Skip to content

Commit ee4a0ed

Browse files
committed
Add Jenkins config
See gh-719.
1 parent 48c1ec7 commit ee4a0ed

File tree

8 files changed

+273
-0
lines changed

8 files changed

+273
-0
lines changed

Jenkinsfile

Lines changed: 128 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,128 @@
1+
def p = [:]
2+
node {
3+
checkout scm
4+
p = readProperties interpolate: true, file: 'ci/pipeline.properties'
5+
}
6+
7+
pipeline {
8+
agent none
9+
10+
triggers {
11+
pollSCM 'H/10 * * * *'
12+
}
13+
14+
options {
15+
disableConcurrentBuilds()
16+
buildDiscarder(logRotator(numToKeepStr: '14'))
17+
}
18+
19+
stages {
20+
stage("Docker images") {
21+
parallel {
22+
stage('Publish JDK 8 + Vault Docker image') {
23+
when {
24+
anyOf {
25+
changeset "ci/openjdk8-vault/Dockerfile"
26+
changeset "src/test/bash/install_vault.sh"
27+
changeset "ci/pipeline.properties"
28+
}
29+
}
30+
agent { label 'data' }
31+
options { timeout(time: 20, unit: 'MINUTES') }
32+
33+
steps {
34+
script {
35+
def image = docker.build("${p['docker.build.image.name']}", "--build-arg BASE=${p['docker.java.main.image']} --build-arg VAULT=${p['docker.vault.version']} -f ci/openjdk8-vault/Dockerfile .")
36+
docker.withRegistry(p['docker.registry'], p['docker.credentials']) {
37+
image.push()
38+
}
39+
}
40+
}
41+
}
42+
}
43+
}
44+
45+
stage("test: baseline (Java 8)") {
46+
when {
47+
beforeAgent(true)
48+
anyOf {
49+
branch(pattern: "main|(\\d\\.\\d\\.x)", comparator: "REGEXP")
50+
not { triggeredBy 'UpstreamCause' }
51+
}
52+
}
53+
agent {
54+
label 'data'
55+
}
56+
options { timeout(time: 30, unit: 'MINUTES') }
57+
environment {
58+
ARTIFACTORY = credentials("${p['artifactory.credentials']}")
59+
}
60+
steps {
61+
script {
62+
docker.image("${p['docker.image']}").inside(p['docker.java.inside.basic']) {
63+
sh 'src/test/bash/create_certificates.sh'
64+
sh '/opt/vault/vault server -config=$(pwd)/src/test/bash/vault.conf &'
65+
sh 'MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw -s settings.xml clean dependency:list verify -Dsort -U -B'
66+
}
67+
}
68+
}
69+
}
70+
71+
stage('Deploy') {
72+
when {
73+
beforeAgent(true)
74+
anyOf {
75+
branch(pattern: "main|(\\d\\.\\d\\.x)|v(\\d\\.\\d\\.d)|", comparator: "REGEXP")
76+
not { triggeredBy 'UpstreamCause' }
77+
}
78+
}
79+
agent {
80+
docker {
81+
image "${p['docker.image']}"
82+
args "${p['docker.java.inside.basic']}"
83+
}
84+
}
85+
options { timeout(time: 20, unit: 'MINUTES') }
86+
87+
environment {
88+
ARTIFACTORY = credentials("${p['artifactory.credentials']}")
89+
SONATYPE = credentials('oss-login')
90+
KEYRING = credentials('spring-signing-secring.gpg')
91+
PASSPHRASE = credentials('spring-gpg-passphrase')
92+
}
93+
94+
steps {
95+
script {
96+
PROJECT_VERSION = sh(
97+
script: "ci/version.sh",
98+
returnStdout: true
99+
).trim()
100+
101+
RELEASE_TYPE = 'snapshot'
102+
103+
if (PROJECT_VERSION.matches(/.*-RC[0-9]+$/) || PROJECT_VERSION.matches(/.*-M[0-9]+$/)) {
104+
RELEASE_TYPE = "milestone"
105+
} else if (PROJECT_VERSION.endsWith('SNAPSHOT')) {
106+
RELEASE_TYPE = 'snapshot'
107+
} else if (PROJECT_VERSION.matches(/.*\.[0-9]+$/)) {
108+
RELEASE_TYPE = 'release'
109+
}
110+
111+
sh "ci/deploy-${RELEASE_TYPE}.sh"
112+
}
113+
}
114+
}
115+
}
116+
117+
post {
118+
changed {
119+
script {
120+
emailext(
121+
subject: "[${currentBuild.fullDisplayName}] ${currentBuild.currentResult}",
122+
mimeType: 'text/html',
123+
recipientProviders: [[$class: 'CulpritsRecipientProvider'], [$class: 'RequesterRecipientProvider']],
124+
body: "<a href=\"${env.BUILD_URL}\">${currentBuild.fullDisplayName} is reported as ${currentBuild.currentResult}</a>")
125+
}
126+
}
127+
}
128+
}

