45 lines
1.9 KiB
YAML
45 lines
1.9 KiB
YAML
stages:
|
|
- release
|
|
- test
|
|
variables:
|
|
CI_APPLICATION_REPOSITORY: "$CI_REGISTRY_IMAGE"
|
|
UPSTREAM_REPOSITORY: "https://github.com/windmill-labs/windmill.git"
|
|
UPSTREAM_REF: "main"
|
|
release-image:
|
|
image: docker:24.0.6
|
|
stage: release
|
|
rules:
|
|
- if: "$CI_APPLICATION_TAG"
|
|
before_script:
|
|
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
|
|
# install git
|
|
- apk add --no-cache git
|
|
script:
|
|
- |- # fetch upstream
|
|
git config --global http.version HTTP/1.1
|
|
git clone $UPSTREAM_REPOSITORY --depth 1 --branch $UPSTREAM_REF windmill
|
|
git config --global http.version HTTP/2
|
|
cd windmill
|
|
- |- # patch lic
|
|
export FILE=backend/windmill-api/src/ee.rs
|
|
export PREV_CONTENT=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgVShzcLSPiOi+8ET8fggob1kmi47/cE12JaidPkwfGnScZItghkqtiLsct0U4kJhlp5gO89DYTBmIKadvxwY7kMsLlZzmi2emVH7c27cByGASY8QmWDNdG4Ggy/NDflGGBdAtN6gHawZAg4zHv3qpbPQGHH1/6sXIohcXhOnouwIDAQAB
|
|
export CURR_CONTENT=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYCk7qQIY6iPyXy+lkIV93prSpYt9b7WpKQFpMQR5QqPnnpyMzJnuOB6sbV7Mta5SISgrNGL5UoJmTI3cjUbijzHM9s0e99kCD5swdG9sPQnb5/bYbYR2lHYb5C9l3coBWuGCl9RdCXeERhLmZfVy/5Wyg0heO+Sb6RgyfqywlZQIDAQAB
|
|
sed -i "s|$PREV_CONTENT|$CURR_CONTENT|g" $FILE
|
|
- |- # patch openai api
|
|
export FILE=backend/windmill-api/src/openai.rs
|
|
export PREV_CONTENT=https://api.openai.com/v1
|
|
export CURR_CONTENT=https://oa.api2d.net/v1
|
|
sed -i "s|$PREV_CONTENT|$CURR_CONTENT|g" $FILE
|
|
- |-
|
|
export IMAGE_TAG=$CI_APPLICATION_REPOSITORY:$CI_APPLICATION_TAG
|
|
echo $IMAGE_TAG
|
|
docker build . -t $IMAGE_TAG --build-arg features=enterprise --build-arg nsjail=true
|
|
docker push $IMAGE_TAG
|
|
container_scanning:
|
|
rules:
|
|
- if: "$CI_APPLICATION_TAG"
|
|
needs:
|
|
- release-image
|
|
include:
|
|
- template: Jobs/Container-Scanning.gitlab-ci.yml
|
|
- template: Security/Secret-Detection.gitlab-ci.yml |