From deaa7980cfe2ef142ced5792dd00e06f680e5239 Mon Sep 17 00:00:00 2001
From: "Yauheni Rykhter (EPAM)" <yauheni_rykhter@epam.com>
Date: Wed, 24 Apr 2024 12:46:45 +0000
Subject: [PATCH] GONRG-9447: search cim
---
.gitlab-ci.yml | 7 +-
devops/core-plus/deploy/Chart.yaml | 24 ++++
devops/core-plus/deploy/README.md | 100 +++++++++++++++
.../core-plus/deploy/templates/configmap.yaml | 26 ++++
.../deploy/templates/deploy-redis.yaml | 39 ++++++
.../deploy/templates/deployment.yaml | 67 ++++++++++
.../deploy/templates/service-account.yaml | 5 +
.../deploy/templates/service-redis.yaml | 14 ++
.../core-plus/deploy/templates/service.yaml | 16 +++
.../deploy/templates/virtual-service.yaml | 25 ++++
devops/core-plus/deploy/values.yaml | 38 ++++++
devops/core-plus/pipeline/override-stages.yml | 120 +-----------------
12 files changed, 364 insertions(+), 117 deletions(-)
create mode 100644 devops/core-plus/deploy/Chart.yaml
create mode 100644 devops/core-plus/deploy/README.md
create mode 100644 devops/core-plus/deploy/templates/configmap.yaml
create mode 100644 devops/core-plus/deploy/templates/deploy-redis.yaml
create mode 100644 devops/core-plus/deploy/templates/deployment.yaml
create mode 100644 devops/core-plus/deploy/templates/service-account.yaml
create mode 100644 devops/core-plus/deploy/templates/service-redis.yaml
create mode 100644 devops/core-plus/deploy/templates/service.yaml
create mode 100644 devops/core-plus/deploy/templates/virtual-service.yaml
create mode 100644 devops/core-plus/deploy/values.yaml
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 916502620..e71db64e5 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -23,7 +23,7 @@ variables:
DEFAULT_DATA_PARTITION_ID_TENANT1_IBM: tenant1
IBM_HELM_CONFIG_PATH: devops/ibm/ibm-search-service-config
IBM_HELM_DEPLOY_PATH: devops/ibm/ibm-search-service-deploy
-
+
AZURE_SERVICE: search
AZURE_BUILD_SUBDIR: provider/search-azure
AZURE_TEST_SUBDIR: testing/integration-tests/search-test-azure
@@ -60,9 +60,12 @@ include:
- project: "osdu/platform/ci-cd-pipelines"
file: "cloud-providers/gc-global.yml"
- - local: "devops/gc/pipeline/override-stages.yml"
+ - project: "osdu/platform/ci-cd-pipelines"
+ file: "cloud-providers/core-global.yml"
+ - local: "devops/gc/pipeline/override-stages.yml"
- local: "devops/core-plus/pipeline/override-stages.yml"
+
- local: "/publish.yml"
.maven:
diff --git a/devops/core-plus/deploy/Chart.yaml b/devops/core-plus/deploy/Chart.yaml
new file mode 100644
index 000000000..de703889c
--- /dev/null
+++ b/devops/core-plus/deploy/Chart.yaml
@@ -0,0 +1,24 @@
+apiVersion: v2
+name: core-plus-search-deploy
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "1.16.0"
diff --git a/devops/core-plus/deploy/README.md b/devops/core-plus/deploy/README.md
new file mode 100644
index 000000000..6d7d86b03
--- /dev/null
+++ b/devops/core-plus/deploy/README.md
@@ -0,0 +1,100 @@
+<!--- Deploy -->
+
+# Deploy helm chart
+
+## Introduction
+
+This chart bootstraps a deployment on a [Kubernetes](https://kubernetes.io) cluster using [Helm](https://helm.sh) package manager.
+
+## Prerequisites
+
+The code was tested on **Kubernetes cluster** (v1.21.11) with **Istio** (1.12.6)
+> It is possible to use other versions, but it hasn't been tested
+
+### Operation system
+
+The code works in Debian-based Linux (Debian 10 and Ubuntu 20.04) and Windows WSL 2. Also, it works but is not guaranteed in Google Cloud Shell. All other operating systems, including macOS, are not verified and supported.
