Features historique deploiements

.github/workflows/documentation.yml

@@ -0,0 +1,40 @@
+name: Documentation (build and deploy)
+on:
+  push:
+    branches: [dev]
+    paths:
+      - docs/
+      - .github/
+  workflow_dispatch:
+permissions:
+  contents: write
+  pages: write
+  id-token: write
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 2
+          lfs: true
+      - uses: actions/setup-python@v4
+        with:
+          python-version: 3.x
+      - run: echo "cache_id=$(date --utc '+%V')" >> $GITHUB_ENV
+      - uses: actions/cache@v3
+        with:
+          key: mkdocs-material-${{ env.cache_id }}
+          path: .cache
+          restore-keys: |
+            mkdocs-material-
+      - run: pip install mkdocs-material
+      - run: mkdocs build --config-file ./docs/mkdocs.yml --site-dir ./public
+      - uses: actions/upload-pages-artifact@v1
+        with:
+          path: ./docs/public
+  deploy:
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - uses: actions/deploy-pages@v2

.github/workflows/format.yml

@@ -0,0 +1,25 @@
+name: Code (check style)
+
+on:
+  push:
+  workflow_dispatch:
+
+concurrency:
+  group: "${{ github.ref }}"
+  cancel-in-progress: true
+
+jobs:
+  isort:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: isort/isort-action@v1.1.0
+        with:
+          sort-paths: api/
+  black:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: psf/black@stable
+        with:
+          src: api/

.github/workflows/test_and_build.yml

@@ -0,0 +1,89 @@
+name: Code (test and build)
+
+on:
+  push:
+    branches: ["dev"]
+  workflow_dispatch:
+  pull_request:
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  test_api:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - run: "./scripts/test-ci.sh"
+  build_api:
+    needs: test_api
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v3
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@v2
+      - name: Log into registry ${{ env.REGISTRY }}
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+      - name: Build/push API (dev)
+        uses: docker/build-push-action@v4
+        with:
+          context: ./api
+          target: development
+          push: true
+          tags: ${{ env.REGISTRY }}/${{env.IMAGE_NAME}}:api-dev
+      - name: Build/push API (prod)
+        uses: docker/build-push-action@v4
+        with:
+          context: ./api
+          target: production
+          push: true
+          tags: ${{ env.REGISTRY }}/${{env.IMAGE_NAME}}:api-latest
+  build_frontend:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v3
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@v2
+      - name: Log into registry ${{ env.REGISTRY }}
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+      - name: Build/push API (dev)
+        uses: docker/build-push-action@v4
+        with:
+          context: ./frontend
+          target: development
+          push: true
+          tags: ${{ env.REGISTRY }}/${{env.IMAGE_NAME}}:frontend-dev
+      - name: Build/push API (prod)
+        uses: docker/build-push-action@v4
+        with:
+          context: ./frontend
+          target: production
+          push: true
+          tags: ${{ env.REGISTRY }}/${{env.IMAGE_NAME}}:frontend-latest

