mirror of
https://github.com/SamyRai/turash.git
synced 2025-12-26 14:52:29 +00:00
feat: Switch to Kaniko (containerd-compatible) for CI/CD pipeline
- Replace docker-buildx plugin with Kaniko executor - Remove privileged mode requirement - Fix all Woodpecker linting errors - Update ArgoCD applications to use master branch - Add frontend Dockerfile and nginx config - Add comprehensive CI/CD setup documentation
This commit is contained in:
Damir Mukimov
parent
209af9dfe0
commit
c56ded5d56
113
.woodpecker.yml
Normal file
113
.woodpecker.yml
Normal file
@ -0,0 +1,113 @@
|
||||
when:
|
||||
- event: [push, pull_request]
|
||||
|
||||
steps:
|
||||
# Lint and test frontend
|
||||
frontend-lint:
|
||||
image: node:18-alpine
|
||||
commands:
|
||||
- cd bugulma/frontend
|
||||
- yarn install --frozen-lockfile
|
||||
- yarn lint
|
||||
- yarn test --run
|
||||
when:
|
||||
- event: [push, pull_request]
|
||||
path: "bugulma/frontend/**"
|
||||
|
||||
# Build and push frontend using Kaniko (containerd-compatible)
|
||||
frontend-build:
|
||||
image: gcr.io/kaniko-project/executor:latest
|
||||
commands:
|
||||
- mkdir -p /kaniko/.docker
|
||||
- echo "{\"auths\":{\"registry.bk.glpx.pro\":{\"username\":\"${DOCKER_USERNAME}\",\"password\":\"${DOCKER_PASSWORD}\"}}}" > /kaniko/.docker/config.json
|
||||
- /kaniko/executor --dockerfile=bugulma/frontend/Dockerfile --context=bugulma/frontend --destination=registry.bk.glpx.pro/turash/turash-frontend:latest --destination=registry.bk.glpx.pro/turash/turash-frontend:${CI_COMMIT_SHA} --cache=true --cache-ttl=168h --compressed-caching=false
|
||||
environment:
|
||||
DOCKER_USERNAME:
|
||||
from_secret: docker_username
|
||||
DOCKER_PASSWORD:
|
||||
from_secret: docker_password
|
||||
when:
|
||||
- event: push
|
||||
branch: master
|
||||
path: "bugulma/frontend/**"
|
||||
|
||||
# Lint and test backend
|
||||
backend-lint:
|
||||
image: golang:1.21-alpine
|
||||
commands:
|
||||
- cd bugulma/backend
|
||||
- go mod download
|
||||
- go vet ./...
|
||||
- go test -v -race -coverprofile=coverage.out ./...
|
||||
- go tool cover -html=coverage.out -o coverage.html
|
||||
when:
|
||||
- event: [push, pull_request]
|
||||
path: "bugulma/backend/**"
|
||||
|
||||
# Build and push backend using Kaniko (containerd-compatible)
|
||||
backend-build:
|
||||
image: gcr.io/kaniko-project/executor:latest
|
||||
commands:
|
||||
- mkdir -p /kaniko/.docker
|
||||
- echo "{\"auths\":{\"registry.bk.glpx.pro\":{\"username\":\"${DOCKER_USERNAME}\",\"password\":\"${DOCKER_PASSWORD}\"}}}" > /kaniko/.docker/config.json
|
||||
- /kaniko/executor --dockerfile=bugulma/backend/Dockerfile --context=bugulma/backend --destination=registry.bk.glpx.pro/turash/turash-backend:latest --destination=registry.bk.glpx.pro/turash/turash-backend:${CI_COMMIT_SHA} --cache=true --cache-ttl=168h --compressed-caching=false