ci/deploy-milestone.sh

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
#!/bin/bash
2+
3+
set -euo pipefail
4+
5+
MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw -s settings.xml -Pci,milestone,artifactory,release \
6+
-Dartifactory.server=https://repo.spring.io \
7+
-Dartifactory.username=${ARTIFACTORY_USR} \
8+
-Dartifactory.password=${ARTIFACTORY_PSW} \
9+
-Dartifactory.staging-repository=libs-milestone-local \
10+
-Dartifactory.build-name=spring-vault \
11+
-Dartifactory.build-number=${BUILD_NUMBER} \
12+
clean deploy -U -B
13+
14+
MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw -s settings.xml -Pdistribute \
15+
-Dartifactory.server=https://repo.spring.io \
16+
-Dartifactory.username=${ARTIFACTORY_USR} \
17+
-Dartifactory.password=${ARTIFACTORY_PSW} \
18+
-Dartifactory.staging-repository=temp-private-local \
19+
clean deploy -U -B

ci/deploy-release.sh

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
#!/bin/bash
2+
3+
set -euo pipefail
4+
5+
GNUPGHOME=/tmp/gpghome
6+
export GNUPGHOME
7+
8+
mkdir $GNUPGHOME
9+
cp $KEYRING $GNUPGHOME
10+
11+
MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw -s settings.xml -Pci,central,release \
12+
-Dgpg.passphrase=${PASSPHRASE} \
13+
-Dgpg.secretKeyring=${GNUPGHOME}/secring.gpg \
14+
-DstagingDescription="Releasing Spring Vault" \
15+
clean deploy -U -B
16+
17+
MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw -s settings.xml -Pdistribute \
18+
-Dartifactory.server=https://repo.spring.io \
19+
-Dartifactory.username=${ARTIFACTORY_USR} \
20+
-Dartifactory.password=${ARTIFACTORY_PSW} \
21+
-Dartifactory.staging-repository=temp-private-local \
22+
clean deploy -U -B

ci/deploy-snapshot.sh

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
#!/bin/bash
2+
3+
set -euo pipefail
4+
MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw -s settings.xml -Pci,snapshot,artifactory \
5+
-Dartifactory.server=https://repo.spring.io \
6+
-Dartifactory.username=${ARTIFACTORY_USR} \
7+
-Dartifactory.password=${ARTIFACTORY_PSW} \
8+
-Dartifactory.staging-repository=libs-snapshot-local \
9+
-Dartifactory.build-name=spring-vault \
10+
-Dartifactory.build-number=${BUILD_NUMBER} \
11+
-Dmaven.test.skip=true \
12+
clean deploy -U -B

