Initial commit

.gitattributes

@@ -0,0 +1,2 @@
+/mvnw text eol=lf
+*.cmd text eol=crlf

.github/workflows/test-on-pr.yaml

@@ -0,0 +1,142 @@
+name: Test on PR
+
+on:
+  # For demo purposes only
+  workflow_dispatch:
+  pull_request:
+    branches: [ "master" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    env:
+      REGISTRY: ghcr.io
+      IMAGE_NAME: ${{ github.repository }}
+      DOCKER_BUILD_RECORD_RETENTION_DAYS: 1
+      VCLUSTER_VERSION: v0.22.1
+      GH_PG_USER: testuser
+      GH_PG_PASSWORD: testpassword
+      GH_PG_DB: testdb
+    services:
+      postgres:
+        image: postgres:15
+        options: >-
+          --health-cmd "pg_isready -U $POSTGRES_USER"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+            - 5432/tcp
+        env:
+          POSTGRES_USER: ${{ env.GH_PG_USER }}
+          POSTGRES_PASSWORD: ${{ env.GH_PG_PASSWORD }}
+          POSTGRES_DB: ${{ env.GH_PG_DB }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install JRE
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 21
+          cache: maven
+      - name: Cache build artifacts
+        uses: actions/cache@v4
+        with:
+          path: target
+          key: ${{ runner.os }}-build-${{ github.sha }}
+          restore-keys:
+            ${{ runner.os }}-build
+      - name: Run "unit" tests
+        run: ./mvnw -B test
+        env:
+          SPRING_FLYWAY_URL: jdbc:postgresql://localhost:${{ job.services.postgres.ports['5432'] }}/${{ env.GH_PG_DB }}
+          SPRING_R2DBC_URL: r2dbc:postgresql://localhost:${{ job.services.postgres.ports['5432'] }}/${{ env.GH_PG_DB }}
+          SPRING_R2DBC_USERNAME: ${{ env.GH_PG_USER }}
+          SPRING_R2DBC_PASSWORD: ${{ env.GH_PG_PASSWORD }}
+      - name: Authenticate on Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          workload_identity_provider: projects/49535911505/locations/global/workloadIdentityPools/github-actions/providers/github-provider
+          service_account: [email protected]
+      - name: Set GKE credentials
+        uses: google-github-actions/get-gke-credentials@v2
+        with:
+          cluster_name: minimal-cluster
+          location: europe-west9
+      - name: Edit image tag with GitHub Run ID
+        run: (cd kubernetes && kustomize edit set image ghcr.io/ajavageek/vcluster-pipeline=:${{github.run_id}})
+      - name: Install vCluster
+        run: wget -O vcluster "https://github.com/loft-sh/vcluster/releases/download/${{ env.VCLUSTER_VERSION }}/vcluster-linux-amd64" && chmod u+x vcluster && mv vcluster /usr/local/bin
+      - name: Create a vCluster
+        id: vcluster
+        run: time vcluster create vcluster-pipeline-${{github.run_id}}
+      - name: Connect to the vCluster
+        run: vcluster connect vcluster-pipeline-${{github.run_id}}
+      - name: Schedule PostgreSQL
+        run: helm install postgresql oci://registry-1.docker.io/bitnamicharts/postgresql --values kubernetes/values.yaml
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Log into registry ${{ env.REGISTRY }}
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=raw,value=${{github.run_id}}
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          push: true
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+      - name: Set config map from values.yaml
+        run: |
+          kubectl create configmap postgres-config \
+            --from-literal="SPRING_FLYWAY_URL=jdbc:postgresql://$(yq .fullnameOverride kubernetes/values.yaml):5432/" \
+            --from-literal="SPRING_R2DBC_URL=r2dbc:postgresql://$(yq .fullnameOverride kubernetes/values.yaml):5432/" \
+            --from-literal="SPRING_R2DBC_USERNAME=$(yq .auth.user kubernetes/values.yaml)" \
+            --from-literal="SPRING_R2DBC_PASSWORD=$(yq .auth.password kubernetes/values.yaml)"
+      - name: Create Docker Registry Secret
+        run: |
+          kubectl create secret docker-registry github-docker-registry \
+            --docker-server=${{ env.REGISTRY }} --docker-email="[email protected]" \
+            --docker-username="${{ github.actor }}" --docker-password="${{ secrets.GITHUB_TOKEN }}" \
+            --dry-run=client -o yaml | kubectl apply -f -
+      - name: Deploy Kustomized manifest to Google Cloud
+        run: kubectl apply -k kubernetes
+      - name: Retrieve LoadBalancer external IP inside the vCluster
+        run: |
+          for i in {1..10}; do
+            EXTERNAL_IP=$(kubectl get service vcluster-pipeline -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
+            if [ -n "$EXTERNAL_IP" ]; then
+              break
+            fi
+            echo "Waiting for external IP..."
+            sleep 10
+          done
+          if [ -z "$EXTERNAL_IP" ]; then
+            echo "Error: External IP not assigned to the service" >&2
+            exit 1
+          fi
+          APP_BASE_URL="http://${EXTERNAL_IP}:8080"
+          echo "APP_BASE_URL=$APP_BASE_URL" >> $GITHUB_ENV
+          echo "External IP is $APP_BASE_URL"
+      - name: Run integration tests
+        run: ./mvnw -B verify -Dtest=SkipAll -Dsurefire.failIfNoSpecifiedTests=false
+      - name: Delete the vCluster
+        if: ${{ !cancelled() && steps.vcluster.conclusion == 'success' }}
+        run: vcluster delete vcluster-pipeline-${{github.run_id}}

