blob: ccbecef967e10343b92bb3c87a23ffa3fb6e202c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
|
# content of service-account-credentials.json, used to access to Google Cloud Platform
gcp_credentials: ENCRYPTED[534d4b89444f3e4e3ba299769a98010609e71992355c132fd6e448f1d8fcb039184224c8b4cdf7933b0aec16d6a8896d]
env:
GRADLE_OPTS: -Dorg.gradle.daemon=false -Dorg.gradle.jvmargs="-XX:+PrintFlagsFinal -XshowSettings:vm -XX:+HeapDumpOnOutOfMemoryError -XX:+UnlockExperimentalVMOptions -Djava.security.egd=file:/dev/./urandom -Dfile.encoding=UTF8 -Duser.language=en -Duser.country=US"
# to be replaced by other credentials
ARTIFACTORY_PRIVATE_USERNAME: ENCRYPTED[ab2de699acd280b1e6ed9b4fa6b34cdbed0fae3a2d18499a727e93616a42393a9168405e5d0f39f0abe1e017559ee82b]
ARTIFACTORY_PRIVATE_PASSWORD: ENCRYPTED[81952f43bfff165a91fb7e2f3207f5c6d428f4de4b041a8a08e8b214ee52ec4586aa8f6dffacbbc2c897058e80ef90f1]
ARTIFACTORY_DEPLOY_USERNAME: public-qa-deployer
ARTIFACTORY_DEPLOY_PASSWORD: ENCRYPTED[9362d735843b21b375b6e19d91e0de5216e053e229e39e2ce33a0c866306e6e3f9b08db8a0e126ca5e986fea97e975fd]
ARTIFACTORY_DEPLOY_USERNAME_PRIVATE: private-qa-deployer
ARTIFACTORY_DEPLOY_PASSWORD_PRIVATE: ENCRYPTED[61769719e9b775afe103dbee22141eeaa0116b3332eafb993be2a5919ff7bf017cdc519afed07dc6cac8ebbc0846f191]
ARTIFACTORY_API_KEY: ENCRYPTED[9da84e89286d570d8edb72a117a66754fda80de2a911ca9d4e71acd5377ebcaf62cec3fd2a40b7dca2f982c252a0bb74]
# download licenses for testing commercial editions
GITHUB_TOKEN: ENCRYPTED[bd3d5f7fe5901d9d9f2564caebb52af285262177294eae67ba5f1a3a1df1316449ce6e09c5e1b68eeff37e024e2d167a]
# notifications to burgr
BURGR_URL: ENCRYPTED[06b8fcc9aaa4b495043aa08bc4450b89588902ad9a60cc8525f53d14810aff84558812e4b7eb01131dd64f33916ac941]
BURGR_USERNAME: ENCRYPTED[cf7bfb936025fb763013bbfef0ab5723c0d9b53f135d79af36f9defa933f4b5fc72842bd83a97ce9b614503c1b77e6da]
BURGR_PASSWORD: ENCRYPTED[bc554fc6a06c9f14cc9924cefad0a69e962a905b6d1609fc9357d458b45fc52ac74c960ad9c7382a0691433fa9dcd483]
# ops-jenkins credentials required to trigger docs deppoyment
OPS_JENKINS_URL: ENCRYPTED[00ea2b88c762e374c02a3d29a306cc1cf3ceb4b3d807bda2a601486e0d483fd67a556ef295830231390f45e7d512b54d]
OPS_JENKINS_USERNAME: ENCRYPTED[c778b1483a7ca000dc760ef731c2fbe1dc05a9af38f2a85206cfbcdf649e50715ca447ac291485d513aa9120b0c9abad]
OPS_JENKINS_PASSWORD: ENCRYPTED[a035a2826c3bc971288284a59bd00dda193d8a81e7809e08bf4ec59b68894c16f30095a567e65755240bb7f919c2e0bf]
# DOCS_JOB_TOKEN: token required to launch the deployment of documentation job on ops-jenkins (see private/cirrus/cirrus-trigger-deploy-docs.sh)
DOCS_JOB_TOKEN: ENCRYPTED[7771f76a0fc0038f9929c32d98588963c8dcda6148ba054f57358bc17faa109ac638134c89067f3bacc8933d2fa2c541]
# analysis on next.sonarqube.com
SONARQUBE_NEXT_TOKEN: ENCRYPTED[e3d98fa0ecceb015e9803d47f78c3040f5a710d678a631107635d69f650d4e53ecaf2e2334cc1fe0c47037ec915dcda0]
# could be used in Artifactory statistics
CI_ENV: cirrus
auto_cancellation: $CIRRUS_BRANCH != 'master' && $CIRRUS_BRANCH !=~ 'branch.*' && $CIRRUS_BRANCH != 'dogfood-on-next'
build_task:
only_if: $CIRRUS_BRANCH !=~ "dogfood/.*" && $CIRRUS_BRANCH != "public_master"