|
||||
environment:
|
||||
DOCKER_USERNAME:
|
||||
from_secret: docker_username
|
||||
DOCKER_PASSWORD:
|
||||
from_secret: docker_password
|
||||
when:
|
||||
- event: push
|
||||
branch: master
|
||||
path: "bugulma/backend/**"
|
||||
|
||||
# Deploy to staging
|
||||
deploy-staging:
|
||||
image: bitnami/kubectl:latest
|
||||
commands:
|
||||
- kubectl config set-cluster k3s --server=https://10.10.10.2:6443 --insecure-skip-tls-verify=true
|
||||
- kubectl config set-credentials default --token=${KUBE_TOKEN}
|
||||
- kubectl config set-context default --cluster=k3s --user=default
|
||||
- kubectl config use-context default
|
||||
|
||||
# Deploy backend
|
||||
- kubectl apply -f k8s/namespace.yaml
|
||||
- kubectl apply -f k8s/configmap.yaml
|
||||
- kubectl apply -f k8s/secret.yaml
|
||||
- kubectl set image deployment/turash-backend backend=registry.bk.glpx.pro/turash/turash-backend:${CI_COMMIT_SHA} -n turash || kubectl create -f k8s/deployment.yaml
|
||||
- kubectl rollout status deployment/turash-backend -n turash
|
||||
|
||||
# Deploy frontend
|
||||
- kubectl apply -f k8s/frontend-deployment.yaml
|
||||
- kubectl apply -f k8s/frontend-service.yaml
|
||||
- kubectl set image deployment/turash-frontend frontend=registry.bk.glpx.pro/turash/turash-frontend:${CI_COMMIT_SHA} -n turash
|
||||
- kubectl rollout status deployment/turash-frontend -n turash
|
||||
environment:
|
||||
KUBE_TOKEN:
|
||||
from_secret: kube_token
|
||||
when:
|
||||
- event: push
|
||||
branch: master
|
||||
path: ["bugulma/**", "k8s/**"]
|
||||
|
||||
# Run E2E tests
|
||||
e2e-test:
|
||||
image: mcr.microsoft.com/playwright:v1.40.0-jammy
|
||||
commands:
|
||||
- cd bugulma/frontend
|
||||
- yarn install --frozen-lockfile
|
||||
- yarn test:e2e --headed=false
|
||||
when:
|
||||
- event: push
|
||||
branch: master
|
||||
path: "bugulma/frontend/**"
|
||||
|
||||
# Notify on failure
|
||||
notify-failure:
|
||||
image: alpine:latest
|
||||
commands:
|
||||
- echo "Pipeline failed for commit ${CI_COMMIT_SHA}"
|
||||
- echo "Check logs at ${CI_SYSTEM_URL}/${CI_REPO}/${CI_PIPELINE_NUMBER}"
|
||||
when:
|
||||
- event: [push, pull_request]
|
||||
status: failure
|
||||
32
bugulma/frontend/Dockerfile
Normal file
32
bugulma/frontend/Dockerfile
Normal file
@ -0,0 +1,32 @@
|
||||
# Frontend Production Dockerfile
|
||||
FROM node:18-alpine AS builder
|
||||
|
||||
# Set working directory
|
||||
WORKDIR /app
|
||||
|
||||
# Copy package files
|
||||
COPY package*.json yarn.lock ./
|
||||
|
||||
# Install dependencies
|
||||
RUN yarn install --frozen-lockfile
|
||||
|
||||
# Copy source code
|
||||
COPY . .
