Compare commits

...

14 Commits

Author SHA1 Message Date
x.yumoto.k
542032e8e9 image名を修正 2023-09-27 10:13:53 +09:00
x.yumoto.k
da38f23669 pathが間違っていたものを修正 2023-09-27 10:10:53 +09:00
x.yumoto.k
35464ccfe0 AzureWebAppContainerを使う形に修正 2023-09-27 09:52:03 +09:00
x.yumoto.k
d027212c82 不要なKeyVaultへの消し忘れを削除 2023-09-25 16:35:40 +09:00
x.yumoto.k
1b2c980902 外部からデプロイするよう修正 2023-09-25 16:22:24 +09:00
x.yumoto.k
fa4e506de4 Blobアップロード時に上書きされるよう指定を追加 2023-09-25 16:02:57 +09:00
x.yumoto.k
af7d2eac37 Agent名が古いものを修正 2023-09-25 15:44:53 +09:00
x.yumoto.k
bafc4a8bb9 mainブランチ縛りをコメントアウト 2023-09-25 12:06:44 +09:00
x.yumoto.k
b543c6eb0e Repository名を一時的にtestに変更 2023-09-25 12:02:54 +09:00
x.yumoto.k
d511947baa ServiceConenctionを具体名に変更 2023-09-25 11:57:23 +09:00
x.yumoto.k
b620c78fdf 本番環境デプロイのテスト用Pipeline用YAMLを追加 2023-09-25 11:45:17 +09:00
x.yumoto.k
11767f61e0 依存関係を一本道に修正 2023-09-25 11:38:42 +09:00
x.yumoto.k
bc92440c17 service connection名を指定するよう変更 2023-09-25 11:08:11 +09:00
x.yumoto.k
a3cfb20449 一時的にmainブランチに限定している処理をコメントアウト 2023-09-22 16:05:40 +09:00
2 changed files with 259 additions and 34 deletions

View File

@ -16,53 +16,47 @@ jobs:
clean: true
fetchDepth: 1
persistCredentials: true
- script: |
git fetch origin main:main
if git merge-base --is-ancestor $(Build.SourceVersion) main; then
echo "This commit is in the main branch."
else
echo "This commit is not in the main branch."
exit 1
fi
displayName: 'タグが付けられたCommitがmainブランチに存在するか確認'
# - script: |
# git fetch origin main:main
# if git merge-base --is-ancestor $(Build.SourceVersion) main; then
# echo "This commit is in the main branch."
# else
# echo "This commit is not in the main branch."
# exit 1
# fi
# displayName: 'タグが付けられたCommitがmainブランチに存在するか確認'
- job: backend_deploy
dependsOn: initialize
condition: succeeded('initialize')
displayName: Backend Deploy
pool:
name: odms-deploy-pipeline
vmImage: ubuntu-latest
steps:
- checkout: self
clean: true
fetchDepth: 1
- task: AzureRmWebAppDeployment@4
- task: AzureWebAppContainer@1
inputs:
ConnectionType: 'AzureRM'
azureSubscription: $(AZURE_SERVICE_CONNECTION)
appType: 'webAppContainer'
WebAppName: 'app-odms-dictation-prod'
ResourceGroupName: 'prod-application-rg'
DockerNamespace: 'crodmsregistrymaintenance.azurecr.io'
DockerRepository: '$(Build.Repository.Name)/staging/dictation'
DockerImageTag: '$(Build.SourceVersion)'
azureSubscription: 'omds-service-connection-prod'
appName: 'app-odms-dictation-prod'
resourceGroupName: 'odms-prod-rg'
containers: 'crodmsregistrymaintenance.azurecr.io/odmscloud/test/dictation:$(Build.SourceVersion)'
- job: frontend_deploy
dependsOn: backend_deploy
condition: succeeded('backend_deploy')
displayName: Deploy Frontend Files
variables:
storageAccountName: saomdspipeline
containerName: staging
pool:
name: odms-deploy-pipeline
vmImage: ubuntu-latest
steps:
- checkout: self
clean: true
fetchDepth: 1
- task: AzureKeyVault@2
displayName: 'Azure Key Vault: kv-odms-secret-prod'
inputs:
ConnectedServiceName: $(AZURE_SERVICE_CONNECTION)
KeyVaultName: kv-odms-secret-prod
SecretsFilter: '*'
- task: AzureCLI@2
inputs:
azureSubscription: $(AZURE_SERVICE_CONNECTION)
azureSubscription: 'omds-service-connection-prod'
scriptType: 'bash'
scriptLocation: 'inlineScript'
inlineScript: |
@ -89,14 +83,11 @@ jobs:
verbose: false
azure_static_web_apps_api_token: $(STATIC_DICTATION_DEPLOYMENT_TOKEN)
- job: migration
condition: succeeded('initialize')
dependsOn: frontend_deploy
condition: succeeded('frontend_deploy')
displayName: DB migration
dependsOn:
- initialize
- backend_deploy
- frontend_deploy
pool:
name: db-migrate-pipelines
name: odms-deploy-pipeline
steps:
- checkout: self
clean: true
@ -104,7 +95,7 @@ jobs:
- task: AzureKeyVault@2
displayName: 'Azure Key Vault: kv-odms-secret-prod'
inputs:
ConnectedServiceName: $(AZURE_SERVICE_CONNECTION)
ConnectedServiceName: 'omds-service-connection-prod'
KeyVaultName: kv-odms-secret-prod
- task: CmdLine@2
displayName: migration