+
+### Packages
+
+Packages are only needed for installation from a local computer.
+
+- **HELM** (version: v3.7.1 or higher) [helm](https://helm.sh/docs/intro/install/)
+- **Kubectl** (version: v1.21.0 or higher) [kubectl](https://kubernetes.io/docs/tasks/tools/#kubectl)
+
+## Installation
+
+You need to set variables in **values.yaml** file using any code editor. Some of the values are prefilled, but you need to specify some values as well. You can find more information about them below.
+
+### Global variables
+
+| Name | Description | Type | Default |Required |
+|------|-------------|------|---------|---------|
+**global.domain** | your domain for the external endpoint, ex `example.com` | string | - | yes
+**global.onPremEnabled** | whether on-prem is enabled | boolean | false | yes
+**global.limitsEnabled** | whether CPU and memory limits are enabled | boolean | true | yes
+
+### Configmap variables
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|----------|
+**data.logLevel** | logging level | string | `ERROR` | yes
+**data.entitlementsHost** | Entitlements service host | string | `http://entitlements` | yes
+**data.indexerHost** | Indexer service host | string | `http://indexer` | yes
+**data.policyHost** | Policy service host | string | `http://policy` | yes
+**data.partitionHost** | Partition service host | string | `http://partition` | yes
+**data.policyId** | policy id from ex `${POLICY_HOST}/api/policy/v1/policies` | string | `search` | yes
+**data.securityHttpsCertificateTrust** | Elastic client connection uses TrustSelfSignedStrategy(), if it is `true` | bool | `true` | yes
+**data.servicePolicyEnabled** | Enables Search service integration with Policy service | bool | `false` | yes
+**data.redisSearchHost** | The host for redis instance. If empty (by default), helm installs an internal redis instance | string | - | yes
+**data.redisSearchPort** | The port for redis instance | digit | 6379 | yes
+
+### Deployment variables
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|----------|
+**data.requestsCpu** | amount of requested CPU | string | `20m` | yes
+**data.requestsMemory** | amount of requested memory| string | `550Mi` | yes
+**data.limitsCpu** | CPU limit | string | `1` | only if `global.limitsEnabled` is true
+**data.limitsMemory** | memory limit | string | `1G` | only if `global.limitsEnabled` is true
+**data.serviceAccountName** | name of your service account | string | `search` | yes
+**data.imagePullPolicy** | when to pull image | string | `IfNotPresent` | yes
+**data.image** | service image | string | - | yes
+**data.redisImage** | service image | string | `redis:7` | yes
+
+### Configuration variables
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|----------|
+**conf.appName** | Service name | string | `search` | yes
+**conf.elasticSecretName** | secret for elasticsearch | string | `search-elastic-secret` | yes
+**conf.searchRedisSecretName** | search Redis secret that contains redis password with REDIS_PASSWORD key | string | `search-redis-secret` | yes
+
+### Istio variables
+
+| Name | Description | Type | Default |Required |
+|------|-------------|------|---------|---------|
+**istio.proxyCPU** | CPU request for Envoy sidecars | string | 10m | yes
+**istio.proxyCPULimit** | CPU limit for Envoy sidecars | string | 200m | yes
+**istio.proxyMemory** | memory request for Envoy sidecars | string | 100Mi | yes
+**istio.proxyMemoryLimit** | memory limit for Envoy sidecars | string | 256Mi | yes
+
+## Install the Helm chart
+
+Run this command from within this directory:
+
+```console
+helm install core-plus-search-deploy .
+```
+
+## Uninstall the Helm chart
+
+To uninstall the helm deployment:
+
+```console
+helm uninstall core-plus-search-deploy
+```
+
+> Do not forget to delete all k8s secrets and PVCs accociated with the Service.
