1
apiVersion: apps/v1
2
kind: Deployment
3
metadata:
4
  name: deployment-nginx-4
5
spec:
6
  replicas: 1
7
  selector:
8
    matchLabels:
9
      app: pod-nginx-4
10
  template:
11
    metadata:
12
      labels:
13
        app: pod-nginx-4
14
    spec:
15
      containers:
16
      - name: nginx
17
        image: $image:$tag
18
        ports:
19
        - containerPort: 80
20

21
---
22
apiVersion: v1
23
kind: Service
24
metadata:
25
  name: service-nginx-4
26
spec:
27
  type: ClusterIP
28
  ports:
29
  - port: 80
30
    protocol: TCP
31
    targetPort: 80
32
  selector:
33
    app: pod-nginx-4
34

35
---
36
apiVersion: networking.gke.io/v1
37
kind: ManagedCertificate
38
metadata:
39
  name: cert-nginx-4
40
spec:
41
  domains:
42
  - nginx-ado.twcanhelp.me
43

44
---
45
apiVersion: networking.k8s.io/v1
46
kind: Ingress
47
metadata:
48
  name: ingress-nginx-4
49
  annotations:
50
    networking.gke.io/managed-certificates: cert-nginx-4
51
spec:
52
  rules:
53
  - host: nginx-ado.twcanhelp.me
54
    http:
55
      paths:
56
      - path: /
57
        pathType: Prefix
58
        backend:
59
          service:
60
            name: service-nginx-4
61
            port:
62
              number: 80

1
trigger:
2
- main
3

4
resources:
5
- repo: self
6

7
variables:
8
  image: 'asia-east1-docker.pkg.dev/it-production-377006/nginx/b'
9
  tag: '$(Build.BuildNumber)'
10

11
stages:
12
- stage: Build
13
  displayName: Build image
14
  jobs:
15
  - job: Build
16
    displayName: Build
17
    pool:
18
      vmImage: ubuntu-latest
19
    steps:
20
    - task: DownloadSecureFile@1
21
      name: GCPsecret
22
      displayName: 'Download CA certificate'
23
      inputs:
24
        secureFile: 'a.json'
25
    - script: |
26
        gcloud auth login --cred-file $(GCPsecret.secureFilePath)
27
        gcloud auth configure-docker --quiet asia-east1-docker.pkg.dev
28
      displayName: Gcloud login & Get docker token
29
    - task: Docker@2
30
      displayName: Build & Push image
31
      inputs:
32
        command: buildAndPush
33
        dockerfile: '$(Build.SourcesDirectory)/Dockerfile'
34
        repository: $(image)
35
        tags: |
36
          $(tag)
37
    - script: |
38
        echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
39
        curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key --keyring /usr/share/keyrings/cloud.google.gpg add -
40
        sudo apt-get update && sudo apt-get install -y google-cloud-sdk-gke-gcloud-auth-plugin
41
        gcloud container clusters get-credentials autopilot-cluster-1 --region asia-east1 --project it-production-377006
42
      displayName: Install dependency packages  # https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke
43
    - script: |
44
        export image=$(image)
45
        export tag=$(tag)
46
        envsubst < kubernetes.yml | kubectl apply -f -
47
      displayName: Deploy to K8s