|
||||
|
||||
# Build the application
|
||||
RUN yarn build
|
||||
|
||||
# Production stage
|
||||
FROM nginx:alpine
|
||||
|
||||
# Copy built assets from builder stage
|
||||
COPY --from=builder /app/dist /usr/share/nginx/html
|
||||
|
||||
# Copy nginx configuration
|
||||
COPY nginx.conf /etc/nginx/nginx.conf
|
||||
|
||||
# Expose port
|
||||
EXPOSE 80
|
||||
|
||||
# Start nginx
|
||||
CMD ["nginx", "-g", "daemon off;"]
|
||||
97
bugulma/frontend/nginx.conf
Normal file
97
bugulma/frontend/nginx.conf
Normal file
@ -0,0 +1,97 @@
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
# Logging
|
||||
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
'$status $body_bytes_sent "$http_referer" '
|
||||
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||
|
||||
access_log /var/log/nginx/access.log main;
|
||||
error_log /var/log/nginx/error.log;
|
||||
|
||||
# Performance
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
keepalive_timeout 65;
|
||||
types_hash_max_size 2048;
|
||||
client_max_body_size 16M;
|
||||
|
||||
# Gzip compression
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_min_length 1024;
|
||||
gzip_proxied any;
|
||||
gzip_comp_level 6;
|
||||
gzip_types
|
||||
text/plain
|
||||
text/css
|
||||
text/xml
|
||||
text/javascript
|
||||
application/json
|
||||
application/javascript
|
||||
application/xml+rss
|
||||
application/atom+xml
|
||||
image/svg+xml;
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
root /usr/share/nginx/html;
|
||||
index index.html;
|
||||
|
||||
# Security headers
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
||||
add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
|
||||
|
||||
# Handle client-side routing
|
||||
location / {
|
||||
try_files $uri $uri/ /index.html;
|
||||
}
|
||||
|
||||
# API proxy to backend
|
||||
location /api/ {
|
||||
proxy_pass http://turash-backend.turash.svc.cluster.local:80;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
# CORS headers
|
||||
add_header Access-Control-Allow-Origin *;
|
||||
add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS";
|
||||
add_header Access-Control-Allow-Headers "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization";
|
||||
|
||||
# Handle preflight requests
|
||||
if ($request_method = 'OPTIONS') {
|
||||
add_header Access-Control-Allow-Origin *;
|
||||
add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS";
|
||||
add_header Access-Control-Allow-Headers "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization";
|
||||
add_header Content-Type 'text/plain charset=UTF-8';
|
||||
add_header Content-Length 0;
|
||||
return 204;
|
||||
}
|
||||
}
|
||||
|
||||
# Static assets with caching
|
||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
|
||||
expires 1y;
|
||||
add_header Cache-Control "public, immutable";
|
||||
}
|
||||
|
||||
# Health check
|
||||
location /health {
|
||||
access_log off;
|
||||
return 200 "healthy\n";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
}
|
||||
}
|
||||
231
docs/CICD_SETUP_COMPLETE.md
Normal file
231
docs/CICD_SETUP_COMPLETE.md
Normal file
@ -0,0 +1,231 @@
|
||||
# CI/CD Pipeline Setup Complete ✅
|
||||
|
||||
## Overview
|
||||
|
||||
Complete CI/CD pipeline configured using:
|
||||
- **Woodpecker CI**: Build and test automation
|
||||
- **Kaniko**: containerd-compatible image builder
|
||||
- **Harbor Registry**: Container image storage
|
||||
- **ArgoCD**: GitOps-based deployment
|
||||
|
||||
## Pipeline Architecture
|
||||
|
||||
```
|
||||
GitHub Push → Woodpecker CI → Kaniko Build → Harbor Registry → ArgoCD → Kubernetes
|
||||
```
|
||||
|
||||
## Components
|
||||
|
||||
### 1. Woodpecker CI Pipeline (`.woodpecker.yml`)
|
