chore(openshift): Added Jenkinsfiles and Nginx files (TV-82)

nginx/nginx.template

@@ -0,0 +1,86 @@
+# For more information on configuration, see:
+#   * Official English Documentation: http://nginx.org/en/docs/
+#   * Official Russian Documentation: http://nginx.org/ru/docs/
+
+
+worker_processes    auto;
+error_log           /var/opt/rh/rh-nginx112/log/nginx/error.log;
+pid                 /var/opt/rh/rh-nginx112/run/nginx/nginx.pid;
+
+# Load dynamic modules. See /opt/rh/rh-nginx112/root/usr/share/doc/README.dynamic.
+include             /opt/rh/rh-nginx112/root/usr/share/nginx/modules/*.conf;
+
+events {
+    worker_connections  1024;
+}
+
+http {
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log      /var/opt/rh/rh-nginx112/log/nginx/access.log  main;
+
+    sendfile            on;
+    tcp_nopush          on;
+    tcp_nodelay         on;
+    keepalive_timeout   65;
+    types_hash_max_size 2048;
+
+    gzip on;
+    gzip_types application/xml application/json text/css text/javascript application/javascript;
+    gzip_vary on;
+    gzip_comp_level 6;
+    gzip_min_length 500;
+
+    include             /etc/opt/rh/rh-nginx112/nginx/mime.types;
+    default_type        application/octet-stream;
+
+    # Load modular configuration files from the /etc/nginx/conf.d directory.
+    # See http://nginx.org/en/docs/ngx_core_module.html#include
+    # for more information.
+    include             /opt/app-root/etc/nginx.d/*.conf;
+
+    server {
+        listen          8080 default_server;
+        listen          [::]:8080 default_server;
+        server_name     _;
+        root            /opt/app-root/src;
+
+        # Load configuration files for the default server block.
+        include         /opt/app-root/etc/nginx.default.d/*.conf;
+
+        location / {
+            try_files $uri $uri/ /index.html;
+            expires -1;
+        }
+
+        location ~* \.(?:jpg|jpeg|gif|png|ico|woff2)$ {
+            expires 1M;
+            add_header Cache-Control "public";
+        }
+
+        location ~* \.(?:js|json|css)$ {
+            add_header Cache-Control "no-cache, public, must-revalidate, proxy-revalidate";
+        }
+
+        underscores_in_headers on;
+        $RESOLVER
+
+        # JWT TOKEN
+        location /token/jwt/rest/idp/v0/dafa {
+          proxy_pass $JWT_URL;
+        }
+
+
+        error_page 404 /404.html;
+        location = /40x.html {
+
+        }
+
+        error_page 500 502 503 504  /50x.html;
+        location = /50x.html {
+
+        }
+    }
+}

nginx/template.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+export JWT_URL
+export RESOLVER
+
+envsubst '${JWT_URL} ${RESOLVER} ' < /usr/share/container-scripts/nginx/nginx-start/nginx.template > /etc/nginx/nginx.conf

