Implementing a CI Pipeline¶
After having read the previous chapters (where we already described how to build two CI pipelines in Gitlab CI), you should be quite familiar with the way Gitlab CI works. This chapter will describe how we have built a CI pipeline using a builder image for the test and compilation step and a runtime image for the runtime build (the basic intuition for this has been explained in the last chapter). The deploy step of the CI pipeline will push the built runtime image to the internal APPUiO registry, update the deployment configurations and finally start a new deployment for the service.
Testing our Elixir application in Gitlab CI involves the same basic steps that we have already seen when testing it with docker-compose (starting up a database and running tests against it). Gitlab CI (with docker executors) has a nice feature using which we can spin up one or several arbitrary docker containers and attach them to the main runner. These services can be specified on a job level which makes the whole process very flexible.
Gitlab CI calls those temporary dependencies services. To configure our test step such that it uses a PostgreSQL service, we can define a job as follows:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
stages: - build variables: MIX_DEPS: deps .builder: &builder stage: build image: appuio/shop-example-users-builder:latest cache: key: $CI_PROJECT_ID paths: - $MIX_DEPS test: <<: *builder services: # spin up a temporary database for testing - postgres:9.5 script: # install necessary application packages - mix deps.get # compile the application - mix compile # run tests - mix test --trace test/integration/* variables: POSTGRES_USER: users POSTGRES_PASSWORD: secret DB_HOSTNAME: postgres DB_USERNAME: users DB_PASSWORD: secret DB_DATABASE: users MIX_ENV: test
The PostgreSQL database we configured as a service on line 18 is made available to the runner on the hostname
postgres. Gitlab CI injects all the variables defined for the job into the service container, which means that we can configure the postgres service by specifying
POSTGRES_PASSWORD as variables (as we usually would for a postgres container).
mix test, the application will then be tested against the database that we specified using the
DB_* environment variables.
Compiling the application¶
Besides running our tests using the users-builder, we will also need to compile our Elixir sources and build a deployable release. As we have seen in the last chapter, we can do this using the
mix release command.
It is recommended to build pipelines that fail fast. This means that they should break as early as possible such that one doesn’t have to wait until the last step to find out that the application didn’t even compile. To make our pipeline fail as fast as possible, we will run the compile step in parallel with the test step, only building the docker container once both test and compile have finished successfully.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
stages: - build variables: ... .builder: ... test: ... compile: <<: *builder script: # install necessary application packages - mix deps.get # build the application sources - MIX_ENV=prod mix release artifacts: expire_in: 5min paths: - _build only: - master - tags
As we can see, this job is simpler than the test job in that it doesn’t depend on any external services. To ensure that the release built by
mix release is injected into the following docker build job, we need to add an artifacts declaration (as on lines 20-23). Additionally, while we want every commit on every branch to be tested, the compile step should only be run when one commits to the master branch or tags a new release (as on lines 24-26).
Building a container¶
After testing and compilation have successfully finished, Gitlab CI should build a docker container and push it to the APPUiO registry. This works exactly the same as in the other services we have already built with Gitlab CI. The configuration using config replacement as well as multiple deployment environments would thus look as follows:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63
stages: - build - deploy-staging - deploy-preprod - deploy-prod variables: CLUSTER_IP_STAGING: 172.30.145.111 MIX_DEPS: deps OC_REGISTRY_URL: registry.appuio.ch OC_REGISTRY_IMAGE: $OC_REGISTRY_URL/$KUBE_NAMESPACE/users OC_VERSION: 3.9.0 .builder: ... .oc: &oc image: appuio/gitlab-runner-oc:$OC_VERSION script: # login to the service account to get access to the internal registry - oc login $KUBE_URL --token=$KUBE_TOKEN - docker login -u serviceaccount -p `oc whoami -t` $OC_REGISTRY_URL # build the docker image # use the current latest image as a caching source - docker pull $OC_REGISTRY_IMAGE:latest - docker build --cache-from $OC_REGISTRY_IMAGE:latest -t $OC_REGISTRY_IMAGE:$DEPLOY_TAG . # update the configuration in OpenShift - sed -i 's;users-staging;users-'"$DEPLOY_ENV"';g' docker/openshift/* - sed -i 's;users:latest;users:'"$DEPLOY_TAG"';g' docker/openshift/* - sed -i 's;'$CLUSTER_IP_STAGING';'$CLUSTER_IP';g' docker/openshift/* - oc replace -f docker/openshift -R # push the image to the internal registry - docker push $OC_REGISTRY_IMAGE:$DEPLOY_TAG # trigger a deployment - oc rollout latest dc/users-$DEPLOY_ENV test: ... compile: ... build-staging: <<: *oc environment: users-staging stage: deploy-staging services: - docker:dind only: - master except: - tags tags: - dockerbuild variables: CLUSTER_IP: $CLUSTER_IP_STAGING DEPLOY_ENV: staging DEPLOY_TAG: latest build-preprod: <<: *oc ... build-prod: <<: *oc ...
The complete version of this excerpt can be found in the source repository. As we now have a working CI configuration, the only thing left is setting up APPUiO accordingly.