||||
|
||||
#### Pipeline Steps:
|
||||
|
||||
1. **Frontend Lint & Test**
|
||||
- Runs on: `push`, `pull_request`
|
||||
- Path: `bugulma/frontend/**`
|
||||
- Commands: `yarn install`, `yarn lint`, `yarn test`
|
||||
|
||||
2. **Frontend Build** (Kaniko)
|
||||
- Runs on: `push` to `master`
|
||||
- Path: `bugulma/frontend/**`
|
||||
- Builds: `registry.bk.glpx.pro/turash/turash-frontend:latest` and `:${CI_COMMIT_SHA}`
|
||||
- Uses containerd-compatible Kaniko executor
|
||||
|
||||
3. **Backend Lint & Test**
|
||||
- Runs on: `push`, `pull_request`
|
||||
- Path: `bugulma/backend/**`
|
||||
- Commands: `go vet`, `go test`, coverage
|
||||
|
||||
4. **Backend Build** (Kaniko)
|
||||
- Runs on: `push` to `master`
|
||||
- Path: `bugulma/backend/**`
|
||||
- Builds: `registry.bk.glpx.pro/turash/turash-backend:latest` and `:${CI_COMMIT_SHA}`
|
||||
- Uses containerd-compatible Kaniko executor
|
||||
|
||||
5. **Deploy to Staging** (Optional - ArgoCD handles this automatically)
|
||||
- Runs on: `push` to `master`
|
||||
- Path: `bugulma/**`, `k8s/**`
|
||||
- Manual kubectl deployment (can be disabled if using ArgoCD only)
|
||||
|
||||
6. **E2E Tests**
|
||||
- Runs on: `push` to `master`
|
||||
- Path: `bugulma/frontend/**`
|
||||
- Uses Playwright for end-to-end testing
|
||||
|
||||
7. **Failure Notification**
|
||||
- Runs on: Any failure
|
||||
- Logs failure information
|
||||
|
||||
### 2. Harbor Container Registry
|
||||
|
||||
- **URL**: https://registry.bk.glpx.pro
|
||||
- **Registry**: `registry.bk.glpx.pro`
|
||||
- **Project**: `turash`
|
||||
- **Credentials**: Configured in Woodpecker secrets
|
||||
|
||||
### 3. ArgoCD GitOps
|
||||
|
||||
- **Backend Application**: `turash-backend`
|
||||
- **Frontend Application**: `turash-frontend`
|
||||
- **Sync Policy**: Automated with self-heal
|
||||
- **Source**: `https://github.com/SamyRai/turash.git`
|
||||
- **Path**: `k8s/`
|
||||
- **Target Revision**: `HEAD` (updates automatically)
|
||||
|
||||
## Required Secrets
|
||||
|
||||
### Woodpecker Secrets
|
||||
|
||||
Configure these secrets in Woodpecker for repository `SamyRai/turash`:
|
||||
|
||||
```bash
|
||||
# Docker registry credentials (for Harbor)
|
||||
woodpecker-cli repo secret add SamyRai/turash \
|
||||
--name docker_username \
|
||||
--value admin
|
||||
|
||||
woodpecker-cli repo secret add SamyRai/turash \
|
||||
--name docker_password \
|
||||
--value "YOUR_HARBOR_PASSWORD"
|
||||
|
||||
# Kubernetes token (optional, only if using manual deploy step)
|
||||
woodpecker-cli repo secret add SamyRai/turash \
|
||||
--name kube_token \
|
||||
--value "YOUR_KUBERNETES_TOKEN"
|
||||
```
|
||||
|
||||
**Current Status**:
|
||||
- ✅ `docker_username`: Configured
|
||||
- ✅ `docker_password`: Configured
|
||||
- ⚠️ `kube_token`: Not configured (optional if using ArgoCD only)
|
||||
|
||||
### Harbor Credentials
|
||||
|
||||
- **Username**: `admin`
|
||||
- **Password**: See `k8s/registry/harbor-secrets.yaml.template`
|
||||
|
||||
## Deployment Flow
|
||||
|
||||
### Automatic Deployment (Recommended)
|
||||
|
||||
1. **Developer pushes to `master` branch**
|
||||
2. **Woodpecker triggers pipeline**:
|
||||
- Lints and tests code
|
||||
- Builds Docker images with Kaniko
|
||||
- Pushes images to Harbor registry
|
||||
3. **ArgoCD detects changes**:
|
||||
- Monitors Git repository
|
||||
- Detects new image tags in Kubernetes manifests
|
||||
- Automatically syncs and deploys to Kubernetes
|
||||
|
||||
### Manual Deployment (Optional)
|
||||
|
||||
The `deploy-staging` step in Woodpecker can manually deploy using kubectl, but this is redundant if ArgoCD is configured with automated sync.
