.drone.yml

---
kind: pipeline
name: build
trigger:
  branch:
    - master
  event:
    exclude:
      - promote
      - rollback

steps:
  - name: api
    image: plugins/docker
    settings:
      registry: registry.home.devmem.ru
      repo: registry.home.devmem.ru/gia/api
      dockerfile: .docker/django/Dockerfile-drone
      cache_from: registry.home.devmem.ru/gia/api:latest
      tags:
        - ${DRONE_COMMIT_SHA:0:8}
        - latest

  - name: postgres
    image: plugins/docker
    settings:
      registry: registry.home.devmem.ru
      repo: registry.home.devmem.ru/gia/postgres
      dockerfile: .docker/postgres/Dockerfile
      context: .docker/postgres
      cache_from: registry.home.devmem.ru/gia/postgres:latest
      tags:
        - latest

  - name: redis
    image: plugins/docker
    settings:
      registry: registry.home.devmem.ru
      repo: registry.home.devmem.ru/gia/redis
      dockerfile: .docker/redis/Dockerfile
      context: .docker/redis
      cache_from: registry.home.devmem.ru/gia/redis:latest
      tags:
        - latest

---
kind: pipeline
name: test
trigger:
  event:
    exclude:
      - promote
      - rollback
depends_on:
  - build

services:
  - name: postgres
    image: postgres:12-alpine
    environment:
      POSTGRES_USER: dbuser
      POSTGRES_PASSWORD: dbpass

steps:
  - name: test
    image: registry.home.devmem.ru/gia/api:latest
    environment:
      DJANGO_DATABASE_URL: postgres://dbuser:dbpass@postgres:5432/dbuser
      DJANGO_SETTINGS_MODULE: config.settings.local
      PYTHONPATH: ${PYTHONPATH}:/drone/src/gia-api
    commands:
      - pip install --no-cache-dir -r gia-api/requirements/testing.txt
      - pytest

---
kind: pipeline
name: deploy
trigger:
  branch:
    - master
  event:
    - promote

steps:
  - name: ansible-syntax-check
    image: plugins/ansible
    settings:
      requirements: .ansible/requirements.txt
      playbook: .ansible/playbook.yml
      inventory: .ansible/hosts
      extra_vars: image_tag=${DRONE_COMMIT_SHA:0:8}
      vault_password:
        from_secret: ansible_vault_password
      syntax_check: true

  - name: ansible-deploy
    image: plugins/ansible
    settings:
      requirements: .ansible/requirements.txt
      playbook: .ansible/playbook.yml
      inventory: .ansible/hosts
      extra_vars: image_tag=${DRONE_COMMIT_SHA:0:8}
      vault_password:
        from_secret: ansible_vault_password
      private_key:
        from_secret: ansible_private_key
    when:
      target:
        - prod