openshift/dev/Jenkinsfile

@@ -0,0 +1,177 @@
+def cicdproject = "${CI_CD_NAMESPACE}"
+def appname = "${APP_NAME}"
+def devproject = "${DEV_NAMESPACE}"
+def i1project = "${I1_NAMESPACE}"
+def u1project = "${U1_NAMESPACE}"
+def t1project = "${T1_NAMESPACE}"
+def jenkinsslave = "nodejs12-agent"
+
+pipeline {
+
+  agent {
+      node {label "${jenkinsslave}"}
+  }
+
+  environment {
+      CURRENT_COMMIT = getShortCommitHash()
+      BUILD_TAG = ""
+  }
+
+  stages {
+
+    stage("Initialize") {
+      steps {
+        echo '### Generating build tag... ###'
+        script {
+          def packageJson = readJSON file: 'package.json'
+          BUILD_TAG = "dev_v${packageJson.version}_${env.BUILD_NUMBER}_${CURRENT_COMMIT}"
+          echo '### Build tag ###'
+          echo "${BUILD_TAG}"
+        }
+        echo '### Build tag generated! ###'
+      }
+    }
+
+    stage("Install dependencies") {
+      environment {
+        NEXUS_CREDS = "${env.NEXUS_USERNAME}:${env.NEXUS_PASSWORD}"
+      }
+      steps {
+        echo '### Installing dependencies... ###'
+        sh '''
+          ENCODED=$(echo -n "${NEXUS_CREDS}" | openssl base64)
+          CACHE_DIRECTORY=/home/jenkins/.npm/cache
+          mkdir -p ${CACHE_DIRECTORY}
+          echo "_auth=${ENCODED}" >> .npmrc
+          # set -x
+          cat .npmrc
+
+          # Pull from cache if it exists
+          (
+            # Fail if any step fail
+            set -e
+            # Remove line 3 from package-lock, which contain the package.json version. Store backup.
+            # We only care about dependencies, not the version
+            sed -i.bak -e '3d' package-lock.json
+            # Hash the package-lock.json file
+            sha1sum package-lock.json | tr -s " " | awk '{print $1}' > hashed.pkg-lock
+            # Restore package-lock.json with version number intact
+            mv package-lock.json.bak package-lock.json
+            # Try to get the file from cache
+            cp ${CACHE_DIRECTORY}/$(cat hashed.pkg-lock) node_modules.tar.gz 2> /dev/null
+            # Check if we found the cached node_modules
+            test -f node_modules.tar.gz
+            # If we found the cached node_modules, extract the files to node_modules
+            tar -zxf node_modules.tar.gz
+            # Echo to the logs stating that we are using cache
+            echo "Using cached node_modules from ${CACHE_DIRECTORY}/$(cat hashed.pkg-lock)"
+          ) || true
+
+          # If we did not find the cached node_modules, install from the lock
+            test -f node_modules.tar.gz || npm ci;
+
+          # Store cache
+          (
+            # Fail if any step fail
+            set -e
+            # Only update the cache if we found no previous cache
+            test ! -f node_modules.tar.gz
+            # Tar the cache
+            tar -zcf node_modules.tar.gz node_modules
+            # Clean old cache
+            rm -rf ${CACHE_DIRECTORY}/*
+            # Store the cache
+            cp node_modules.tar.gz ${CACHE_DIRECTORY}/$(cat hashed.pkg-lock)
+          ) || true
+        '''
+        echo '### Dependencies installed! ###'
+      }
+    }
+
+    stage("Build application") {
+      steps {
+        echo '### Building application... ###'
+
+         sh '''
+           npm run build -- --output-path=dist
+           cp -r nginx/* dist/.
+        '''
+
+        // Used when testing Openshift, so that we dont need to wait for build. Also put a # before npm ci above
+        // sh '''
+        //   mkdir dist
+        //   echo hello > dist/index.html
+        // '''
+
+        echo '### Application built! ###'
+      }
+    }
+    stage('App bake') {
+      steps {
+        echo '### Creating image... ###'
+        script {
+          openshift.withCluster() {
+            openshift.withProject(devproject) {
+              openshift.selector("bc", "${ appname }").startBuild("--from-dir=./dist", "--wait=true")
+              openshift.tag("${ appname }:latest", "${ appname }:${BUILD_TAG}")
+            }
+          }
+        }
+        echo '### Image created! ###'
+      }
+    }
+
+    stage('Deploy u1') {
+      steps {
+        echo '### Deploying to U1... ###'
+        script {
+          openshift.withCluster() {
+            openshift.withProject(u1project) {
+              openshift.raw("set image dc/${ appname } ${ appname }=docker-registry.default.svc:5000/${devproject}/${ appname }:${BUILD_TAG} --record=true --source=docker")
+              openshift.raw("annotate dc ${ appname }  version=${BUILD_TAG} --overwrite=true")
+              openshift.selector("dc", "${ appname }").rollout().status();
+            }
+          }
+        }
+        echo '### Deployed to U1! ###'
+      }
+    }
+
+    stage('Deploy i1') {
+      steps {
+        echo '### Deploying to I1... ###'
+        script {
+          openshift.withCluster() {
+            openshift.withProject(i1project) {
+              openshift.raw("set image dc/${ appname }  ${ appname }=docker-registry.default.svc:5000/${devproject}/${ appname }:${BUILD_TAG} --record=true --source=docker")
+              openshift.raw("annotate dc ${ appname }  version=${BUILD_TAG} --overwrite=true")
+              openshift.selector("dc", "${ appname }").rollout().status();
+            }
+          }
+        }
+        echo '### Deployed to I1! ###'
+      }
+    }
+
+    stage('Deploy t1') {
+      steps {
+        echo '### Deploying to T1... ###'
+        script {
+          openshift.withCluster() {
+            openshift.withProject(t1project) {
+              openshift.raw("set image dc/${ appname }  ${ appname }=docker-registry.default.svc:5000/${devproject}/${ appname }:${BUILD_TAG} --record=true --source=docker")
+              openshift.raw("annotate dc ${ appname }  version=${BUILD_TAG} --overwrite=true")
+              openshift.selector("dc", "${ appname }").rollout().status();
+            }
+          }
+        }
+        echo '### Deployed to T1! ###'
+      }
+    }
+
+  }
+}
+
+def getShortCommitHash() {
+  return sh(returnStdout: true, script: "git log -n 1 --pretty=format:'%h'").trim()
+}