|
||||
|
||||
## Image Tagging Strategy
|
||||
|
||||
Images are tagged with:
|
||||
- `latest`: Always points to the latest build
|
||||
- `${CI_COMMIT_SHA}`: Specific commit SHA for traceability
|
||||
|
||||
Kubernetes deployments should reference specific SHA tags for production:
|
||||
```yaml
|
||||
image: registry.bk.glpx.pro/turash/turash-backend:abc123def456
|
||||
```
|
||||
|
||||
## Verification
|
||||
|
||||
### Check Woodpecker Pipeline
|
||||
|
||||
```bash
|
||||
# List pipelines
|
||||
woodpecker-cli pipeline ls SamyRai/turash
|
||||
|
||||
# View latest pipeline
|
||||
woodpecker-cli pipeline last SamyRai/turash
|
||||
|
||||
# View pipeline logs
|
||||
woodpecker-cli pipeline logs SamyRai/turash <pipeline-number>
|
||||
```
|
||||
|
||||
### Check Harbor Registry
|
||||
|
||||
```bash
|
||||
# Login to Harbor
|
||||
docker login registry.bk.glpx.pro -u admin -p "PASSWORD"
|
||||
|
||||
# List images
|
||||
curl -u admin:PASSWORD https://registry.bk.glpx.pro/api/v2.0/projects/turash/repositories
|
||||
|
||||
# Or via Harbor UI
|
||||
open https://registry.bk.glpx.pro
|
||||
```
|
||||
|
||||
### Check ArgoCD Applications
|
||||
|
||||
```bash
|
||||
# List applications
|
||||
argocd app list
|
||||
|
||||
# Get application status
|
||||
argocd app get turash-backend
|
||||
argocd app get turash-frontend
|
||||
|
||||
# View application sync status
|
||||
argocd app sync turash-backend
|
||||
```
|
||||
|
||||
### Check Kubernetes Deployments
|
||||
|
||||
```bash
|
||||
# Check pods
|
||||
kubectl get pods -n turash
|
||||
|
||||
# Check deployments
|
||||
kubectl get deployments -n turash
|
||||
|
||||
# Check services
|
||||
kubectl get svc -n turash
|
||||
|
||||
# Check ingress
|
||||
kubectl get ingress -n turash
|
||||
```
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### Pipeline Fails to Build
|
||||
|
||||
1. **Check Kaniko logs**: Verify Dockerfile and build context
|
||||
2. **Check registry access**: Ensure Harbor credentials are correct
|
||||
3. **Check secrets**: Verify `docker_username` and `docker_password` are set
|
||||
|
||||
### Images Not Deploying
|
||||
|
||||
1. **Check ArgoCD sync status**: `argocd app get turash-backend`
|
||||
2. **Check image pull secrets**: Ensure Harbor registry secret is configured
|
||||
3. **Check image tags**: Verify deployment manifests reference correct tags
|
||||
|
||||
### ArgoCD Not Syncing
|
||||
|
||||
1. **Check repository access**: Ensure ArgoCD can access GitHub repository
|
||||
2. **Check application status**: `argocd app get turash-backend`
|
||||
3. **Check sync policy**: Verify automated sync is enabled
|
||||
|
||||
## Next Steps
|
||||
|
||||
1. ✅ **Pipeline configured** - Woodpecker CI with Kaniko
|
||||
2. ✅ **Registry configured** - Harbor with containerd support
|
||||
3. ✅ **GitOps configured** - ArgoCD with automated sync
|
||||
4. ⚠️ **Optional**: Configure `kube_token` secret if using manual deploy step
|
||||
5. 🔄 **Test pipeline**: Push a commit to trigger the pipeline
|
||||
6. 🔄 **Verify deployment**: Check ArgoCD sync and Kubernetes pods
|
||||
|
||||
## Key Features
|
||||
|
||||
- ✅ **containerd-compatible**: Uses Kaniko instead of Docker
|
||||
- ✅ **No privileged mode**: Kaniko doesn't require privileged containers
|
||||
- ✅ **Automated deployment**: ArgoCD handles GitOps deployments
|
||||