View File

@ -0,0 +1,234 @@
# Pipeline側でKeyVaultやDocker、AppService等に対する操作権限を持ったServiceConenctionを作成し、
# 環境変数 AZURE_SERVICE_CONNECTION の値としてServiceConenction名を設定しておくこと
# また、環境変数 STATIC_DICTATION_DEPLOYMENT_TOKEN の値として静的WebAppsのデプロイトークンを設定しておくこと
trigger:
# branches:
# include:
# - main
tags:
include:
- stage-*
jobs:
- job: initialize
displayName: Initialize
pool:
vmImage: ubuntu-latest
steps:
- checkout: self
clean: true
fetchDepth: 1
persistCredentials: true
# - script: |
# git fetch origin main:main
# if git merge-base --is-ancestor $(Build.SourceVersion) main; then
# echo "This commit is in the main branch."
# else
# echo "This commit is not in the main branch."
# exit 1
# fi
# displayName: 'タグが付けられたCommitがmainブランチに存在するか確認'
- job: backend_build
dependsOn: initialize
condition: succeeded('initialize')
displayName: Build And Push Backend Image
pool:
name: odms-deploy-pipeline
steps:
- checkout: self
clean: true
fetchDepth: 1
- task: Npm@1
displayName: npm ci
inputs:
command: ci
workingDir: dictation_server
verbose: false
- task: AzureKeyVault@2
displayName: 'Azure Key Vault: kv-odms-secret-stg'
inputs:
ConnectedServiceName: 'omds-service-connection-stg'
KeyVaultName: kv-odms-secret-stg
SecretsFilter: '*'
- task: Bash@3
displayName: Bash Script (Test)
inputs:
targetType: inline
script: |
cd dictation_server
npm run test
env:
JWT_PUBLIC_KEY: $(token-public-key)
SENDGRID_API_KEY: $(sendgrid-api-key)
NOTIFICATION_HUB_NAME: $(notification-hub-name)
NOTIFICATION_HUB_CONNECT_STRING: $(notification-hub-connect-string)
STORAGE_ACCOUNT_NAME_US: $(storage-account-name-us)
STORAGE_ACCOUNT_NAME_AU: $(storage-account-name-au)
STORAGE_ACCOUNT_NAME_EU: $(storage-account-name-eu)
STORAGE_ACCOUNT_KEY_US: $(storage-account-key-us)
STORAGE_ACCOUNT_KEY_AU: $(storage-account-key-au)
STORAGE_ACCOUNT_KEY_EU: $(storage-account-key-eu)
STORAGE_ACCOUNT_ENDPOINT_US: $(storage-account-endpoint-us)
STORAGE_ACCOUNT_ENDPOINT_AU: $(storage-account-endpoint-au)
STORAGE_ACCOUNT_ENDPOINT_EU: $(storage-account-endpoint-eu)
ADB2C_TENANT_ID: $(adb2c-tenant-id)
ADB2C_CLIENT_ID: $(adb2c-client-id)
ADB2C_CLIENT_SECRET: $(adb2c-client-secret)
- task: Docker@0
displayName: build
inputs:
azureSubscriptionEndpoint: 'omds-service-connection-stg'
azureContainerRegistry: '{"loginServer":"crodmsregistrymaintenance.azurecr.io", "id" : "/subscriptions/108fb131-cdca-4729-a2be-e5bd8c0b3ba7/resourceGroups/maintenance-rg/providers/Microsoft.ContainerRegistry/registries/crOdmsRegistryMaintenance"}'
dockerFile: DockerfileServerDictation.dockerfile
imageName: odmscloud/test/dictation:$(Build.SourceVersion)
- task: Docker@0
displayName: push
inputs:
azureSubscriptionEndpoint: 'omds-service-connection-stg'
azureContainerRegistry: '{"loginServer":"crodmsregistrymaintenance.azurecr.io", "id" : "/subscriptions/108fb131-cdca-4729-a2be-e5bd8c0b3ba7/resourceGroups/maintenance-rg/providers/Microsoft.ContainerRegistry/registries/crOdmsRegistryMaintenance"}'
action: Push an image
imageName: odmscloud/test/dictation:$(Build.SourceVersion)
- job: backend_deploy
dependsOn: backend_build
condition: succeeded('backend_build')
displayName: Backend Deploy
pool:
name: odms-deploy-pipeline
steps:
- checkout: self
clean: true
fetchDepth: 1
# - task: AzureRmWebAppDeployment@4
# inputs:
# ConnectionType: 'AzureRM'
# azureSubscription: 'omds-service-connection-stg'
# appType: 'webAppContainer'
# WebAppName: 'app-odms-dictation-stg'
# ResourceGroupName: 'stg-application-rg'
# DockerNamespace: 'crodmsregistrymaintenance.azurecr.io'
# DockerRepository: 'odmscloud/test/dictation'
# DockerImageTag: '$(Build.SourceVersion)'
- job: frontend_build