+
+[Move-to-Top](#deploy-helm-chart)
diff --git a/devops/core-plus/deploy/templates/configmap.yaml b/devops/core-plus/deploy/templates/configmap.yaml
new file mode 100644
index 000000000..897e1f6df
--- /dev/null
+++ b/devops/core-plus/deploy/templates/configmap.yaml
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ labels:
+ app: {{ .Values.conf.appName | quote }}
+ name: {{ printf "%s-config" .Values.conf.appName | quote }}
+ namespace: {{ .Release.Namespace | quote }}
+data:
+ SPRING_PROFILES_ACTIVE: "anthos"
+ LOG_LEVEL: {{ .Values.data.logLevel | quote }}
+ {{- if .Values.data.redisSearchHost }}
+ REDIS_GROUP_HOST: {{ .Values.data.redisSearchHost | quote }}
+ REDIS_SEARCH_HOST: {{ .Values.data.redisSearchHost | quote }}
+ {{- else }}
+ REDIS_GROUP_HOST: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ REDIS_SEARCH_HOST: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ {{- end }}
+ REDIS_SEARCH_PORT: {{ .Values.data.redisSearchPort | quote }}
+ REDIS_GROUP_PORT: {{ .Values.data.redisSearchPort | quote }}
+ ENTITLEMENTS_HOST: {{ .Values.data.entitlementsHost | quote }}
+ SECURITY_HTTPS_CERTIFICATE_TRUST: {{ .Values.data.securityHttpsCertificateTrust | quote }}
+ PARTITION_HOST: {{ .Values.data.partitionHost | quote }}
+ POLICY_HOST: {{ .Values.data.policyHost | quote }}
+ POLICY_ID: {{ .Values.data.policyId | quote }}
+ INDEXER_BASE_HOST: {{ .Values.data.indexerHost | quote }}
+ SERVICE_POLICY_ENABLED: {{ .Values.data.servicePolicyEnabled | quote }}
diff --git a/devops/core-plus/deploy/templates/deploy-redis.yaml b/devops/core-plus/deploy/templates/deploy-redis.yaml
new file mode 100644
index 000000000..70f3f6399
--- /dev/null
+++ b/devops/core-plus/deploy/templates/deploy-redis.yaml
@@ -0,0 +1,39 @@
+{{ if not .Values.data.redisSearchHost }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ namespace: {{ .Release.Namespace | quote }}
+ labels:
+ type: infra
+spec:
+ replicas: 1
+ selector:
+ matchLabels:
+ app: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ template:
+ metadata:
+ labels:
+ app: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ annotations:
+ sidecar.istio.io/proxyCPU: 6m
+ sidecar.istio.io/proxyMemory: 64Mi
+ spec:
+ containers:
+ - args:
+ - --requirepass
+ - $(REDIS_PASSWORD)
+ envFrom:
+ - secretRef:
+ name: {{ .Values.conf.searchRedisSecretName | quote }}
+ image: {{ .Values.data.redisImage | quote }}
+ imagePullPolicy: {{ .Values.data.imagePullPolicy | quote }}
+ name: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ ports:
+ - containerPort: 6379
+ protocol: TCP
+ resources:
+ requests:
+ cpu: 5m
+ memory: 20Mi
+{{ end }}
diff --git a/devops/core-plus/deploy/templates/deployment.yaml b/devops/core-plus/deploy/templates/deployment.yaml
new file mode 100644
index 000000000..ccb99d406
--- /dev/null
+++ b/devops/core-plus/deploy/templates/deployment.yaml
@@ -0,0 +1,67 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ labels:
+ app: {{ .Values.conf.appName | quote }}
+ type: core
+ source: java
+ name: {{ .Values.conf.appName | quote }}
+ namespace: {{ .Release.Namespace | quote }}
+spec:
+ selector:
+ matchLabels:
+ app: {{ .Values.conf.appName | quote }}
