.drone.yml

kind: pipeline
name: default
type: kubernetes

platform:
  os: linux
  arch: amd64

steps:
- name: web_tests_then_build_dist
  image: quay.io/ukhomeofficedigital/nodejs-base:v6.9.1
  commands:
    ## Band aid workaround to build container after centos7 EOL 20240701 - https://serverfault.com/questions/1161816/mirrorlist-centos-org-no-longer-resolve
    - sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo
    - sed -i s/^#.*baseurl=http/baseurl=http/g /etc/yum.repos.d/*.repo
    - sed -i s/^mirrorlist=http/#mirrorlist=http/g /etc/yum.repos.d/*.repo
    - yum install -y git bzip2 bzip2-libs fontconfig
    - git config --global url."https://".insteadOf git://
    - npm install -g yarn@0.27.5
    - cd platform-hub-web
    - rm -rf node_modules
    - yarn
    - yarn run test
    - yarn run build
  when:
    event: [push, tag]

  # Expects the optimized dist code to have been built
- name: web_build_image
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - cd platform-hub-web
    # wait for docker service to be up before running docker build.
    - n=0; while [ "$n" -lt 60 ] && [ ! -e /var/run/docker.sock ]; do n=$(( n + 1 )); sleep 1; done
    - docker build -t platform-hub-web:$${DRONE_COMMIT_SHA} .
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: [push, tag]

- name: web_test_image
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - docker run -t --rm --name platform-hub-web-test platform-hub-web:${DRONE_COMMIT_SHA} sh -c "cd /app; ls -lah; test -e index.html"
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: [push, tag]

- name: scan-image-web
  pull: Always
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/trivy/client:latest
  resources:
    limits:
      cpu: 1000
      memory: 1024Mi
  environment:
    IMAGE_NAME: platform-hub-web:${DRONE_COMMIT_SHA}
    IGNORE_UNFIXED: "true"
    FAIL_ON_DETECTION: false
    FAIL_ON_EOL_OS_DETECTION: false
  when:
    event:
    - pull_request
    - push

- name: web_latest_image_to_quay
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - docker login -u="ukhomeofficedigital+platform_hub" -p=$${DOCKER_PASSWORD} quay.io
    - docker tag platform-hub-web:$${DRONE_COMMIT_SHA} quay.io/ukhomeofficedigital/platform-hub-web:$${DRONE_COMMIT_SHA}
    - docker tag platform-hub-web:$${DRONE_COMMIT_SHA} quay.io/ukhomeofficedigital/platform-hub-web:latest
    - docker push quay.io/ukhomeofficedigital/platform-hub-web:$${DRONE_COMMIT_SHA}
    - docker push quay.io/ukhomeofficedigital/platform-hub-web:latest
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: push
    branch: master

- name: web_tag_image_to_quay
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - docker login -u="ukhomeofficedigital+platform_hub" -p=$${DOCKER_PASSWORD} quay.io
    - docker tag platform-hub-web:$${DRONE_COMMIT_SHA} quay.io/ukhomeofficedigital/platform-hub-web:$${DRONE_TAG}
    - docker push quay.io/ukhomeofficedigital/platform-hub-web:$${DRONE_TAG}
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: tag

- name: api_tests
  image: ruby:2.3.8-alpine
  environment:
    PHUB_DB_HOST: postgres
  commands:
    - apk -U add ca-certificates libressl postgresql-client postgresql-dev build-base make
    - update-ca-certificates
    - "echo 'gem: --no-document' > /etc/gemrc && gem install bundler -v 2.1.4"
    - cd platform-hub-api
    - bundle install --jobs 20 --retry 5 --deployment
    - ./test.sh
  when:
    event: [push, tag]

- name: api_build_image
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - cd platform-hub-api
    # wait for docker service to be up before running docker build.
    - n=0; while [ "$n" -lt 60 ] && [ ! -e /var/run/docker.sock ]; do n=$(( n + 1 )); sleep 1; done
    - docker build -t platform-hub-api:$${DRONE_COMMIT_SHA} .
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: [push, tag]

- name: api_test_image
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  environment:
    POSTGRES_USER: phub
    POSTGRES_PASSWORD: phub_password
  commands:
    - docker run -d --name phub-api-postgres-${DRONE_BUILD_NUMBER} -e POSTGRES_USER -e POSTGRES_PASSWORD postgres:12.5
    - sleep 5
    - docker run --name phub-api-${DRONE_BUILD_NUMBER} -t --rm --env-file=platform-hub-api/.env.test -e PHUB_DB_HOST=phub-api-postgres-${DRONE_BUILD_NUMBER} --link phub-api-postgres-${DRONE_BUILD_NUMBER} platform-hub-api:${DRONE_COMMIT_SHA} /bin/bash -c "cd /app; bin/setup; bin/rails server -d; sleep 5; curl -s -f http://127.0.0.1:3000/healthz"
  when:
    event: [push, tag]
  volumes:
    - name: dockersock
      path: /var/run

- name: cleanup_postgres
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - docker rm -f phub-api-postgres-${DRONE_BUILD_NUMBER}
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: [push, tag]
    status: [success, failure]

- name: scan-image-api
  pull: Always
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/trivy/client:latest
  resources:
    limits:
      cpu: 1000
      memory: 1024Mi
  environment:
    IMAGE_NAME: platform-hub-api:${DRONE_COMMIT_SHA}
    IGNORE_UNFIXED: "true"
    FAIL_ON_DETECTION: false
    FAIL_ON_EOL_OS_DETECTION: false
  when:
    event:
    - pull_request
    - push

- name: api_latest_image_to_quay
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - docker login -u="ukhomeofficedigital+platform_hub" -p=$${DOCKER_PASSWORD} quay.io
    - docker tag platform-hub-api:$${DRONE_COMMIT_SHA} quay.io/ukhomeofficedigital/platform-hub-api:$${DRONE_COMMIT_SHA}
    - docker tag platform-hub-api:$${DRONE_COMMIT_SHA} quay.io/ukhomeofficedigital/platform-hub-api:latest
    - docker push quay.io/ukhomeofficedigital/platform-hub-api:$${DRONE_COMMIT_SHA}
    - docker push quay.io/ukhomeofficedigital/platform-hub-api:latest
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: push
    branch: master

- name: api_tag_image_to_quay
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind
  commands:
    - docker login -u="ukhomeofficedigital+platform_hub" -p=$${DOCKER_PASSWORD} quay.io
    - docker tag platform-hub-api:$${DRONE_COMMIT_SHA} quay.io/ukhomeofficedigital/platform-hub-api:$${DRONE_TAG}
    - docker push quay.io/ukhomeofficedigital/platform-hub-api:$${DRONE_TAG}
  environment:
    DOCKER_PASSWORD:
      from_secret: docker_password
  volumes:
    - name: dockersock
      path: /var/run
  when:
    event: tag

services:
- name: docker
  image: 340268328991.dkr.ecr.eu-west-2.amazonaws.com/acp/dind

- name: postgres
  image: postgres:12.5
  ports:
  - 5432
  environment:
    POSTGRES_USER: phub
    POSTGRES_PASSWORD: phub_password
volumes:
 - name: dockersock
   temp: {}