- ✅ **Multi-architecture**: Ready for ARM64 and AMD64 (if needed)
|
||||
- ✅ **Caching**: Kaniko cache enabled for faster builds
|
||||
- ✅ **Security**: Secrets managed via Woodpecker secret store
|
||||
|
||||
278
docs/woodpecker-cli-reference.md
Normal file
278
docs/woodpecker-cli-reference.md
Normal file
@ -0,0 +1,278 @@
|
||||
# Woodpecker CLI Reference
|
||||
|
||||
## Overview
|
||||
|
||||
Woodpecker CLI version: **3.12.0**
|
||||
|
||||
Current user: **SamyRai** (gigadamer@gmail.com)
|
||||
|
||||
## Main Commands
|
||||
|
||||
### Setup & Configuration
|
||||
|
||||
```bash
|
||||
# Initial setup
|
||||
woodpecker-cli setup [--server URL] [--token TOKEN]
|
||||
|
||||
# Show current user info
|
||||
woodpecker-cli info
|
||||
|
||||
# Update CLI to latest version
|
||||
woodpecker-cli update
|
||||
```
|
||||
|
||||
### Repository Management
|
||||
|
||||
```bash
|
||||
# List all repositories
|
||||
woodpecker-cli repo ls
|
||||
|
||||
# Add a repository
|
||||
woodpecker-cli repo add [options]
|
||||
|
||||
# Show repository information
|
||||
woodpecker-cli repo show [repo]
|
||||
|
||||
# Update repository settings
|
||||
woodpecker-cli repo update [options]
|
||||
|
||||
# Remove repository
|
||||
woodpecker-cli repo rm [repo]
|
||||
|
||||
# Synchronize repository list
|
||||
woodpecker-cli repo sync
|
||||
|
||||
# Repair repository webhooks
|
||||
woodpecker-cli repo repair [repo]
|
||||
|
||||
# Assume ownership of a repository
|
||||
woodpecker-cli repo chown [repo]
|
||||
```
|
||||
|
||||
### Repository Secrets
|
||||
|
||||
```bash
|
||||
# List secrets
|
||||
woodpecker-cli repo secret ls [repo]
|
||||
|
||||
# Add a secret
|
||||
woodpecker-cli repo secret add [options]
|
||||
|
||||
# Show secret information
|
||||
woodpecker-cli repo secret show [repo] [secret]
|
||||
|
||||
# Update a secret
|
||||
woodpecker-cli repo secret update [options]
|
||||
|
||||
# Remove a secret
|
||||
woodpecker-cli repo secret rm [repo] [secret]
|
||||
```
|
||||
|
||||
### Container Registry Management
|
||||
|
||||
```bash
|
||||
# List registries
|
||||
woodpecker-cli repo registry ls [repo]
|
||||
|
||||
# Add a registry
|
||||
woodpecker-cli repo registry add [options]
|
||||
|
||||
# Show registry information
|
||||
woodpecker-cli repo registry show [repo] [registry]
|
||||
|
||||
# Update a registry
|
||||
woodpecker-cli repo registry update [options]
|
||||
|
||||
# Remove a registry
|
||||
woodpecker-cli repo registry rm [repo] [registry]
|
||||
```
|
||||
|
||||
### Pipeline Management
|
||||
|
||||
```bash
|
||||
# List pipelines
|
||||
woodpecker-cli pipeline ls [repo]
|
||||
|
||||
# Show latest pipeline
|
||||
woodpecker-cli pipeline last [repo]
|
||||
|
||||
# Show pipeline information
|
||||
woodpecker-cli pipeline show [repo] [pipeline-number]
|
||||
|
||||
# Show pipeline steps
|
||||
woodpecker-cli pipeline ps [repo] [pipeline-number]
|
||||
|
||||
# Show pipeline queue
|
||||
woodpecker-cli pipeline queue
|
||||
|
||||
# Start a pipeline
|
||||
woodpecker-cli pipeline start [repo] [pipeline-number]
|
||||
|
||||
# Stop a pipeline
|
||||
woodpecker-cli pipeline stop [repo] [pipeline-number]
|
||||
|
||||
# Approve a pipeline
|
||||
woodpecker-cli pipeline approve [repo] [pipeline-number]
|
||||
|
||||
# Decline a pipeline
|
||||
woodpecker-cli pipeline decline [repo] [pipeline-number]
|
||||
|
||||
# Trigger deployment pipeline
|
