first import

.gitlab-ci.yml

@@ -0,0 +1,23 @@
+image: docker:latest
+
+services:
+  - docker:dind
+
+before_script:
+  - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
+
+build-master:
+  stage: build
+  script:
+    - docker build --pull -t "$CI_REGISTRY_IMAGE" .
+    - docker push "$CI_REGISTRY_IMAGE"
+  only:
+    - master
+
+build:
+  stage: build
+  script:
+    - docker build --pull -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG" .
+    - docker push "$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG"
+  except:
+    - master

Dockerfile

@@ -0,0 +1,5 @@
+ARG  VERSION="latest"
+FROM "jcabillot/phpapache:${VERSION}"
+LABEL maintainer="Julien Cabillot <dockerimages@cabillot.eu>"
+
+COPY "root" "/var/www/html"

Jenkinsfile

@@ -0,0 +1,38 @@
+pipeline {
+  environment {
+    registry = 'https://registry.hub.docker.com'
+    registryCredential = 'dockerhub_jcabillot'
+    dockerImage = 'jcabillot/cv'
+  }
+
+  agent any
+
+  triggers {
+    cron('@midnight')
+  }
+
+  stages {
+    stage('Clone repository') {
+      steps{
+        checkout scm
+      }
+    }
+
+    stage('Build image') {
+      steps{
+        sh 'docker build --force-rm=true --no-cache=true --pull -t ${dockerImage} .'
+      }
+    }
+
+    stage('Deploy Image') {
+      steps{
+        script {
+          withCredentials([usernamePassword(credentialsId: 'dockerhub_jcabillot', usernameVariable: 'DOCKER_USER', passwordVariable: 'DOCKER_PASS')]) {
+            sh 'docker login --username ${DOCKER_USER} --password ${DOCKER_PASS}'
+            sh 'docker push ${dockerImage}'
+          }
+        }
+      }
+    }
+  }
+}

kustomize/depl.yml

@@ -0,0 +1,35 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: "cv"
+  labels:
+    app: "front"
+spec:
+  template:
+    metadata:
+      name: "front-apache"
+      labels:
+        owner: "jcabillot"
+        app: "front"
+    spec:
+      automountServiceAccountToken: false
+      containers:
+        - name:  "front-apache"
+          image: "jcabillot/cv"
+          ports:
+            - name: "http"
+              containerPort: 8080
+              protocol: "TCP"
+          livenessProbe:
+            httpGet:
+              path: "/"
+              port: "http"
+          readinessProbe:
+            httpGet:
+              path: "/"
+              port: "http"
+
+  replicas: 1
+  selector:
+    matchLabels:
+      app: "front"

kustomize/ingress.yml

@@ -0,0 +1,25 @@
+---
+#apiVersion: networking.k8s.io/v1
+#kind: Ingress
+#metadata:
+#  name: "cv"
+#  annotations:
+#    kubernetes.io/ingress.class: "traefik"
+#    traefik.ingress.kubernetes.io/router.entrypoints: "web,websecure"
+#    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+#spec:
+#  tls:
+#    - hosts:
+#        - "cv.opti.cabillot.eu"
+#      secretName: "cvcabilloteu-tls"
+#  rules:
+#  - host: "cv.opti.cabillot.eu"
+#    http:
+#      paths:
+#      - path: "/"
+#        pathType: "Prefix"
+#        backend:
+#          service:
+#            name: "cv"
+#            port:
+#              name: "http"

kustomize/ingressroute.yml

@@ -0,0 +1,50 @@
+---
+# TODO: Named port for service
+# but currently unsupported on my k3s cluster https://github.com/traefik/traefik/pull/7668
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: "cv-websecure"
+spec:
+  entryPoints:
+    - "websecure"
+  routes:
+  - kind: Rule
+    match: Host(`cv.opti.cabillot.eu`)
+    middlewares: []
+    priority: 10
+    services:
+    - kind: Service
+      name: "cv"
+      port: 80
+  tls:
+    secretName: "cvcabilloteu-tls"
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: IngressRoute
+metadata:
+  name: "cv-web"
+spec:
+  entryPoints:
+    - "web"
+  routes:
+  - match: Host(`cv.opti.cabillot.eu`)
+    kind: Rule
+    priority: 10
+    services:
+    # in this IngressRoute the service will be never called
+    # because of the redirect middleware BUT DO NOT REMOVE !
+    - kind: Service
+      name: "cv"
+      port: 80
+    middlewares:
+    - name: "httpsredirect"
+---
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: "httpsredirect"
+spec:
+  redirectScheme:
+    scheme: https
+    permanent: true

kustomize/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- depl.yml
+- ingress.yml
+- ingressroute.yml
+- svc.yml

kustomize/svc.yml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: 'cv'
+spec:
+  type: "ClusterIP"
+  ports:
+    - name: "http"
+      port: 80
+      protocol: "TCP"
+      targetPort: "http"
+  selector:
+    app: "front"

root/index.html

@@ -0,0 +1,9 @@
+<html>
+  <head>
+    <title>Redirection vers mon CV</title>
+    <meta http-equiv="refresh" content="0; URL=/cabillot_julien_cv.pdf">
+  </head>
+  <body>
+    Si votre navigateur ne vous redirige pas automatiquement : <a href="/cabillot_julien_cv.pdf">mon CV</a>
+  </body>
+</html>