terraform-contour-mirror/.gitlab-ci.yml
gitlab-pusher 11ae8c8d30 ++ fix
2026-07-17 10:24:40 +00:00

84 lines
2.4 KiB
YAML

stages:
- generate
- trigger
- deploy
generate-pipeline:
stage: generate
image: alpine:latest
before_script:
- apk add --no-cache bash findutils
script:
- echo "=== DEBUG INFO ==="
- echo "CI_PIPELINE_SOURCE=$CI_PIPELINE_SOURCE"
- echo "CI_COMMIT_BRANCH=$CI_COMMIT_BRANCH"
- echo "CI_MERGE_REQUEST_SOURCE_BRANCH_NAME=$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME"
- pwd && ls -la
- echo "=== Finding terragrunt files ==="
- find live -name "terragrunt.hcl" -not -path "*/.terragrunt-cache/*" | head -20 || echo "No files found"
- echo "=== Generating pipeline ==="
- chmod +x ./scripts/generate-pipeline.sh
- ./scripts/generate-pipeline.sh
- echo "=== Generated pipeline content ==="
- cat .gitlab-ci.generated.yml
artifacts:
paths:
- .gitlab-ci.generated.yml
expire_in: 1 hour
rules:
- if: '$CI_PIPELINE_SOURCE == "pipeline"'
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
- if: '$CI_COMMIT_BRANCH == "stage"'
- if: '$CI_COMMIT_BRANCH == "master"'
- if: '$CI_COMMIT_BRANCH =~ /^feature\/.*/'
# Prod environment
trigger-downstream-prod:
stage: trigger
needs:
- generate-pipeline
trigger:
include:
- artifact: .gitlab-ci.generated.yml
job: generate-pipeline
strategy: depend
forward:
pipeline_variables: true
yaml_variables: true
variables:
TERRAFORM_IMAGE_NAME: cr.yandex/crp3ccidau046kdj8g9q/terraform/terragrunt:v9.11
YC_SERVICE_ACCOUNT_KEY_FILE: ${YC_PROD_SERVICE_ACCOUNT_KEY_FILE}
YC_CLOUD_ID: ${YC_CLOUD_ID}
YC_STAGE_FOLDER_ID: ${YC_STAGE_FOLDER_ID}
YC_PROD_FOLDER_ID: ${YC_PROD_FOLDER_ID}
YC_PREPROD_FOLDER_ID: ${YC_PREPROD_FOLDER_ID}
S3_ACCESS_KEY: ${S3_PROD_ACCESS_KEY}
S3_SECRET_KEY: ${S3_PROD_SECRET_KEY}
S3_STATE_BUCKET: ${S3_PROD_STATE_BUCKET}
AWS_ACCESS_KEY_ID: ${S3_PROD_ACCESS_KEY}
AWS_SECRET_ACCESS_KEY: ${S3_PROD_SECRET_KEY}
TARGET_ENV: "prod"
rules:
- if: '$CI_PIPELINE_SOURCE == "pipeline"'
- if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
- if: '$CI_COMMIT_BRANCH == "master"'
- if: '$CI_COMMIT_BRANCH =~ /^feature\/.*/'
##
mirror-contour:
stage: deploy
image: alpine:3.21
variables:
GIT_DEPTH: "0"
before_script:
- apk add --no-cache git ca-certificates
script:
- git push --force "$CONTOUR_MIRROR_PUSH_URL" "$CI_COMMIT_SHA:refs/heads/contour"
rules:
- if: '$CI_COMMIT_BRANCH == "contour" && $CI_PIPELINE_SOURCE == "push"'