dependsOn: initialize
condition: succeeded('initialize')
displayName: Build Frontend Files
variables:
storageAccountName: saomdspipeline
containerName: staging
pool:
name: odms-deploy-pipeline
steps:
- checkout: self
clean: true
fetchDepth: 1
- task: Npm@1
displayName: npm ci
inputs:
command: ci
workingDir: dictation_client
verbose: false
- task: Bash@3
displayName: Bash Script
inputs:
targetType: inline
script: cd dictation_client && npm run build
- task: ArchiveFiles@2
inputs:
rootFolderOrFile: dictation_client/build
includeRootFolder: false
archiveType: 'zip'
archiveFile: '$(Build.ArtifactStagingDirectory)/$(Build.SourceVersion).zip'
replaceExistingArchive: true
- task: AzureCLI@2
inputs:
azureSubscription: 'omds-service-connection-stg'
scriptType: 'bash'
scriptLocation: 'inlineScript'
inlineScript: |
az storage blob upload \
--auth-mode login \
--account-name $(storageAccountName) \
--container-name $(containerName) \
--name $(Build.SourceVersion).zip \
--type block \
--overwrite \
--file $(Build.ArtifactStagingDirectory)/$(Build.SourceVersion).zip
- job: frontend_deploy
dependsOn: frontend_build
condition: succeeded('frontend_build')
displayName: Deploy Frontend Files
variables:
storageAccountName: saomdspipeline
containerName: staging
pool:
name: odms-deploy-pipeline
steps:
- checkout: self
clean: true
fetchDepth: 1
# - task: AzureKeyVault@2
# displayName: 'Azure Key Vault: kv-odms-secret-stg'
# inputs:
# ConnectedServiceName: 'omds-service-connection-stg'
# KeyVaultName: kv-odms-secret-stg
# SecretsFilter: '*'
# - task: AzureCLI@2
# inputs:
# azureSubscription: 'omds-service-connection-stg'
# scriptType: 'bash'
# scriptLocation: 'inlineScript'
# inlineScript: |
# az storage blob download \
# --auth-mode login \
# --account-name $(storageAccountName) \
# --container-name $(containerName) \
# --name $(Build.SourceVersion).zip \
# --file $(Build.SourcesDirectory)/$(Build.SourceVersion).zip
# - task: Bash@3
# displayName: Bash Script
# inputs:
# targetType: inline
# script: unzip $(Build.SourcesDirectory)/$(Build.SourceVersion).zip -d $(Build.SourcesDirectory)/$(Build.SourceVersion)
# - task: AzureStaticWebApp@0
# displayName: 'Static Web App: '
# inputs:
# workingDirectory: '$(Build.SourcesDirectory)'
# app_location: '/$(Build.SourceVersion)'
# config_file_location: /dictation_client
# skip_app_build: true
# skip_api_build: true
# is_static_export: false
# verbose: false
# azure_static_web_apps_api_token: $(STATIC_DICTATION_DEPLOYMENT_TOKEN)
- job: migration
condition: succeeded('initialize')
displayName: DB migration
dependsOn:
- initialize
- backend_deploy
- frontend_deploy
pool:
name: odms-deploy-pipeline
steps:
- checkout: self
clean: true
fetchDepth: 1
# - task: AzureKeyVault@2
# displayName: 'Azure Key Vault: kv-odms-secret-stg'
# inputs:
# ConnectedServiceName: 'omds-service-connection-stg'
# KeyVaultName: kv-odms-secret-stg
# - task: CmdLine@2
# displayName: migration
# inputs:
# script: >2
# # DB接続情報書き換え
# sed -i -e "s/DB_NAME/$(db-name)/g" ./dictation_server/db/dbconfig.yml
# sed -i -e "s/DB_PASS/$(db-pass)/g" ./dictation_server/db/dbconfig.yml
# sed -i -e "s/DB_USERNAME/$(db-user)/g" ./dictation_server/db/dbconfig.yml
# sed -i -e "s/DB_PORT/$(db-port)/g" ./dictation_server/db/dbconfig.yml
# sed -i -e "s/DB_HOST/$(db-host)/g" ./dictation_server/db/dbconfig.yml
# sql-migrate --version
# cat ./dictation_server/db/dbconfig.yml
# # migration実行
# sql-migrate up -config=./dictation_server/db/dbconfig.yml -env=ci