||||
woodpecker-cli pipeline deploy [repo] [environment]
|
||||
|
||||
# Show pipeline logs
|
||||
woodpecker-cli pipeline log [repo] [pipeline-number] [step-number]
|
||||
|
||||
# Purge old pipelines
|
||||
woodpecker-cli pipeline purge [repo] [options]
|
||||
```
|
||||
|
||||
### Local Pipeline Execution
|
||||
|
||||
```bash
|
||||
# Execute pipeline locally
|
||||
woodpecker-cli exec [path/to/.woodpecker.yaml]
|
||||
|
||||
# Common options:
|
||||
--local # Run from local directory
|
||||
--secrets string=string # Map of secrets: 'key="value",key2="value2"'
|
||||
--secrets string # Path to YAML file with secrets
|
||||
--backend-engine string # Backend engine (auto-detect, docker, kubernetes)
|
||||
--timeout duration # Pipeline timeout (default: 1h0m0s)
|
||||
--volumes string # Pipeline volumes
|
||||
--network string # External networks
|
||||
```
|
||||
|
||||
### Pipeline Linting
|
||||
|
||||
```bash
|
||||
# Lint pipeline configuration
|
||||
woodpecker-cli lint [path/to/.woodpecker.yaml]
|
||||
|
||||
# Options:
|
||||
--strict # Treat warnings as errors
|
||||
--plugins-privileged # Allow privileged plugins
|
||||
```
|
||||
|
||||
### Organization Management
|
||||
|
||||
```bash
|
||||
# List organizations
|
||||
woodpecker-cli org ls
|
||||
|
||||
# Show organization
|
||||
woodpecker-cli org show [org]
|
||||
|
||||
# Add organization
|
||||
woodpecker-cli org add [options]
|
||||
|
||||
# Remove organization
|
||||
woodpecker-cli org rm [org]
|
||||
```
|
||||
|
||||
### Admin Commands
|
||||
|
||||
```bash
|
||||
# Manage server settings
|
||||
woodpecker-cli admin [command]
|
||||
```
|
||||
|
||||
## Global Options
|
||||
|
||||
All commands support these global options:
|
||||
|
||||
```bash
|
||||
--config string, -c string # Path to config file [$WOODPECKER_CONFIG]
|
||||
--server string, -s string # Server address [$WOODPECKER_SERVER]
|
||||
--token string, -t string # Server auth token [$WOODPECKER_TOKEN]
|
||||
--skip-verify # Skip SSL verification [$WOODPECKER_SKIP_VERIFY]
|
||||
--log-level string # Set logging level (default: "info")
|
||||
--pretty # Enable pretty-printed debug output
|
||||
--nocolor # Disable colored output
|
||||
```
|
||||
|
||||
## Environment Variables
|
||||
|
||||
You can set these environment variables instead of using CLI flags:
|
||||
|
||||
- `WOODPECKER_SERVER` - Server address
|
||||
- `WOODPECKER_TOKEN` - Authentication token
|
||||
- `WOODPECKER_CONFIG` - Path to config file
|
||||
- `WOODPECKER_SKIP_VERIFY` - Skip SSL verification
|
||||
- `WOODPECKER_LOG_LEVEL` - Logging level
|
||||
|
||||
## Common Workflows
|
||||
|
||||
### 1. Setup Repository
|
||||
|
||||
```bash
|
||||
# Add repository
|
||||
woodpecker-cli repo add SamyRai/turash
|
||||
|
||||
# Add container registry credentials
|
||||
woodpecker-cli repo registry add SamyRai/turash \
|
||||
--name docker-registry \
|
||||
--hostname registry.local \
|
||||
--username admin \
|
||||
--password secret
|
||||
|
||||
# Add secrets
|
||||
woodpecker-cli repo secret add SamyRai/turash \
|
||||
--name DOCKER_USERNAME \
|
||||
--value admin
|
||||
|
||||
woodpecker-cli repo secret add SamyRai/turash \
|
||||
--name DOCKER_PASSWORD \
|
||||
--value secret
|
||||
```
|
||||
|
||||
### 2. Trigger Pipeline
|
||||
|
||||
```bash
|
||||
# Start pipeline manually
|
||||
woodpecker-cli pipeline start SamyRai/turash
