124 lines
3.9 KiB
Plaintext
124 lines
3.9 KiB
Plaintext
def label = "${UUID.randomUUID().toString()}"
|
|
|
|
podTemplate(
|
|
label: label,
|
|
name: "pipeline-runner",
|
|
yaml: """---
|
|
apiVersion: v1
|
|
kind: Pod
|
|
spec:
|
|
containers:
|
|
- name: golang
|
|
image: docker.io/golang:latest
|
|
tty: true
|
|
command:
|
|
- cat
|
|
- name: sonarscanner
|
|
imagePullPolicy: Always
|
|
image: registry.test-chamber-13.lan:5000/sonarscanner:latest
|
|
tty: true
|
|
command:
|
|
- cat
|
|
- name: kaniko
|
|
imagePullPolicy: Always
|
|
image: gcr.io/kaniko-project/executor:debug
|
|
tty: true
|
|
command:
|
|
- /busybox/cat
|
|
""",
|
|
) {
|
|
node (label) {
|
|
def workspace = pwd()
|
|
def shortCommit
|
|
|
|
stage('Clone Repository') {
|
|
git url: 'ssh://git@gitlab.smoothnet.org:31822/The_Spider/certificate-monitor.git',
|
|
credentialsId: 'sonarqube-read-access',
|
|
branch: 'master'
|
|
shortCommit = sh(returnStdout: true, script: "git log -n 1 --pretty=format:'%h'").trim()
|
|
}
|
|
stage('Prepare SonarScanner') {
|
|
def sonarScannerConfig = """
|
|
sonar.projectKey=${env.JOB_BASE_NAME}
|
|
sonar.projectVersion=${shortCommit}
|
|
|
|
sonar.sources=.
|
|
sonar.exclusions=**/*_test.go,**/vendor/**,**/testdata/*
|
|
|
|
sonar.tests=.
|
|
sonar.test.inclusions=**/*_test.go
|
|
sonar.test.exclusions=**/vendor/**
|
|
sonar.go.coverage.reportPaths=cover.out
|
|
"""
|
|
writeFile file: 'sonar-project.properties', text: sonarScannerConfig
|
|
}
|
|
stage('Run Tests') {
|
|
container('golang') {
|
|
sh """
|
|
go get -u github.com/jstemmer/go-junit-report
|
|
ln -s "${workspace}" "/go/src/${env.JOB_BASE_NAME}"
|
|
cd "/go/src/${env.JOB_BASE_NAME}"
|
|
go get -d -v ./...
|
|
go install -v ./...
|
|
go test -short -coverprofile=cover.out `go list ./... | grep -v vendor/`
|
|
go test -v 2>&1 | go-junit-report > report.xml
|
|
"""
|
|
}
|
|
}
|
|
stage('SonarQube Analysis') {
|
|
container('sonarscanner') {
|
|
withSonarQubeEnv('SonarQube') {
|
|
sh "sonar-scanner --define sonar.host.url=https://sonar.cluster.test-chamber-13.lan"
|
|
}
|
|
}
|
|
}
|
|
stage('Build COntainer') {
|
|
container('kaniko') {
|
|
def dockerfile = """
|
|
FROM golang:alpine AS BUILDER
|
|
RUN apk --no-cache add git upx
|
|
WORKDIR /go/src/app
|
|
COPY . .
|
|
RUN go get -d -v ./... && \\
|
|
go install -v ./... && \\
|
|
go build -ldflags="-s -w" -o app ./ && \\
|
|
upx --brute app
|
|
|
|
FROM alpine:latest
|
|
RUN apk add --no-cache ca-certificates && \\
|
|
addgroup -S -g 1000 app && \\
|
|
adduser -S app -G app -h /app -u 1000 && \\
|
|
printf '%s\\n' \\
|
|
"-----BEGIN CERTIFICATE-----" \\
|
|
"MIICLTCCAbOgAwIBAgIDAYagMAoGCCqGSM49BAMEME0xCzAJBgNVBAYTAlVTMScw" \\
|
|
"JQYDVQQKDB5UZXN0IENoYW1iZXIgMTMgVHJ1c3QgU2VydmljZXMxFTATBgNVBAMM" \\
|
|
"DFRDMTMgUm9vdCBSMTAgFw0xOTAxMDEwMDAwMDBaGA8yMDUwMDEwMTAwMDAwMFow" \\
|
|
"TTELMAkGA1UEBhMCVVMxJzAlBgNVBAoMHlRlc3QgQ2hhbWJlciAxMyBUcnVzdCBT" \\
|
|
"ZXJ2aWNlczEVMBMGA1UEAwwMVEMxMyBSb290IFIxMHYwEAYHKoZIzj0CAQYFK4EE" \\
|
|
"ACIDYgAE8+/J1ECc0VHxTtGXFLnHJ3NGZ2SW38pp9wI58L5EQbHRLiezYuvkUbI/" \\
|
|
"XGJjLnFdpgjo7W1FFlyhx5ITlCstUX5Sn9bLZiA0+mE0n6b8VwhXwkHlnIeRo7od" \\
|
|
"Zu/OfSFjo2MwYTAdBgNVHQ4EFgQUrGqUJhyRp93wXF645VNtYatRk/AwHwYDVR0j" \\
|
|
"BBgwFoAUrGqUJhyRp93wXF645VNtYatRk/AwDwYDVR0TAQH/BAUwAwEB/zAOBgNV" \\
|
|
"HQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwQDaAAwZQIxAJdgskimDJkf/MGVRrKotmNC" \\
|
|
"xdH/UVQfQppjIR9FAiGeFDr47thclYrzIL6yCkV7nwIwYjf3MbOm/yWblzqe3Uyw" \\
|
|
"UOemMEg3PjcKNsN65W2WVon5HIZx2XVfGRPjf5ZTVWzZ" \\
|
|
"-----END CERTIFICATE-----" > /usr/local/share/ca-certificates/test-chamber-13.lan.crt && \\
|
|
update-ca-certificates
|
|
|
|
USER app
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=BUILDER /go/src/app/app /app/
|
|
|
|
ENTRYPOINT ./app
|
|
"""
|
|
writeFile file: workspace + '/Dockerfile', text: dockerfile
|
|
sh '/kaniko/executor --insecure --skip-tls-verify --context "' + workspace + '" -f "' + workspace + '/Dockerfile" --destination registry.test-chamber-13.lan:5000/certificate-monitor:latest'
|
|
}
|
|
}
|
|
stage('Submit Testing Report to Jenkins') {
|
|
junit 'report.xml'
|
|
}
|
|
}
|
|
} |