timeout_in: 90m
gke_container:
dockerfile: private/docker/Dockerfile-build
builder_image_project: ci-cd-215716
builder_image_name: docker-builder-v1
cluster_name: cirrus-euw3a-cluster
zone: europe-west3-a
namespace: default
cpu: 3
memory: 10Gb
gradle_cache:
folder: ~/.gradle/caches
env:
CIRRUS_CLONE_DEPTH: 1
script:
- ./private/cirrus/cirrus-build.sh
cleanup_before_cache_script:
- ./private/cirrus/cleanup-gradle-cache.sh
deploy_docs_task:
depends_on: build
only_if: $CIRRUS_BRANCH == 'dogfood-on-next'
gke_container:
dockerfile: private/docker/Dockerfile-build
builder_image_project: ci-cd-215716
builder_image_name: docker-builder-v1
cluster_name: cirrus-euw3a-cluster
zone: europe-west3-a
namespace: default
cpu: 1
memory: 1Gb
env:
CIRRUS_CLONE_DEPTH: 1
script:
- ./private/cirrus/cirrus-trigger-deploy-docs.sh
validate_task:
depends_on: build
only_if: $CIRRUS_BRANCH !=~ "dogfood/.*" && $CIRRUS_BRANCH != "public_master"
timeout_in: 90m
gke_container:
dockerfile: private/docker/Dockerfile-build
builder_image_project: ci-cd-215716
builder_image_name: docker-builder-v1
cluster_name: cirrus-euw3a-cluster
zone: europe-west3-a
namespace: default
cpu: 2.4
memory: 10Gb
additional_containers:
- name: postgres
# 9.5 is the version used internally at SonarSource.
# The minimal supported version is 9.3 and is tested by nightly QA jobs.
image: postgres:9.5
port: 5432
cpu: 1
memory: 1Gb
env:
POSTGRES_USER: postgres
POSTGRES_PASSWORD: postgres
gradle_cache:
folder: ~/.gradle/caches
script:
- ./private/cirrus/cirrus-validate.sh postgres
cleanup_before_cache_script:
- ./private/cirrus/cleanup-gradle-cache.sh
qa_task:
depends_on: build
only_if: $CIRRUS_BRANCH !=~ "dogfood/.*" && $CIRRUS_BRANCH != "public_master"
gke_container:
dockerfile: private/docker/Dockerfile-build
builder_image_project: ci-cd-215716
builder_image_name: docker-builder-v1
cluster_name: cirrus-euw3a-cluster
zone: europe-west3-a
namespace: default
cpu: 2.4
memory: 10Gb
additional_containers:
- name: postgres
# 9.5 is the version used internally at SonarSource.
# The minimal supported version is 9.3 and is tested by nightly QA jobs.
image: postgres:9.5
port: 5432
cpu: 1
memory: 1Gb
env:
POSTGRES_USER: postgres
POSTGRES_PASSWORD: postgres
env:
matrix:
QA_CATEGORY: Cat1
QA_CATEGORY: Cat2
QA_CATEGORY: Cat3
QA_CATEGORY: Cat4
QA_CATEGORY: Cat5
QA_CATEGORY: Cat6
QA_CATEGORY: Cat7
QA_CATEGORY: Gov
QA_CATEGORY: Billing
QA_CATEGORY: License
QA_CATEGORY: Branch
CIRRUS_CLONE_DEPTH: 1
gradle_cache:
folder: ~/.gradle/caches
script:
- ./private/cirrus/cirrus-qa.sh postgres
cleanup_before_cache_script:
- ./private/cirrus/cleanup-gradle-cache.sh
promote_task:
depends_on:
- build
- validate
- qa
only_if: $CIRRUS_BRANCH !=~ "dogfood/.*" && $CIRRUS_BRANCH != "public_master"
gke_container:
dockerfile: private/docker/Dockerfile-build
builder_image_project: ci-cd-215716
builder_image_name: docker-builder-v1
cluster_name: cirrus-euw3a-cluster
zone: europe-west3-a
namespace: default
cpu: 1
memory: 1Gb
env:
CIRRUS_CLONE_DEPTH: 1
script:
- ./private/cirrus/cirrus-promote.sh
|
