ci: optimizar pipelines de CI/CD y actualizar documentación de infraestructura

.github/workflows/cd-build.yml

@@ -0,0 +1,79 @@
+name: CD Build Pipeline
+
+on:
+  push:
+    branches: [dev,test,main]
+
+jobs:
+  build:
+    name: Build Applications
+    runs-on: 
+    - kubernetes #Runner cloud (default)
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 
+
+      - name: Build in maven
+        with:
+          skip-tests: true
+        uses: codeparce/ci-workflows/.github/actions/build/maven@v1
+
+  docker-publish:
+    name: Dokcer Publish
+    needs: [ build]
+    permissions:
+      contents: read
+      packages: write
+    runs-on: 
+    - kubernetes #Runner on-premise
+    #- ubuntu-latest #Runner cloud (default)
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download build artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: service-build
+          path: target
+
+      - name: Publish to Docker Hub
+        uses: codeparce/ci-workflows/.github/actions/docker@v1
+        with:
+          target-branch: ${{ github.sha }}
+          account-name: ${{ secrets.DOCKER_ACCOUNT_NAME}}
+          access-token: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+
+
+  scan-image:
+    name: Scan Docker Image
+    needs: docker-publish
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Login to Registry
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_ACCOUNT_NAME}}
+          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+
+      - name: Trivy image scan
+        uses: aquasecurity/trivy-action@v0.36.0
+        with:
+          scan-type: image
+          image-ref: ${{ secrets.DOCKER_ACCOUNT_NAME}}/${{ github.event.repository.name }}:${{ github.sha }}
+          scanners: vuln,secret
+          vuln-type: os,library
+          severity: HIGH,CRITICAL
+          ignore-unfixed: true
+          format: table
+          output: trivy-results.txt
+          exit-code: '0' # bypass
+
+      - name: Summary of Trivy Scan Results
+        if: always()
+        uses: codeparce/ci-workflows/.github/actions/github/summary@v1
+        with:
+          scaner-name: Image Scaner
+          report-file: trivy-results.txt

.github/workflows/cd-deploy-cloud.yml

@@ -1,8 +1,12 @@
-name: CD Actions Pipeline (deploy aws)
+name: CD Deploy in AWS
 
 on:
   workflow_dispatch:
-
+    branches:
+      - dev
+      - test
+      - main
+
 permissions:
   contents: read
   id-token: write
@@ -43,10 +47,15 @@ jobs:
         working-directory: IaC
         run: | 
          envsubst < provider.tf.template> provider.tf
-         terraform init 
+         terraform init > terraform.log 2> error.log
 
       - name: Deploy en aws
         working-directory: IaC
         run: |
-          terraform apply -auto-approve 
-          echo "✅ Deploy completado"
+          terraform apply -input=false > terraform.log 2> error.log
+          echo "✅ Deploy completado" >> error.log
+
+      - name: Check Execution
+        if: always()
+        working-directory: IaC
+        run: cat error.log

.github/workflows/cd-deploy-kb.yml

@@ -1,86 +1,16 @@
-name: CD Actions Pipeline (kuberenets on-premise)
+name: CD Deploy Kuberenets on-premise
 
 on:
   workflow_dispatch:
-
+    branches:
+      - dev
+      - test
+      - main
+
 jobs:
-  build:
-    name: Build Applications
-    runs-on: 
-    - kubernetes #Runner cloud (default)
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0 
-
-      - name: Build in maven
-        with:
-          skip-tests: true
-        uses: codeparce/ci-workflows/.github/actions/build/maven@v1
-
-  docker-publish:
-    name: Dokcer Publish
-    needs: [ build]
-    permissions:
-      contents: read
-      packages: write
-    runs-on: 
-    - kubernetes #Runner on-premise
-    #- ubuntu-latest #Runner cloud (default)
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Download build artifact
-        uses: actions/download-artifact@v4
-        with:
-          name: service-build
-          path: target
-
-      - name: Publish to Docker Hub
-        uses: codeparce/ci-workflows/.github/actions/docker@v1
-        with:
-          target-branch: ${{ github.sha }}
-          account-name: ${{ secrets.DOCKER_ACCOUNT_NAME}}
-          access-token: ${{ secrets.DOCKER_ACCESS_TOKEN }}
-
-
-  scan-image:
-    name: Scan Docker Image
-    needs: docker-publish
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - name: Login to Registry
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKER_ACCOUNT_NAME}}
-          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
-
-      - name: Trivy image scan
-        uses: aquasecurity/trivy-action@v0.36.0
-        with:
-          scan-type: image
-          image-ref: ${{ secrets.DOCKER_ACCOUNT_NAME}}/${{ github.event.repository.name }}:${{ github.sha }}
-          scanners: vuln,secret
-          vuln-type: os,library
-          severity: HIGH,CRITICAL
-          ignore-unfixed: true
-          format: table
-          output: trivy-results.txt
-          exit-code: '0' # bypass
-
-      - name: Summary of Trivy Scan Results
-        if: always()
-        uses: codeparce/ci-workflows/.github/actions/github/summary@v1
-        with:
-          scaner-name: Image Scaner
-          report-file: trivy-results.txt
-
   deploy:
     runs-on: kubernetes #Runner on-premise
     name: Deploy in Kubernetes
-    needs: docker-publish
     env:
       GITHUB_REPOSITORY_NAME: ${{ github.event.repository.name }}
       GITHUB_REF_NAME: ${{ github.ref_name }}