.gitignore

@@ -0,0 +1,33 @@
+HELP.md
+target/
+!.mvn/wrapper/maven-wrapper.jar
+!**/src/main/**/target/
+!**/src/test/**/target/
+
+### STS ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+
+### IntelliJ IDEA ###
+.idea
+*.iws
+*.iml
+*.ipr
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+build/
+!**/src/main/**/build/
+!**/src/test/**/build/
+
+### VS Code ###
+.vscode/

.mvn/wrapper/maven-wrapper.properties

@@ -0,0 +1,19 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+wrapperVersion=3.3.2
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip

Dockerfile

@@ -0,0 +1,17 @@
+#docker build -t vcluster-pipeline:1.0 .
+FROM eclipse-temurin:21-jdk-jammy AS build
+
+COPY .mvn .mvn
+COPY mvnw .
+COPY pom.xml .
+COPY src src
+
+RUN --mount=type=cache,target=/root/.m2,rw ./mvnw package -DskipTests
+
+FROM eclipse-temurin:21-jre-jammy
+
+COPY --from=build target/vcluster-pipeline-1.0.jar vcluster-pipeline.jar
+
+EXPOSE 8080
+
+ENTRYPOINT ["java", "-jar", "vcluster-pipeline.jar"]

kubernetes/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - vcluster-pipeline.yaml
+images:
+  - name: ghcr.io/ajavageek/vcluster-pipeline
+    newTag: github.run_id

kubernetes/values.yaml

@@ -0,0 +1,8 @@
+fullnameOverride: postgres
+auth:
+  user: postgres
+  password: root
+  postgresPassword: roottoo
+primary:
+  persistence:
+    enabled: false

kubernetes/vcluster-pipeline.yaml

@@ -0,0 +1,38 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: vcluster-pipeline
+  labels:
+    type: app
+    app: vcluster-pipeline
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: vcluster-pipeline
+  template:
+    metadata:
+      labels:
+        type: app
+        app: vcluster-pipeline
+    spec:
+      containers:
+        - name: vcluster-pipeline
+          image: ghcr.io/ajavageek/vcluster-pipeline:latest
+          envFrom:
+            - configMapRef:
+                name: postgres-config
+      imagePullSecrets:
+        - name: github-docker-registry
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: vcluster-pipeline
+spec:
+  type: LoadBalancer
+  ports:
+    - port: 8080
+      targetPort: 8080
+  selector:
+    app: vcluster-pipeline