Deploy

.github/workflows/netflzapp.yml

@@ -0,0 +1,22 @@
+name: Docker Build and Deploy
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    name: Build and Deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+
+
+      - name: Docker build and push
+        run: |
+          docker build --build-arg TMDB_V3_API_KEY=36a50cd7bedc727a9c31ebf3d41fc568 -t iscanprint/netflzapp:3.0 . -f Dockerfile2
+          docker login -u ${{ secrets.DOCKERHUB_USERNAME }} -p ${{ secrets.DOCKERHUB_TOKEN }}
+          docker push iscanprint/netflzapp:3.0

Dockerfile1

@@ -0,0 +1,18 @@
+FROM node:16.17.0-alpine as builder
+WORKDIR /app
+COPY ./package.json .
+COPY ./yarn.lock .
+RUN yarn cache clean && \
+    yarn --network-timeout 1000000
+COPY . .
+ARG TMDB_V3_API_KEY
+ENV VITE_APP_TMDB_V3_API_KEY=${TMDB_V3_API_KEY}
+ENV VITE_APP_API_ENDPOINT_URL="https://api.themoviedb.org/3"
+RUN yarn build
+
+FROM nginx:stable-alpine
+WORKDIR /usr/share/nginx/html
+RUN rm -rf ./*
+COPY --from=builder /app/dist .
+EXPOSE 80
+ENTRYPOINT ["nginx", "-g", "daemon off;"]

Dockerfile2

@@ -0,0 +1,22 @@
+FROM node:16.17.0-alpine as builder
+WORKDIR /app
+COPY ./package.json .
+COPY ./yarn.lock .
+RUN npm cache clean --force && \
+    yarn cache clean && \
+    yarn config delete proxy && \
+    yarn config delete https-proxy && \
+    yarn config delete registry && \
+    yarn --network-timeout 1000000
+COPY . .
+ARG TMDB_V3_API_KEY
+ENV VITE_APP_TMDB_V3_API_KEY=${TMDB_V3_API_KEY}
+ENV VITE_APP_API_ENDPOINT_URL="https://api.themoviedb.org/3"
+RUN yarn build
+
+FROM nginx:stable-alpine
+WORKDIR /usr/share/nginx/html
+RUN rm -rf ./*
+COPY --from=builder /app/dist .
+EXPOSE 80
+ENTRYPOINT ["nginx", "-g", "daemon off;"]

Jenkinsfile

@@ -0,0 +1,98 @@
+pipeline{
+    agent any
+    tools{
+        jdk 'jdk'
+        nodejs 'nodejs'
+    }
+    environment {
+        SCANNER_HOME=tool 'scanner'
+    }
+    stages {
+        stage('1.0 clean workspace'){
+            steps{
+                cleanWs()
+            }
+        }
+        stage('2.0 Checkout from Git'){
+            steps{
+                git branch: 'main', url: 'https://github.com/FortressTechnologiesInc/netflzapp.git'
+            }
+        }
+       stage('3.0 OWASP Scan') {
+            steps {
+                dependencyCheck additionalArguments: '--scan ./', odcInstallation: 'DP'
+                dependencyCheckPublisher pattern: '**/dependency-check-report.xml'
+            }
+        }
+
+        stage("4.0 Sonarqube Analysis") {
+            steps {
+                withSonarQubeEnv('sonar') {
+                    sh ''' $SCANNER_HOME/bin/sonar-scanner -Dsonar.projectName=netflzapp -Dsonar.java.binaries=. -Dsonar.projectKey=netflzapp '''
+                }
+            }
+        }
+        stage('Quality Check') {
+            steps {
+                script {
+                    waitForQualityGate abortPipeline: false, credentialsId: 'sonar' 
+                }
+            }
+        }
+        stage("5.0 Trivy FS SCAN") {
+            steps {
+                sh "trivy fs ."
+            }
+        }
+        stage("6.0 Docker Build & Push"){
+            steps{
+                script{
+                   withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){   
+                       sh "docker build --build-arg TMDB_V3_API_KEY=36a50cd7bedc727a9c31ebf3d41fc568 -t netflzapp . -f /root/appnode/workspace/netflzapp/Dockerfile"
+                       sh "docker tag netflzapp limkel/netflzapp "
+                       sh "docker push limkel/netflzapp "
+                       sh "trivy image limkel/netflzapp > trivyimage.txt"
+                       sh "docker rmi -f limkel/netflzapp "
+                    }
+                }
+            }
+        }
+        stage("7.0 TRIVY"){
+            steps{
+                sh "trivy image limkel/netflzapp > trivyimage.txt" 
+            }
+        }
+
+        stage('8.0 Deploy to kubernets'){
+            steps{
+                script{
+                    dir('Kubernetes') {
+                        withKubeConfig(caCertificate: '', clusterName: '', contextName: '', credentialsId: 'spjt', namespace: 'netflzapp', restrictKubeConfigAccess: false, serverUrl: 'https://192.168.49.2:8443') {
+                                sh 'kubectl apply -f /root/appnode/workspace/netflzapp/deployment.yml -n netflzapp'
+                                sh 'kubectl get po -n netflzapp'
+                                sh 'kubectl get svc  -n netflzapp'
+                        }   
+                    }
+                }
+            }
+        }
+        stage('9.0clean workspace'){
+            steps{
+                cleanWs()
+            }
+        }
+
+    }
+    post {
+     always {
+        emailext attachLog: true,
+            subject: "'${currentBuild.result}'",
+            body: "Project: ${env.JOB_NAME}<br/>" +
+                "Build Number: ${env.BUILD_NUMBER}<br/>" +
+                "URL: ${env.BUILD_URL}<br/>",
+            to: 'deniferdavies@gmail.com', 
+            attachmentsPattern: 'trivyfs.txt,trivyimage.txt'
+        }
+    }
+
+}

deployment.yml

@@ -1,21 +1,39 @@
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: netflix-app
+  name: netflzapp
+  namespace: netflzapp
   labels:
-    app: netflix-app
+    app: netflzapp
 spec:
-  replicas: 2
+  replicas: 1
   selector:
     matchLabels:
-      app: netflix-app
+      app: netflzapp
   template:
     metadata:
       labels:
-        app: netflix-app
+        app: netflzapp
     spec:
       containers:
-      - name: netflix-app
-        image: gajananbarure/my_netflixapp_image
-        ports:
-        - containerPort: 80
+        - name: netflzapp
+          image: iscanprint/netflzapp:3.0
+          ports:
+            - containerPort: 80
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: netflzapp
+  namespace: netflzapp
+  labels:
+    app: netflzapp
+spec:
+  type: LoadBalancer   #NodePort
+  ports:
+    - port: 80
+      targetPort: 80
+      nodePort: 30007
+  selector:
+    app: netflzapp

sonar-project.properties

@@ -0,0 +1 @@
+sonar.projectKey=netflzapp

src/deploy

@@ -0,0 +1 @@
+