_TAG=${CI_COMMIT_TAG}
      --build-arg CI_COMMIT_SHORT_SHA=${CI_COMMIT_SHORT_SHA}
      --destination ${CI_REGISTRY_IMAGE}/${CI_COMMIT_REF_SLUG}:${CI_COMMIT_SHORT_SHA}
    - echo "FROM ${CI_REGISTRY_IMAGE}/${CI_COMMIT_REF_SLUG}:${CI_COMMIT_SHORT_SHA}" | /kaniko/executor --dockerfile /dev/stdin --destination ${CI_REGISTRY_IMAGE}/${CI_COMMIT_REF_SLUG}:latest
  rules:
    - changes:
        - .gitlab-ci.yml
        - .gitignore
        - kube/**/*
        - nginx/**/*
      when: never
    - if: $CI_MERGE_REQUEST_IID && $CI_COMMIT_TAG == null

.deployment:
  image:  registry.gitlab.com/dev-ops-tom/devopstom/img-kubectl:1.19
  script:
    - env
    - if [[ ${CI_ENVIRONMENT_NAME} == "prod" ]]; then
        export NAMESPACE="app";
        export TEMPLATE="template_prod-deploy.yml";
      else
        export NAMESPACE="${CI_COMMIT_REF_SLUG}";
        export TEMPLATE="template_branch-deploy.yml";
      fi
    - if [[ ${CI_ENVIRONMENT_NAME} == "prod" ]]; then export VERSION=${CI_COMMIT_TAG}; else export VERSION="latest"; fi
    - echo "NAMESPACE=${NAMESPACE} VERSION=${VERSION}"
    - kubectl create secret docker-registry gitlab-dev-ops-tom
      --docker-server=$CI_REGISTRY
      --docker-username=$GIT_LAB_REG_USER
      --docker-password=$GIT_LAB_REG_PASS --dry-run=client -n ${NAMESPACE} -o yaml | kubectl apply -f -
    - for secret in $(env | grep "K8S_SECRET_" | cut -d"=" -f 1);
        do
          kubectl create secret generic $(echo ${secret#K8S_SECRET_}|tr '_' '-' | tr [:upper:] [:lower:])
            --from-literal=key=$(eval echo $`echo ${secret}`) -n ${NAMESPACE} --dry-run=client -o yaml | kubectl apply -f - ;
        done
    - cat $CI_PROJECT_DIR/kube/app/${TEMPLATE} | envsubst | tee >(kubectl apply -f -)
    - kubectl -n $NAMESPACE rollout restart deploy $(kubectl -n $NAMESPACE get deploy -o custom-columns=NAME:.metadata.name --no-headers)

deploy-to-test:
  extends: .deployment
  stage: deploy-to-test
  environment:
    name: test
  rules:
    - if: $CI_MERGE_REQUEST_IID && $CI_COMMIT_TAG == null

deploy-to-prod:
  extends: .deployment
  stage: deploy-to-prod
  environment:
      name: prod
  only:
    - tags
  except:
    - /^(?!proxmox).+@/