92 lines
3.3 KiB
YAML
92 lines
3.3 KiB
YAML
name: AS Talange CI/CD Pipeline - Production
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- 'prod/*'
|
|
|
|
jobs:
|
|
test:
|
|
name: Build & Run Unit Tests
|
|
runs-on: [self-hosted, prod]
|
|
container:
|
|
image: maven:3.9.6-eclipse-temurin-21
|
|
steps:
|
|
- name: Clone repository
|
|
run: |
|
|
if ! command -v git &> /dev/null; then
|
|
apt-get update && apt-get install -y git
|
|
fi
|
|
SERVER_URL="${{ github.server_url }}"
|
|
SERVER_NO_PROTO="${SERVER_URL#http://}"
|
|
SERVER_NO_PROTO="${SERVER_NO_PROTO#https://}"
|
|
git clone "https://oauth2:${{ secrets.GITHUB_TOKEN }}@${SERVER_NO_PROTO}/${{ github.repository }}.git" .
|
|
git checkout ${{ github.sha }}
|
|
|
|
- name: Run Maven Tests
|
|
run: mvn clean test
|
|
|
|
|
|
|
|
deploy_prod:
|
|
name: Deploy to Prod Environment
|
|
needs: test
|
|
if: startsWith(github.ref, 'refs/heads/prod/')
|
|
runs-on: [self-hosted, prod]
|
|
container:
|
|
image: docker:latest
|
|
steps:
|
|
- name: Clone repository
|
|
run: |
|
|
apk add --no-cache git
|
|
SERVER_URL="${{ github.server_url }}"
|
|
SERVER_NO_PROTO="${SERVER_URL#http://}"
|
|
SERVER_NO_PROTO="${SERVER_NO_PROTO#https://}"
|
|
git clone "https://oauth2:${{ secrets.GITHUB_TOKEN }}@${SERVER_NO_PROTO}/${{ github.repository }}.git" .
|
|
git checkout ${{ github.sha }}
|
|
|
|
- name: Deploy with Docker Compose
|
|
env:
|
|
PROD_DB_USER: ${{ secrets.PROD_DB_USER }}
|
|
PROD_DB_PASSWORD: ${{ secrets.PROD_DB_PASSWORD }}
|
|
CAPTCHA_SECRET: ${{ secrets.CAPTCHA_SECRET }}
|
|
CAPTCHA_SITEKEY: ${{ secrets.CAPTCHA_SITEKEY }}
|
|
MAIL_USERNAME: ${{ secrets.MAIL_USERNAME }}
|
|
MAIL_PASSWORD: ${{ secrets.MAIL_PASSWORD }}
|
|
MAIL_FROM: ${{ secrets.MAIL_FROM }}
|
|
run: |
|
|
echo "POSTGRES_USER=${PROD_DB_USER:-myuser}" > .env
|
|
echo "POSTGRES_PASSWORD=${PROD_DB_PASSWORD:-mypassword}" >> .env
|
|
echo "CAPTCHA_SECRET=${CAPTCHA_SECRET:-1x0000000000000000000000000000000AA}" >> .env
|
|
echo "CAPTCHA_SITEKEY=${CAPTCHA_SITEKEY:-1x00000000000000000000AA}" >> .env
|
|
if [ -n "${MAIL_USERNAME}" ]; then
|
|
echo "SPRING_MAIL_HOST=smtp-relay.brevo.com" >> .env
|
|
echo "SPRING_MAIL_PORT=${MAIL_PORT:-2525}" >> .env
|
|
echo "SPRING_MAIL_USERNAME=${MAIL_USERNAME}" >> .env
|
|
echo "SPRING_MAIL_PASSWORD=${MAIL_PASSWORD}" >> .env
|
|
echo "SPRING_MAIL_PROPERTIES_MAIL_SMTP_AUTH=true" >> .env
|
|
echo "SPRING_MAIL_PROPERTIES_MAIL_SMTP_STARTTLS_ENABLE=true" >> .env
|
|
if [ -n "${MAIL_FROM}" ]; then
|
|
echo "APP_MAIL_FROM=${MAIL_FROM}" >> .env
|
|
fi
|
|
fi
|
|
docker compose down app || true
|
|
docker compose up -d --build app
|
|
|
|
- name: Verify application startup
|
|
run: |
|
|
echo "Waiting for application to start..."
|
|
COUNT=0
|
|
while [ $COUNT -lt 30 ]; do
|
|
if docker exec astalange_app wget -qO- http://localhost:8080/login | grep -q "Connexion"; then
|
|
echo "Application is up and login page is accessible!"
|
|
exit 0
|
|
fi
|
|
echo "Waiting... ($COUNT/30)"
|
|
sleep 5
|
|
COUNT=$((COUNT+1))
|
|
done
|
|
echo "Application failed to start or login page is not accessible."
|
|
docker logs astalange_app
|
|
exit 1
|