.github/workflows/ci-pipeline.yml

@@ -2,7 +2,7 @@ name: CI Actions Pipeline
 
 on:
   pull_request:
-    branches: [dev,test]
+    branches: [dev,test,main]
   workflow_dispatch:
 
 jobs:

.gitignore

@@ -1,6 +1,4 @@
 HELP.md
-INTI.MD
-CHECKLIST_ES.md
 values.yaml
 target/
 !.mvn/wrapper/maven-wrapper.jar

DEMO.md

@@ -0,0 +1,142 @@
+# Demo Devops Java
+
+This is a simple application to be used in the technical test of DevOps.
+
+## Getting Started
+
+### Prerequisites
+
+- Java Version 17
+- Spring Boot 3.0.5
+- Maven
+
+### Installation
+
+Clone this repo.
+
+```bash
+git clone https://bitbucket.org/devsu/demo-devops-java.git
+```
+
+### Database
+
+The database is generated as a file in the main path when the project is first run, and its name is `test.mv.db`.
+
+Consider giving access permissions to the file for proper functioning.
+
+## Usage
+
+To run tests you can use this command.
+
+```bash
+mvn clean test
+```
+
+To run locally the project you can use this command.
+
+```bash
+mvn spring-boot:run
+```
+
+Open http://127.0.0.1:8000/api/swagger-ui.html with your browser to see the result.
+
+### Features
+
+These services can perform,
+
+#### Create User
+
+To create a user, the endpoint **/api/users** must be consumed with the following parameters:
+
+```bash
+  Method: POST
+```
+
+```json
+{
+    "dni": "dni",
+    "name": "name"
+}
+```
+
+If the response is successful, the service will return an HTTP Status 200 and a message with the following structure:
+
+```json
+{
+    "id": 1,
+    "dni": "dni",
+    "name": "name"
+}
+```
+
+If the response is unsuccessful, we will receive status 400 and the following message:
+
+```json
+{
+    "errors": [
+        "error"
+    ]
+}
+```
+
+#### Get Users
+
+To get all users, the endpoint **/api/users** must be consumed with the following parameters:
+
+```bash
+  Method: GET
+```
+
+If the response is successful, the service will return an HTTP Status 200 and a message with the following structure:
+
+```json
+[
+    {
+        "id": 1,
+        "dni": "dni",
+        "name": "name"
+    }
+]
+```
+
+#### Get User
+
+To get an user, the endpoint **/api/users/<id>** must be consumed with the following parameters:
+
+```bash
+  Method: GET
+```
+
+If the response is successful, the service will return an HTTP Status 200 and a message with the following structure:
+
+```json
+{
+    "id": 1,
+    "dni": "dni",
+    "name": "name"
+}
+```
+
+If the user id does not exist, we will receive status 404 and the following message:
+
+```json
+{
+    "errors": [
+        "User not found: <id>"
+    ]
+}
+```
+
+If the response is unsuccessful, we will receive status 400 and the following message:
+
+```json
+{
+    "errors": [
+        "error"
+    ]
+}
+```
+
+## License
+
+Copyright © 2023 Devsu. All rights reserved.

INTI.MD

@@ -0,0 +1,20 @@
+# devsu-demo-devops-java
+
+Repositorio devsu-demo-devops-java: https://github.com/codeparceorg/devsu-demo-devops-java
+
+pipeline Despliegue kuberentes (CD): https://github.com/codeparceorg/devsu-demo-devops-java/actions/workflows/cd-deploy-kb.yml
+
+pipeline Despliegue aws (CD): https://github.com/codeparceorg/devsu-demo-devops-java/actions/workflows/cd-deploy-cloud.yml
+
+pipeline Build y publish (CI): https://github.com/codeparceorg/devsu-demo-devops-java/actions/workflows/cd-build.yml
+
+pipeline Validate y Scan (CI): https://github.com/codeparceorg/devsu-demo-devops-java/actions/workflows/ci-pipeline.yml
+
+
+# infra-microservice-aws
+
+Repositorio infra-microservice-aws: https://github.com/codeparceorg/infra-microservice-aws
+
+pipeline Despliegue aws (CD): https://github.com/codeparceorg/infra-microservice-aws/actions/workflows/cd-deploy.yml
+
+pipeline terraform Inti: https://github.com/codeparceorg/infra-microservice-aws/actions/workflows/ci-init.yml