.gitignore

@@ -0,0 +1 @@
+docker/.env

.gitlab-ci.yml

@@ -0,0 +1,179 @@
+stages:
+  - format
+  - build
+  - pages
+  - test
+  - deploy
+
+isort:
+  stage: format
+  image:
+    name: registry.gitlab.com/natural-solutions/images:isort-latest
+    entrypoint: [""]
+  script:
+    - isort api/ --check-only
+  tags:
+    - NSCICDDOCKER
+
+black:
+  stage: format
+  image:
+    name: cytopia/black
+    entrypoint: ["/bin/ash", "-c"]
+  script:
+    - python3 -m black --check --diff api/
+  tags:
+    - NSCICDDOCKER
+
+build_api_development:
+  stage: build
+  script:
+    - docker login ${CI_REGISTRY} -u gitlab-ci-token -p ${CI_BUILD_TOKEN}
+    - docker build --target development -t ${CI_REGISTRY_IMAGE}:api-dev ./api
+    - docker push ${CI_REGISTRY_IMAGE}:api-dev
+  only:
+    refs:
+      - dev
+    changes:
+      - api/**/*
+  tags:
+    - NSCICDDOCKER
+
+build_api_production:
+  stage: build
+  script:
+    - docker login ${CI_REGISTRY} -u gitlab-ci-token -p ${CI_BUILD_TOKEN}
+    - docker build --target production -t ${CI_REGISTRY_IMAGE}:api-latest ./api
+    - docker push ${CI_REGISTRY_IMAGE}:api-latest
+  only:
+    refs:
+      - dev
+    changes:
+      - api/**/*
+      - .gitlab-ci.yml
+  tags:
+    - NSCICDDOCKER
+
+build_frontend_development:
+  stage: build
+  script:
+    - docker login ${CI_REGISTRY} -u gitlab-ci-token -p ${CI_BUILD_TOKEN}
+    - docker build --target development -t ${CI_REGISTRY_IMAGE}:frontend-dev ./frontend
+    - docker push ${CI_REGISTRY_IMAGE}:frontend-dev
+  only:
+    refs:
+      - dev
+    changes:
+      - frontend/**/*
+  tags:
+    - NSCICDDOCKER
+
+build_frontend_production:
+  stage: build
+  script:
+    - docker login ${CI_REGISTRY} -u gitlab-ci-token -p ${CI_BUILD_TOKEN}
+    - docker build --target production -t ${CI_REGISTRY_IMAGE}:frontend-latest ./frontend
+    - docker push ${CI_REGISTRY_IMAGE}:frontend-latest
+  only:
+    refs:
+      - dev
+    changes:
+      - frontend/**/*
+      - .gitlab-ci.yml
+  tags:
+    - NSCICDDOCKER
+
+test_api:
+  stage: test
+  script:
+    - ./scripts/test-ci.sh
+  coverage: '/(?i)total.*? (100(?:\.0+)?\%|[1-9]?\d(?:\.\d+)?\%)$/'
+  artifacts:
+    reports:
+      coverage_report:
+        coverage_format: cobertura
+        path: ./api/coverage.xml
+  only:
+    changes:
+      - api/**/*
+  tags:
+    - NSCICDSHELL
+
+deploy_api:
+  stage: deploy
+  image: 
+    name: registry.gitlab.com/natural-solutions/ns-ansible-infrastructure:latest
+  script:
+    - cd /home/ansible
+    - export VAULT_TOKEN="$(vault write -field=token auth/jwt/login role=gitlab-runner-annotation jwt=$CI_JOB_JWT)"
+    - ansible-playbook playbooks/generate-ssh-key.yml --connection=local -e ssh_client_signer_role=geonature 
+    - ansible-playbook -i inventory.py playbooks/infra.yml -t deploy_one -e service=api
+  only:
+    refs:
+      - dev
+    changes:
+      - api/**/*
+      - .gitlab-ci.yml
+  variables:
+    INVENTORY_PATH: inventories/geonature/annotation
+    GIT_STRATEGY: none
+  tags:
+    - NSCICDDOCKER
+
+deploy_frontend:
+  stage: deploy
+  image: registry.gitlab.com/natural-solutions/ns-ansible-infrastructure:latest
+  script:
+    - cd /home/ansible
+    - export VAULT_TOKEN="$(vault write -field=token auth/jwt/login role=gitlab-runner-annotation jwt=$CI_JOB_JWT)"
+    - ansible-playbook playbooks/generate-ssh-key.yml --connection=local -e ssh_client_signer_role=geonature 
+    - ansible-playbook -i inventory.py playbooks/infra.yml -t deploy_one -e service=frontend
+  only:
+    refs:
+      - dev
+    changes:
+      - frontend/**/*
+      - .gitlab-ci.yml
+  variables:
+    INVENTORY_PATH: inventories/geonature/annotation
+    GIT_STRATEGY: none
+  tags:
+    - NSCICDDOCKER
+
+deploy_all:
+  stage: deploy
+  image: registry.gitlab.com/natural-solutions/ns-ansible-infrastructure:latest
+  script:
+    - cd /home/ansible
+    - export VAULT_TOKEN="$(vault write -field=token auth/jwt/login role=gitlab-runner-annotation jwt=$CI_JOB_JWT)"
+    - ansible-playbook playbooks/generate-ssh-key.yml --connection=local -e ssh_client_signer_role=geonature 
+    - ansible-playbook -i inventory.py playbooks/infra.yml -t deploy
+  only:
+    variables:
+      - $DEPLOY_ALL
+  variables:
+    INVENTORY_PATH: inventories/geonature/annotation
+    GIT_STRATEGY: none
+  tags:
+    - NSCICDDOCKER
+
+pages:
+  stage: pages
+  image:
+    name: squidfunk/mkdocs-material:8.1.10
+    entrypoint:
+      - ""
+  only:
+    refs:
+      - dev
+    changes:
+      - docs/**/*
+      - .gitlab-ci.yml
+  script:
+    - cd docs
+    - mkdocs build --site-dir ../public
+  artifacts:
+    paths:
+      - public
+  tags:
+    - NSCICDDOCKER

.vscode/launch.json

@@ -0,0 +1,41 @@
+{
+    // Use IntelliSense to learn about possible attributes.
+    // Hover to view descriptions of existing attributes.
+    // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "name": "Launch index.html",
+            "type": "firefox",
+            "request": "launch",
+            "reAttach": true,
+            "file": "${workspaceFolder}/index.html"
+        },
+        {
+            "name": "Launch localhost",
+            "type": "firefox",
+            "request": "launch",
+            "reAttach": true,
+            "url": "http://localhost:3000",
+            "webRoot": "${workspaceFolder}",
+            "pathMappings": [
+                {
+                    "url": "file:///app/src",
+                    "path": "${workspaceFolder}/frontend/src"
+                }
+            ]
+        },
+        {
+            "name": "Attach",
+            "type": "firefox",
+            "request": "attach"
+        },
+        {
+            "name": "Launch WebExtension",
+            "type": "firefox",
+            "request": "launch",
+            "reAttach": true,
+            "addonPath": "${workspaceFolder}"
+        }
+    ]
+}