ci/openjdk8-vault/Dockerfile

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
ARG BASE
2+
FROM ${BASE}
3+
# Any ARG statements before FROM are cleared.
4+
5+
ENV TZ=Etc/UTC
6+
ENV DEBIAN_FRONTEND=noninteractive
7+
8+
# Copy Vault's install file into the container
9+
10+
COPY ./src/test/bash/install_vault.sh /opt
11+
12+
ARG VAULT
13+
14+
RUN set -eux && \
15+
sed -i -e 's/archive.ubuntu.com/mirror.one.com/g' /etc/apt/sources.list && \
16+
sed -i -e 's/security.ubuntu.com/mirror.one.com/g' /etc/apt/sources.list && \
17+
sed -i -e 's/http/https/g' /etc/apt/sources.list && \
18+
apt-get update && apt-get install -y apt-transport-https apt-utils gnupg2 wget unzip && \
19+
echo ${TZ} > /etc/timezone && \
20+
rm -rf /var/lib/apt/lists/*
21+
22+
RUN set -eux && \
23+
cd /opt && \
24+
/opt/install_vault.sh -v ${VAULT}

ci/pipeline.properties

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Java versions
2+
java.main.tag=8u362-b09-jdk
3+
4+
# Docker container images - standard
5+
docker.java.main.image=eclipse-temurin:${java.main.tag}
6+
7+
# Main docker image name using during the CI build
8+
docker.build.image.name=springci/spring-vault-openjdk8-vault:${java.main.tag}-${docker.vault.version}
9+
docker.image=harbor-repo.vmware.com/dockerhub-proxy-cache/${docker.build.image.name}
10+
11+
# Supported versions of Vault
12+
docker.vault.version=1.6.1
13+
14+
# Docker environment settings
15+
docker.java.inside.basic=-v $HOME:/tmp/jenkins-home
16+
docker.java.inside.docker=-u root -v /var/run/docker.sock:/var/run/docker.sock -v /usr/bin/docker:/usr/bin/docker -v $HOME:/tmp/jenkins-home
17+
18+
# Credentials
19+
docker.registry=
20+
docker.credentials=hub.docker.com-springbuildmaster
21+
artifactory.credentials=02bd1690-b54f-4c9f-819d-a77cb7a9822c

ci/version.sh

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
#!/bin/bash
2+
3+
set -euo pipefail
4+
5+
RAW_VERSION=`MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home" ./mvnw \
6+
org.apache.maven.plugins:maven-help-plugin:3.2.0:evaluate \
7+
-Dexpression=project.version -q -DforceStdout`
8+
9+
# Split things up
10+
VERSION_PARTS=($RAW_VERSION)
11+
12+
# Grab the last part, which is the actual version number.
13+
echo ${VERSION_PARTS[${#VERSION_PARTS[@]}-1]}

settings.xml

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
2+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3+
xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
4+
https://maven.apache.org/xsd/settings-1.0.0.xsd">
5+
6+
<servers>
7+
<server>
8+
<id>spring-plugins-release</id>
9+
<username>${env.ARTIFACTORY_USR}</username>
10+
<password>${env.ARTIFACTORY_PSW}</password>
11+
</server>
12+
<server>
13+
<id>spring-libs-snapshot</id>
14+
<username>${env.ARTIFACTORY_USR}</username>
15+
<password>${env.ARTIFACTORY_PSW}</password>
16+
</server>
17+
<server>
18+
<id>spring-libs-milestone</id>
19+
<username>${env.ARTIFACTORY_USR}</username>
20+
<password>${env.ARTIFACTORY_PSW}</password>
21+
</server>
22+
<server>
23+
<id>spring-libs-release</id>
24+
<username>${env.ARTIFACTORY_USR}</username>
25+
<password>${env.ARTIFACTORY_PSW}</password>
26+
</server>
27+
<server>
28+
<id>sonatype-nexus-staging</id>
29+
<username>${env.SONATYPE_USR}</username>
30+
<password>${env.SONATYPE_PSW}</password>
31+
</server>
32+
</servers>
33+
34+
</settings>

0 commit comments

Comments
 (0)