Git分支策略与CI/CD集成：基于GitLab 16.8的团队协作工作流配置实践

stages:
  - lint
  - test
  - build
  - deploy

variables:
  MAVEN_OPTS: "-Dmaven.repo.local=.m2/repository"
  DOCKER_DRIVER: overlay2
  IMAGE_TAG: "$CI_COMMIT_SHORT_SHA"

cache:
  key: "$CI_COMMIT_REF_SLUG"
  paths:
    - .m2/repository/
    - node_modules/

lint:
  stage: lint
  image: node:20.11.1-alpine
  script:
    - npm ci
    - npm run lint
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
    - if: '$CI_COMMIT_BRANCH =~ /^feature\//'

unit-test:
  stage: test
  image: maven:3.9.6-eclipse-temurin-17
  script:
    - mvn -B test -Dmaven.test.failure.ignore=false
  artifacts:
    when: always
    reports:
      junit:
        - target/surefire-reports/TEST-*.xml
    expire_in: 7 days
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
    - if: '$CI_COMMIT_BRANCH == "develop"'
    - if: '$CI_COMMIT_BRANCH =~ /^release\//'

build-image:
  stage: build
  image: docker:24.0.7
  services:
    - docker:24.0.7-dind
  script:
    - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"
    - docker build -t "$CI_REGISTRY_IMAGE:$IMAGE_TAG" .
    - docker push "$CI_REGISTRY_IMAGE:$IMAGE_TAG"
  rules:
    - if: '$CI_COMMIT_BRANCH == "develop"'
    - if: '$CI_COMMIT_BRANCH =~ /^release\//'
    - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+$/'

deploy-dev:
  stage: deploy
  image: bitnami/kubectl:1.29
  script:
    - kubectl set image deployment/app app="$CI_REGISTRY_IMAGE:$IMAGE_TAG" -n dev
    - kubectl rollout status deployment/app -n dev --timeout=120s
  environment:
    name: dev
  rules:
    - if: '$CI_COMMIT_BRANCH == "develop"'

deploy-staging:
  stage: deploy
  image: bitnami/kubectl:1.29
  script:
    - kubectl set image deployment/app app="$CI_REGISTRY_IMAGE:$IMAGE_TAG" -n staging
    - kubectl rollout status deployment/app -n staging --timeout=180s
  environment:
    name: staging
  rules:
    - if: '$CI_COMMIT_BRANCH =~ /^release\//'

deploy-prod:
  stage: deploy
  image: bitnami/kubectl:1.29
  script:
    - kubectl set image deployment/app app="$CI_REGISTRY_IMAGE:$IMAGE_TAG" -n prod
    - kubectl rollout status deployment/app -n prod --timeout=300s
  environment:
    name: prod
  when: manual
  rules:
    - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+\.\d+$/'

pipeline {
    agent any

    options {
        disableConcurrentBuilds()
        timeout(time: 30, unit: 'MINUTES')
        buildDiscarder(logRotator(numToKeepStr: '30'))
    }

    environment {
        REGISTRY = 'harbor.internal.com'
        IMAGE_NAME = 'legacy-order-service'
        TAG = "${env.BUILD_NUMBER}-${env.GIT_COMMIT.take(8)}"
    }

    triggers {
        gitlab(triggerOnPush: true, triggerOnMergeRequest: true,
               branchFilterType: 'RegexBasedFilter',
               targetBranchRegex: '^(develop|release/.*|main)$')
    }

    stages {
        stage('Checkout') {
            steps {
                checkout scm
                sh 'git rev-parse --short HEAD'
            }
        }

        stage('Compile & Test') {
            steps {
                sh 'mvn -B clean test'
            }
            post {
                always {
                    junit 'target/surefire-reports/TEST-*.xml'
                }
            }
        }

        stage('Build Image') {
            when {
                anyOf {
                    branch 'develop'
                    branch pattern: 'release/.*', comparator: 'REGEXP'
                    tag pattern: 'v\\d+\\.\\d+\\.\\d+', comparator: 'REGEXP'
                }
            }
            steps {
                sh """
                    docker build -t ${REGISTRY}/${IMAGE_NAME}:${TAG} .
                    docker push ${REGISTRY}/${IMAGE_NAME}:${TAG}
                """
            }
        }

        stage('Deploy Dev') {
            when { branch 'develop' }
            steps {
                sh "kubectl set image deployment/order-svc order-svc=${REGISTRY}/${IMAGE_NAME}:${TAG} -n dev"
            }
        }

        stage('Deploy Prod') {
            when { tag pattern: 'v\\d+\\.\\d+\\.\\d+', comparator: 'REGEXP' }
            input {
                message "确认部署到生产环境?"
                ok "部署"
                submitter "admin,release-manager"
            }
            steps {
                sh "kubectl set image deployment/order-svc order-svc=${REGISTRY}/${IMAGE_NAME}:${TAG} -n prod"
            }
        }
    }

    post {
        failure {
            sh 'curl -s -X POST "https://open.feishu.cn/open-apis/bot/v2/hook/${FEISHU_TOKEN}" -H "Content-Type: application/json" -d "{\\"msg_type\\":\\"text\\",\\"content\\":{\\"text\\":\\"构建失败: ${JOB_NAME} #${BUILD_NUMBER}\\n${BUILD_URL}\\"}}"'
        }
    }
}

cache:
  key: "shared-cache-v2"
  paths:
    - .m2/repository/