CI: Add build jobs

Author: nitramiz

.gitlab-ci.yml

@@ -0,0 +1,37 @@
+variables:
+  DOCKER_HOST: tcp://docker:2375
+  DOCKER_TLS_CERTDIR: ""
+  DOCKER_BUILDKIT: 1
+  CI_DISPOSABLE_ENVIRONMENT: "true"
+  REGION: "europe-west2"
+  GAR: "${REGION}-docker.pkg.dev/green-backend/green-backend-${REGION}"
+  BACKEND_IMAGE: "${GAR}/simplicity-lending-backend"
+  WEB_IMAGE: "${GAR}/simplicity-lending-web"
+
+stages:
+  - build
+
+default:
+  image: glregistry.blockstream.io/blockstream/p/gcloud-docker:502.0.0-27.3
+  services:
+    - name: docker:27-dind
+      command: ["dockerd", "--host=tcp://0.0.0.0:2375", "--mtu=1450"]
+      alias: docker
+  tags:
+    - cloud
+  retry:
+    max: 2
+    when:
+      - runner_system_failure
+      - unknown_failure
+      - stuck_or_timeout_failure
+
+## disables MR-triggered pipelines and allows only branch-triggered pipelines
+workflow:
+  rules:
+    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
+      when: never
+    - when: always
+
+include:
+  - gitlab/**.yaml

gitlab/build.yaml

@@ -0,0 +1,23 @@
+build_backend:
+  extends:
+    - .auth_gcp
+    - .build_docker
+  needs:
+    - job: create_timestamp
+      artifacts: true
+  variables:
+    ARCH: amd64
+    IMAGE: ${BACKEND_IMAGE}
+    DOCKERFILE: deployment/Dockerfile.backend
+
+build_web:
+  extends:
+    - .auth_gcp
+    - .build_docker
+  needs:
+    - job: create_timestamp
+      artifacts: true
+  variables:
+    ARCH: amd64
+    IMAGE: ${WEB_IMAGE}
+    DOCKERFILE: deployment/Dockerfile.web

gitlab/functions.yaml

@@ -0,0 +1,58 @@
+# Timestamp to be shared by all deploy jobs in the pipeline
+create_timestamp:
+  stage: .pre
+  variables:
+    GIT_STRATEGY: none
+  script:
+    - export TIMESTAMP=$(date +%Y%m%d%H%M%S)
+    - echo "TIMESTAMP=${TIMESTAMP}" >> timestamp.env
+    - echo "Generated timestamp ${TIMESTAMP}"
+  artifacts:
+    reports:
+      dotenv: timestamp.env
+
+.auth_gcp:
+  variables:
+    PROJECT_NUMBER: 697214616889
+    POOL_ID: gitlab-2f4bb583
+    PROVIDER_ID: gitlab
+    SERVICE_ACCOUNT_EMAIL: gitlab-cicd@green-backend.iam.gserviceaccount.com
+  id_tokens:
+    GITLAB_OIDC_TOKEN:
+      aud: https://gl.blockstream.io
+  before_script:
+    - echo ${GITLAB_OIDC_TOKEN} > .ci_job_jwt_file
+    - export PATH=/opt/google-cloud-sdk/bin:$PATH
+    - gcloud iam workload-identity-pools create-cred-config "projects/${PROJECT_NUMBER}/locations/global/workloadIdentityPools/${POOL_ID}/providers/${PROVIDER_ID}"
+      --service-account="${SERVICE_ACCOUNT_EMAIL}"
+      --output-file=.gcp_temp_cred.json
+      --credential-source-file=.ci_job_jwt_file
+    - gcloud auth login --cred-file=.gcp_temp_cred.json --update-adc
+    - gcloud auth list
+    - gcloud auth configure-docker ${REGION}-docker.pkg.dev
+
+.build_docker:
+  stage: build
+  when: manual
+  script:
+    - PLATFORM=linux/${ARCH}
+    - TAG=${CI_COMMIT_SHORT_SHA}-${TIMESTAMP}
+    - echo "Using timestamp ${TIMESTAMP} and tag ${TAG}"
+    - GAR_IMAGE=${IMAGE}
+    - GAR_IMAGE_LATEST=${GAR_IMAGE}:latest
+    - GAR_IMAGE_TAG=${GAR_IMAGE}:${TAG}
+    - docker buildx create
+      --driver=docker-container
+      --name=buildkit-builder
+      --use
+      --platform ${PLATFORM}
+    - docker buildx build
+      --platform ${PLATFORM}
+      --cache-from ${GAR_IMAGE_LATEST}
+      --load
+      -f ${DOCKERFILE}
+      -t ${GAR_IMAGE_LATEST}
+      -t ${GAR_IMAGE_TAG} .
+    - docker push ${GAR_IMAGE_TAG}
+    - echo "pushed ${GAR_IMAGE_TAG}"
+    - if [ ${CI_COMMIT_BRANCH} == ${CI_DEFAULT_BRANCH} ]; then docker push ${GAR_IMAGE_LATEST}; echo "pushed ${GAR_IMAGE_LATEST}"; fi