forked from radepal/kentrikos-test-app
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Jenkinsfile
125 lines (114 loc) · 4.33 KB
/
Jenkinsfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
#!groovy
library 'kentrikos-shared-library'
def app_address = ""
pipeline {
options {
timeout(time: 60, unit: 'MINUTES')
}
environment {
K8S_FLAVOR = 'eks'
REPO_URL = 'https://github.com/mietlinski-nc/kentrikos-test-app.git'
APP_NAME = 'kentrikos-hello-app-mm'
ECR_REPO_NAME = "$PRODUCT_DOMAIN_NAME-$ENVIRONMENT_TYPE/$APP_NAME"
ECR_REPO = "$AWS_OPERATIONS_ACCOUNT_NUMBER" + ".dkr.ecr." + "$AWS_REGION" + ".amazonaws.com/$ECR_REPO_NAME"
CONFIG_DIR = "application/$AWS_REGION/env-$K8S_FLAVOR"
}
agent any
stages {
stage('Git clone') {
steps {
gitCloneAppRepo repo: "$REPO_URL"
}
}
stage('Create ECR') {
steps {
ecrCreateRepository repo_name: "$ECR_REPO_NAME"
}
}
stage('Docker Build') {
steps {
withProxyEnv() {
sh 'docker build -t $APP_NAME:latest .'
}
}
}
stage('Docker Tag') {
steps {
withProxyEnv() {
sh 'docker tag $APP_NAME $ECR_REPO'
}
}
}
stage('Docker Push') {
steps {
withProxyEnv() {
sh 'eval $(aws ecr get-login --no-include-email --region $AWS_REGION | sed "s|https://||")'
sh 'docker push $ECR_REPO'
}
}
}
stage('Grant Cross-Account access to ECR') {
steps {
withProxyEnv() {
script {
def ecrPolicyJSON = """
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowPull",
"Effect": "Allow",
"Action": [
"ecr:BatchGetImage",
"ecr:GetDownloadUrlForLayer"
],
"Principal": {
"AWS": ["arn:aws:iam::${AWS_APPLICATION_ACCOUNT_NUMBER}:root"]
}
}
]
}
"""
writeFile file: 'ecr_policy.json', text: ecrPolicyJSON
sh(script: "aws ecr get-repository-policy --region ${AWS_REGION} --repository-name ${ECR_REPO_NAME} || aws ecr set-repository-policy --region ${AWS_REGION} --repository-name ${ECR_REPO_NAME} --policy-text \"\$(cat ecr_policy.json)\"", returnStdout: true)
}
}
}
}
stage('Switch K8S context') {
steps {
kubectlSwitchContextApp()
}
}
stage('Create $PRODUCT_DOMAIN_NAME namespace') {
steps {
withProxyEnv() {
withAWS(role: "$CROSS_ACCOUNT_ROLE_NAME", roleAccount: "$AWS_APPLICATION_ACCOUNT_NUMBER") {
script {
sh '''
#!/bin/bash -x
if ! kubectl get namespace $PRODUCT_DOMAIN_NAME;
then
echo "Namespace for $PRODUCT_DOMAIN_NAME does not exist, creating..."
kubectl create namespace $PRODUCT_DOMAIN_NAME
fi
'''
}}
}
}
}
stage('Deploy application') {
steps {
withProxyEnv() {
withAWS(role: "$CROSS_ACCOUNT_ROLE_NAME", roleAccount: "$AWS_APPLICATION_ACCOUNT_NUMBER") {
script {
sh """
#!/bin/bash
helm upgrade --install --wait --set image.repository=$ECR_REPO --set=ingress.enabled=true --namespace $PRODUCT_DOMAIN_NAME $APP_NAME helm/
"""
}}
}
}
}
}
}