openshift/prod/Jenkinsfile

@@ -0,0 +1,190 @@
+def cicdproject = "${CI_CD_NAMESPACE}"
+def appname = "${APP_NAME}"
+def devproject = "${DEV_NAMESPACE}"
+def t2project = "${T2_NAMESPACE}"
+def prodproject = "${PROD_NAMESPACE}"
+def jenkinsslave = "nodejs12-agent"
+
+pipeline {
+
+  agent {
+      node {label "${jenkinsslave}"}
+  }
+
+  environment {
+      CURRENT_COMMIT = getShortCommitHash()
+      BUILD_TAG = ""
+  }
+
+  stages {
+
+    stage("Initialize") {
+      steps {
+        echo '### Generating build tag... ###'
+        script {
+          def packageJson = readJSON file: 'package.json'
+          BUILD_TAG = "prod_v${packageJson.version}_${env.BUILD_NUMBER}_${CURRENT_COMMIT}"
+          echo '### Build tag ###'
+          echo "${BUILD_TAG}"
+        }
+        echo '### Build tag generated! ###'
+      }
+    }
+
+    stage("Install dependencies") {
+      environment {
+        NEXUS_CREDS = "${env.NEXUS_USERNAME}:${env.NEXUS_PASSWORD}"
+      }
+      steps {
+        echo '### Installing dependencies... ###'
+        sh '''
+          ENCODED=$(echo -n "${NEXUS_CREDS}" | openssl base64)
+          CACHE_DIRECTORY=/home/jenkins/.npm/cache
+          mkdir -p ${CACHE_DIRECTORY}
+          echo "_auth=${ENCODED}" >> .npmrc
+          # set -x
+          cat .npmrc
+
+          # Pull from cache if it exists
+          (
+            # Fail if any step fail
+            set -e
+            # Remove line 3 from package-lock, which contain the package.json version. Store backup.
+            # We only care about dependencies, not the version
+            sed -i.bak -e '3d' package-lock.json
+            # Hash the package-lock.json file
+            sha1sum package-lock.json | tr -s " " | awk '{print $1}' > hashed.pkg-lock
+            # Restore package-lock.json with version number intact
+            mv package-lock.json.bak package-lock.json
+            # Try to get the file from cache
+            cp ${CACHE_DIRECTORY}/$(cat hashed.pkg-lock) node_modules.tar.gz 2> /dev/null
+            # Check if we found the cached node_modules
+            test -f node_modules.tar.gz
+            # If we found the cached node_modules, extract the files to node_modules
+            tar -zxf node_modules.tar.gz
+            # Echo to the logs stating that we are using cache
+            echo "Using cached node_modules from ${CACHE_DIRECTORY}/$(cat hashed.pkg-lock)"
+          ) || true
+
+          # If we did not find the cached node_modules, install from the lock
+            test -f node_modules.tar.gz || npm ci;
+
+          # Store cache
+          (
+            # Fail if any step fail
+            set -e
+            # Only update the cache if we found no previous cache
+            test ! -f node_modules.tar.gz
+            # Tar the cache
+            tar -zcf node_modules.tar.gz node_modules
+            # Clean old cache
+            rm -rf ${CACHE_DIRECTORY}/*
+            # Store the cache
+            cp node_modules.tar.gz ${CACHE_DIRECTORY}/$(cat hashed.pkg-lock)
+          ) || true
+        '''
+        echo '### Dependencies installed! ###'
+      }
+    }
+
+    stage("Build application") {
+      steps {
+        echo '### Building application... ###'
+        sh '''
+          npm run build:prod -- --output-path=dist
+          cp -r nginx/* dist/.
+          ls -la dist
+        '''
+        echo '### Application built! ###'
+      }
+    }
+
+    stage('App bake') {
+      steps {
+        echo '### Creating image... ###'
+        script {
+          openshift.withCluster() {
+            openshift.withProject(devproject) {