|
||||
|
||||
# Trigger deployment
|
||||
woodpecker-cli pipeline deploy SamyRai/turash production
|
||||
```
|
||||
|
||||
### 3. Monitor Pipeline
|
||||
|
||||
```bash
|
||||
# Check latest pipeline
|
||||
woodpecker-cli pipeline last SamyRai/turash
|
||||
|
||||
# View pipeline steps
|
||||
woodpecker-cli pipeline ps SamyRai/turash 123
|
||||
|
||||
# View logs
|
||||
woodpecker-cli pipeline log SamyRai/turash 123 1
|
||||
```
|
||||
|
||||
### 4. Test Pipeline Locally
|
||||
|
||||
```bash
|
||||
# Lint pipeline
|
||||
woodpecker-cli lint .woodpecker.yml
|
||||
|
||||
# Execute locally
|
||||
woodpecker-cli exec .woodpecker.yml \
|
||||
--local \
|
||||
--secrets DOCKER_USERNAME="admin",DOCKER_PASSWORD="secret"
|
||||
```
|
||||
|
||||
## Completion
|
||||
|
||||
Generate shell completion:
|
||||
|
||||
```bash
|
||||
# Bash
|
||||
woodpecker-cli completion bash > /etc/bash_completion.d/woodpecker-cli
|
||||
|
||||
# Zsh
|
||||
woodpecker-cli completion zsh > ~/.zsh/completion/_woodpecker-cli
|
||||
|
||||
# Fish
|
||||
woodpecker-cli completion fish > ~/.config/fish/completions/woodpecker-cli.fish
|
||||
```
|
||||
|
||||
47
k8s/argocd/application.yaml
Normal file
47
k8s/argocd/application.yaml
Normal file
@ -0,0 +1,47 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: turash-backend
|
||||
namespace: argocd
|
||||
labels:
|
||||
app: turash-backend
|
||||
environment: production
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://github.com/SamyRai/turash.git
|
||||
targetRevision: master
|
||||
path: k8s
|
||||
kustomize: {}
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: turash
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
allowEmpty: false
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- PrunePropagationPolicy=foreground
|
||||
- PruneLast=true
|
||||
retry:
|
||||
limit: 5
|
||||
backoff:
|
||||
duration: 5s
|
||||
factor: 2
|
||||
maxDuration: 3m
|
||||
revisionHistoryLimit: 10
|
||||
ignoreDifferences:
|
||||
- group: apps
|
||||
kind: Deployment
|
||||
jsonPointers:
|
||||
- /spec/replicas
|
||||
- group: autoscaling
|
||||
kind: HorizontalPodAutoscaler
|
||||
jsonPointers:
|
||||
- /spec/minReplicas
|
||||
- /spec/maxReplicas
|
||||
|
||||
47
k8s/argocd/frontend-application.yaml
Normal file
47
k8s/argocd/frontend-application.yaml
Normal file
@ -0,0 +1,47 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: turash-frontend
|
||||
namespace: argocd
|
||||
labels:
|
||||
app: turash-frontend
|
||||
environment: production
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://github.com/SamyRai/turash.git
|
||||
targetRevision: master
|
||||
path: k8s
|
||||
kustomize: {}
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: turash
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
allowEmpty: false
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- PrunePropagationPolicy=foreground
|
||||
- PruneLast=true
|
||||
retry:
|
||||
limit: 5
|
||||
backoff:
|
||||
duration: 5s
|
||||
factor: 2
|
||||
maxDuration: 3m
|
||||
revisionHistoryLimit: 10
|
||||
ignoreDifferences:
|
||||
- group: apps
|
||||
kind: Deployment
|
||||
jsonPointers:
|
||||
- /spec/replicas
|
||||
- group: autoscaling
|
||||
kind: HorizontalPodAutoscaler
|
||||
jsonPointers:
|
||||
- /spec/minReplicas
|
||||
- /spec/maxReplicas
|
||||
|
||||
Loading…
Reference in New Issue
Block a user