+ replicas: {{ .Values.conf.replicas }}
+ template:
+ metadata:
+ labels:
+ app: {{ .Values.conf.appName | quote }}
+ annotations:
+ rollme: {{ randAlphaNum 5 | quote }}
+ sidecar.istio.io/proxyCPU: {{ .Values.istio.proxyCPU | quote }}
+ sidecar.istio.io/proxyMemory: {{ .Values.istio.proxyMemory | quote }}
+ sidecar.istio.io/proxyCPULimit: {{ .Values.istio.proxyCPULimit | quote }}
+ sidecar.istio.io/proxyMemoryLimit: {{ .Values.istio.proxyMemoryLimit | quote }}
+ spec:
+ containers:
+ - name: {{ .Values.conf.appName | quote }}
+ image: {{ .Values.data.image | quote }}
+ imagePullPolicy: {{ .Values.data.imagePullPolicy | quote }}
+ envFrom:
+ - configMapRef:
+ name: {{ printf "%s-config" .Values.conf.appName | quote }}
+ - secretRef:
+ name: {{ .Values.conf.elasticSecretName | quote }}
+ env:
+ - name: REDIS_GROUP_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Values.conf.searchRedisSecretName | quote }}
+ key: REDIS_PASSWORD
+ - name: REDIS_SEARCH_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Values.conf.searchRedisSecretName | quote }}
+ key: REDIS_PASSWORD
+ securityContext:
+ allowPrivilegeEscalation: false
+ runAsNonRoot: true
+ ports:
+ - containerPort: 8080
+ livenessProbe:
+ failureThreshold: 3
+ httpGet:
+ path: /api/search/v2/liveness_check
+ port: 8080
+ initialDelaySeconds: 120
+ periodSeconds: 10
+ resources:
+ requests:
+ cpu: {{ .Values.data.requestsCpu | quote }}
+ memory: {{ .Values.data.requestsMemory | quote }}
+ {{- if .Values.global.limitsEnabled }}
+ limits:
+ cpu: {{ .Values.data.limitsCpu | quote }}
+ memory: {{ .Values.data.limitsMemory | quote }}
+ {{- end }}
+ serviceAccountName: {{ .Values.data.serviceAccountName | quote }}
diff --git a/devops/core-plus/deploy/templates/service-account.yaml b/devops/core-plus/deploy/templates/service-account.yaml
new file mode 100644
index 000000000..1ae20f1cf
--- /dev/null
+++ b/devops/core-plus/deploy/templates/service-account.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ .Values.data.serviceAccountName | quote }}
+ namespace: {{ .Release.Namespace | quote }}
diff --git a/devops/core-plus/deploy/templates/service-redis.yaml b/devops/core-plus/deploy/templates/service-redis.yaml
new file mode 100644
index 000000000..d17197baa
--- /dev/null
+++ b/devops/core-plus/deploy/templates/service-redis.yaml
@@ -0,0 +1,14 @@
+{{ if not .Values.data.redisSearchHost }}
+apiVersion: v1
+kind: Service
+metadata:
+ name: {{ printf "redis-%s" .Values.conf.appName | quote }}
+ namespace: {{ .Release.Namespace | quote }}
+spec:
+ ports:
+ - port: {{ .Values.data.redisSearchPort }}
+ protocol: TCP
+ targetPort: 6379
+ selector:
+ app: {{ printf "redis-%s" .Values.conf.appName | quote }}
+{{ end }}
diff --git a/devops/core-plus/deploy/templates/service.yaml b/devops/core-plus/deploy/templates/service.yaml
new file mode 100644
index 000000000..30e08f7d5
--- /dev/null
+++ b/devops/core-plus/deploy/templates/service.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: {{ .Values.conf.appName | quote }}
+ annotations:
+ namespace: {{ .Release.Namespace | quote }}
+ labels:
+ app: {{ .Values.conf.appName | quote }}
+spec:
+ ports:
