1
version: "3.9"
2
services:
3
  slim:
4
    build: ./slim
5
    ports:
6
      - "80:80"

1
trigger:
2
- main
3

4
resources:
5
- repo: self
6

7
variables:
8
  image: 'asia-east1-docker.pkg.dev/it-production-377006/nginx/slim'
9
  tag: '$(Build.BuildNumber)'
10
  domain: 'slim.twcanhelp.me'
11
stages:
12
- stage: Build
13
  displayName: Build image
14
  jobs:
15
  - job: Build
16
    displayName: Build
17
    pool:
18
      vmImage: ubuntu-latest
19
    steps:
20
    - task: DownloadSecureFile@1
21
      name: GCPsecret
22
      displayName: 'Download GCP secret'
23
      inputs:
24
        secureFile: 'gcp.json'
25
    - task: DownloadSecureFile@1
26
      name: SSLcert
27
      displayName: 'Download ssl cert'
28
      inputs:
29
        secureFile: 'cert.pem'
30
    - task: DownloadSecureFile@1
31
      name: SSLkey
32
      displayName: 'Download ssl key'
33
      inputs:
34
        secureFile: 'cert.key'
35
    - script: |
36
        gcloud auth login --cred-file $(GCPsecret.secureFilePath)
37
        gcloud auth configure-docker --quiet asia-east1-docker.pkg.dev
38
      displayName: Gcloud login & Get docker token
39
    - task: Docker@2
40
      displayName: Build & Push image
41
      inputs:
42
        command: buildAndPush
43
        dockerfile: '$(Build.SourcesDirectory)/slim/Dockerfile'
44
        repository: $(image)
45
        tags: |
46
          $(tag)
47
    - script: |
48
        echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
49
        curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key --keyring /usr/share/keyrings/cloud.google.gpg add -
50
        sudo apt-get update && sudo apt-get install -y google-cloud-sdk-gke-gcloud-auth-plugin
51
        gcloud container clusters get-credentials autopilot-cluster-1 --region asia-east1 --project it-production-377006
52
      displayName: Install dependency packages  # https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke
53
    - script: |
54
        export image=$(image)
55
        export tag=$(tag)
56
        export domain=$(domain)
57
        kubectl create secret tls cert-slim --cert=$(SSLcert.secureFilePath) --key=$(SSLkey.secureFilePath) \
58
          --dry-run=client -o yaml | kubectl apply -f -
59
        envsubst < kubernetes.yml | kubectl apply -f -
60
      displayName: Deploy to K8s

1
apiVersion: apps/v1
2
kind: Deployment
3
metadata:
4
  name: deployment-slim
5
spec:
6
  replicas: 1
7
  selector:
8
    matchLabels:
9
      app: pod-slim
10
  template:
11
    metadata:
12
      labels:
13
        app: pod-slim
14
    spec:
15
      containers:
16
      - name: slim
17
        image: $image:$tag
18
        ports:
19
        - containerPort: 80
20

21
---
22
apiVersion: v1
23
kind: Service
24
metadata:
25
  name: service-slim
26
spec:
27
  type: ClusterIP
28
  ports:
29
  - port: 80
30
    protocol: TCP
31
    targetPort: 80
32
  selector:
33
    app: pod-slim
34

35
---
36
apiVersion: networking.k8s.io/v1
37
kind: Ingress
38
metadata:
39
  name: ingress-slim
40
spec:
41
  tls:
42
  - secretName: cert-slim
43
  rules:
44
  - host: $domain
45
    http:
46
      paths:
47
      - path: /
48
        pathType: Prefix
49
        backend:
50
          service:
51
            name: service-slim
52
            port:
53
              number: 80