+              openshift.selector("bc", "${ appname }").startBuild("--from-dir=./dist", "--wait=true")
+              openshift.tag("${ appname }:latest", "${ appname }:${BUILD_TAG}")
+            }
+          }
+        }
+
+        echo '### Image created! ###'
+      }
+    }
+
+    stage('Deploy T2') {
+      steps {
+        echo '### Deploying to T2... ###'
+        script {
+          openshift.withCluster() {
+            openshift.withProject(t2project) {
+              openshift.raw("set image dc/${ appname }  ${ appname }=docker-registry.default.svc:5000/${devproject}/${ appname }:${BUILD_TAG} --record=true --source=docker ")
+              openshift.raw("annotate dc ${ appname }  version=${BUILD_TAG} --overwrite=true")
+              openshift.selector("dc", "${ appname }").rollout().status();
+            }
+          }
+        }
+        echo '### Deployed to T2! ###'
+      }
+    }
+
+    // Stage test where application testing will go in here
+
+    stage('Push image to External registry') {
+      agent {
+        label 'skopeo-agent'
+      }
+      steps {
+        echo '### Publishing image to external registry... ###'
+        script {
+          def branchName = GIT_BRANCH.split('/')[1]
+          openshift.withCluster() {
+            openshift.withProject(cicdproject) {
+              def registry = "nexus.arbetsformedlingen.se:5555"
+              withCredentials([usernamePassword(credentialsId: "${openshift.project()}-nexus-secret", usernameVariable: "REG_USER", passwordVariable: "REG_PWD")]) {
+                sh "skopeo copy docker://docker-registry.default.svc:5000/${devproject}/${appname}:latest docker://${registry}/app-af-nexus/${appname}:${BUILD_TAG} --src-creds jenkins:\$(oc whoami -t) --dest-creds \"$REG_USER:$REG_PWD\" --src-tls-verify=false --dest-tls-verify=false --format v2s2"
+              }
+            }
+          }
+        }
+        echo '### Image published to external registry! ###'
+      }
+    }
+
+    stage('Deploy to production') {
+      steps {
+        echo '### Trying to deploy to prod... ###'
+        script {
+          openshift.withCluster() {
+              def api = "https://pocpconsole.arbetsformedlingen.se:443"
+              env.API = sh(script:"set +x; echo ${api}", returnStdout: true).replaceAll(/https?/, 'insecure')
+              def encodedToken = openshift.selector('secret/imagepromote-token').object().data.tokenbase64
+              env.TOKEN = sh(script:"set +x; echo ${encodedToken} | base64 --decode", returnStdout: true)
+          }
+
+          openshift.withCluster( env.API, env.TOKEN ) {
+            openshift.withProject(prodproject) {
+              // Wait for approval
+              timeout(time:1440, unit:'MINUTES') {
+                input message: "Go Live with ${ appname } in Production?", ok: "Confirm"
+                openshift.raw("tag nexus.arbetsformedlingen.se:5555/app-af-nexus/${ appname }:${BUILD_TAG} ${appname}:${BUILD_TAG} --insecure")
+                openshift.raw("tag ${ appname }:latest ${ appname }:${BUILD_TAG}")
+                openshift.raw("set image dc/${ appname }  ${ appname }=nexus.arbetsformedlingen.se:5555/app-af-nexus/${ appname }:${BUILD_TAG} --record=true  --source=docker")
+                openshift.selector("dc", "${ appname }").rollout().status();
+                echo '### Deployed to prod! ###'
+              }
+            }
+          }
+        }
+      }
+    }
+
+  }
+}
+
+def getShortCommitHash() {
+  return sh(returnStdout: true, script: "git log -n 1 --pretty=format:'%h'").trim()
+}