+ - protocol: TCP
+ port: 80
+ targetPort: 8080
+ name: http
+ selector:
+ app: {{ .Values.conf.appName | quote }}
diff --git a/devops/core-plus/deploy/templates/virtual-service.yaml b/devops/core-plus/deploy/templates/virtual-service.yaml
new file mode 100644
index 000000000..75fca8af5
--- /dev/null
+++ b/devops/core-plus/deploy/templates/virtual-service.yaml
@@ -0,0 +1,25 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+ name: {{ .Values.conf.appName | quote }}
+ namespace: {{ .Release.Namespace | quote }}
+spec:
+ hosts:
+ {{- if and .Values.global.domain .Values.global.onPremEnabled }}
+ - {{ printf "osdu.%s" .Values.global.domain | quote }}
+ {{- else if .Values.global.domain }}
+ - {{ .Values.global.domain | quote }}
+ {{- else }}
+ - "*"
+ {{- end }}
+ gateways:
+ - service-gateway
+ http:
+ - match:
+ - uri:
+ prefix: "/api/search"
+ route:
+ - destination:
+ port:
+ number: 80
+ host: {{ printf "%s.%s.svc.cluster.local" .Values.conf.appName .Release.Namespace | quote }}
diff --git a/devops/core-plus/deploy/values.yaml b/devops/core-plus/deploy/values.yaml
new file mode 100644
index 000000000..20dfd958d
--- /dev/null
+++ b/devops/core-plus/deploy/values.yaml
@@ -0,0 +1,38 @@
+global:
+ domain: ""
+ limitsEnabled: true
+
+data:
+ # Configmaps
+ logLevel: "ERROR"
+ entitlementsHost: "http://entitlements"
+ partitionHost: "http://partition"
+ policyHost: "http://policy"
+ indexerHost: "http://indexer"
+ policyId: 'osdu.partition["%s"].search'
+ securityHttpsCertificateTrust: "true"
+ servicePolicyEnabled: false
+ # Deployments
+ requestsCpu: "15m"
+ requestsMemory: "400Mi"
+ limitsCpu: "1"
+ limitsMemory: "1G"
+ serviceAccountName: "search"
+ imagePullPolicy: "IfNotPresent"
+ image: ""
+ # redis connection. Change it if you want to use external redis
+ redisSearchHost: ""
+ redisSearchPort: 6379
+ redisImage: "docker.io/library/redis:7.2-alpine"
+
+conf:
+ appName: "search"
+ elasticSecretName: "search-elastic-secret"
+ searchRedisSecretName: "search-redis-secret"
+ replicas: 1
+
+istio:
+ proxyCPU: "5m"
+ proxyCPULimit: "200m"
+ proxyMemory: "50Mi"
+ proxyMemoryLimit: "256Mi"
diff --git a/devops/core-plus/pipeline/override-stages.yml b/devops/core-plus/pipeline/override-stages.yml
index dcaf7ca4b..52a5577c4 100644
--- a/devops/core-plus/pipeline/override-stages.yml
+++ b/devops/core-plus/pipeline/override-stages.yml
@@ -1,119 +1,9 @@
variables:
- GC_SERVICE: search
- GC_VENDOR: gc
- GC_TESTING_DIR: "testing/integration-tests"
+ CORE_SERVICE: search
+ CORE_TESTING_DIR: "testing/integration-tests"
+ CORE_BUILD_PATH: "search-core-plus/cloudbuild/Dockerfile"
-
-gc-baremetal-test:
+core-test:
variables:
- GC_VENDOR: baremetal
DEFAULT_DATA_PARTITION_ID_TENANT2: non-exist
-
-gc-containerize-gitlab:core-plus:
- stage: containerize
- needs:
- - "compile-and-unit-test"
- - "download_plugins"
- tags: ["osdu-small"]
- image: docker:19.03
- cache: {}
- variables:
- BUILD_ARGS: "--build-arg PORT=$GC_PORT"
- BUILD_PATH: "search-core-plus/cloudbuild/Dockerfile"
- IMAGE_NAME: "search-core-plus"
- script:
- - !reference [.gc_set_image_name, script]
- - docker build $EXTRA_TAG -f $BUILD_PATH $BUILD_ARGS .
- - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
- - docker push $CI_REGISTRY_IMAGE/$IMAGE_NAME
- rules:
- - if: "$CI_COMMIT_BRANCH =~ /^release/"
- when: never
- - if: "$CI_COMMIT_TAG"
- when: never
- - if: "$PROTECTED == '1'"
- when: on_success
-
-gc-helm-charts-gitlab:core-plus:
- stage: containerize
- tags: ["osdu-small"]
- needs: ["gc-containerize-gitlab:core-plus"]
- image:
- name: alpine/helm:3.11.2
- entrypoint: [""]
- variables:
- IMAGE_NAME: "search-core-plus"
- before_script:
- - helm registry login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
- - !reference [.gc_set_image_name, script]
- - !reference [.gc_substitute_image_in_helm, script]
- script:
- - !reference [.gc_define_app_version, script]
- - helm package $GC_HELM_DEPLOYMENT_DIR -u --version $GC_HELM_PACKAGE_VERSION-$HELM_TAG --app-version $APP_VERSION
- - helm push $GC_HELM_PACKAGE_NAME-$GC_HELM_PACKAGE_VERSION-$HELM_TAG.tgz oci://$CI_REGISTRY_IMAGE/core-plus-helm
- rules:
- - if: "$CI_COMMIT_BRANCH =~ /^release/"
- when: never
- - if: "$CI_COMMIT_TAG"
- when: never
- - if: "$PROTECTED == '1'"
- when: on_success
-
-gc-baremetal-deploy:
- environment:
- name: GC_Baremetal
- extends: .gc-baremetal-variables
- id_tokens:
- GITLAB_OIDC_TOKEN:
- aud: https://iam.googleapis.com/projects/${GC_PROJECT_NUMBER}/locations/global/workloadIdentityPools/${GC_POOL_ID}/providers/${GC_PROVIDER_ID}
- tags: ["osdu-small"]
- image: gcr.io/google.com/cloudsdktool/cloud-sdk:alpine
- stage: deploy
- needs:
- - "gc-containerize-gitlab:core-plus"
- - "gc-helm-charts-gitlab:core-plus"
- retry: 1
- variables:
- IMAGE_NAME: "search-core-plus"
- GC_SA_EMAIL: $GC_SA_GKE_EMAIL
- script:
- - !reference [.gc_obtain_credentials, script]
- - !reference [.gc_set_image_name, script]
- - !reference [.gc_common_config, script]
- - >
- helm upgrade $GC_SERVICE-deploy oci://$CI_REGISTRY_IMAGE/core-plus-helm/$GC_HELM_PACKAGE_NAME
- --version $GC_HELM_PACKAGE_VERSION-$HELM_TAG
- --install
- --create-namespace
- --namespace=$GC_HELM_NAMESPACE
- --wait
- --history-max=3
- --set global.onPremEnabled=true
- --set global.domain=$GC_DOMAIN
- --set data.serviceAccountName=$GC_SERVICE
- --set data.bootstrapServiceAccountName=$GC_BOOTSTRAP_SA
- --set data.logLevel=INFO
- --set data.springProfilesActive=$GC_SPRING_PROFILES_ACTIVE
- --set data.bucketPrefix=$BUCKET_PREFIX
- --set data.dataPartitionId=$GC_TENANT
- --set data.groupId=$GROUP_ID
- --set data.adminUserEmail=$GC_ADMIN_USER_EMAIL
- --set data.airflowComposerEmail=$GC_AIRFLOW_COMPOSER_EMAIL
- --set data.sharedTenantName=$GC_TENANT
- --set opa.data.serviceAccountName=opa
- --set data.bucketName=$GC_POLICY_BUCKET
- --set data.googleCloudProject=$GC_PROJECT
- --set data.subscriberPrivateKeyId=$GC_BAREMETAL_SUBSCRIBER_PRIVATE_KEY_ID
- $GC_HELM_SETS
- $GC_HELM_TIMEOUT
- - !reference [.gc_verify_deploy, script]
- - !reference [.gc_verify_bootstrap, script]
-
- rules:
- - if: "$CI_COMMIT_BRANCH =~ /^release/"
- when: never
- - if: "$CI_COMMIT_TAG"
- when: never
- - if: "$PROTECTED == '1'"
- when: on_success
-
+ CUCUMBER_OPTIONS: "--tags ~@autocomplete"
--
GitLab