Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
Léo-Paul Géneau
gitlab-ce
Commits
1813bb98
Commit
1813bb98
authored
Nov 08, 2018
by
Rémy Coutable
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Improve the Review Apps documentation a bit
Signed-off-by:
Rémy Coutable
<
remy@rymai.me
>
parent
369631c8
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
50 additions
and
42 deletions
+50
-42
doc/development/testing_guide/review_apps.md
doc/development/testing_guide/review_apps.md
+50
-42
No files found.
doc/development/testing_guide/review_apps.md
View file @
1813bb98
# Review
a
pps
# Review
A
pps
Review Apps are automatically deployed by each pipeline, both in
Review Apps are automatically deployed by each pipeline, both in
[
CE
](
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/22010
)
and
[
CE
](
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/22010
)
and
[
EE
](
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/6665
)
.
[
EE
](
https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/6665
)
.
## How does it work?
## How does it work?
1.
On every
[
pipeline
][
gitlab-pipeline
]
during the
`test`
stage, the
1.
On every
[
pipeline
][
gitlab-pipeline
]
during the
`test`
stage, the
[
`review` job
][
review-job
]
is automatically started.
[
`review` job
][
review-job
]
is automatically started.
1.
The
`review`
job
[
triggers a pipeline
][
cng-pipeline
]
in the
1.
The
`review`
job
[
triggers a pipeline
][
cng-pipeline
]
in the
[
`CNG-mirror`
][
cng-mirror
]
[^1] project
[
`CNG-mirror`
][
cng-mirror
]
project.
1.
The
`CNG-mirror`
pipeline creates the Docker images of each component (e.g.
`gitlab-rails-ee`
,
-
We use the
`CNG-mirror`
project so that the
`CNG`
, (
**C**
loud
**N**
ative
`gitlab-shell`
,
`gitaly`
etc.) based on the commit from the
**G**
itLab), project's registry is not overloaded with a lot of transient
Docker images.
1.
The
`CNG-mirror`
pipeline creates the Docker images of each component (e.g.
`gitlab-rails-ee`
,
`gitlab-shell`
,
`gitaly`
etc.) based on the commit from the
[
GitLab pipeline
][
gitlab-pipeline
]
and store them in its
[
GitLab pipeline
][
gitlab-pipeline
]
and store them in its
[
registry
][
cng-mirror-registry
]
[
registry
][
cng-mirror-registry
]
.
1.
Once all images are built, the
review a
pp is deployed using
1.
Once all images are built, the
Review A
pp is deployed using
[
the official GitLab Helm chart
][
helm-chart
]
[^2]
to the
[
the official GitLab Helm chart
][
helm-chart
]
to the
[
`review-apps-ee` Kubernetes cluster on GCP
][
review-apps-ee
]
[
`review-apps-ee` Kubernetes cluster on GCP
][
review-apps-ee
]
-
The actual scripts used to deploy the review app can be found at
-
The actual scripts used to deploy the Review App can be found at
[
`scripts/review_apps/review-apps.sh`
][
review-apps.sh
]
[
`scripts/review_apps/review-apps.sh`
][
review-apps.sh
]
-
These scripts are basically
-
These scripts are basically
[
our official Auto DevOps scripts
][
Auto-DevOps.gitlab-ci.yml
]
where the
[
our official Auto DevOps scripts
][
Auto-DevOps.gitlab-ci.yml
]
where the
default CNG images are overriden with the images built and stored in the
default CNG images are overriden with the images built and stored in the
[
`CNG-mirror` project's registry
][
cng-mirror-registry
]
[
`CNG-mirror` project's registry
][
cng-mirror-registry
]
.
1.
Once the
`review`
job succeeds, you should be able to use your review app
-
Since we're using
[
the official GitLab Helm chart
][
helm-chart
]
, this means
you get a dedicated environment for your branch that's very close to what it
would look in production.
1.
Once the
`review`
job succeeds, you should be able to use your Review App
thanks to the direct link to it from the MR widget. The default username is
thanks to the direct link to it from the MR widget. The default username is
`root`
and its password can be found in the 1Password secure note named
`root`
and its password can be found in the 1Password secure note named
**gitlab-{ce,ee} review app's root password**
.
**gitlab-{ce,ee} Review App's root password**
(note that there's currently
[
a bug where the default password seems to be overriden
][
password-bug
]
).
**Additional notes:**
**Additional notes:**
-
The Kubernetes cluster is connected to the
`gitlab-ee`
project using
[
GitLab's
-
The Kubernetes cluster is connected to the
`gitlab-{ce,ee}`
projects using
Kubernetes integration
][
gitlab-k8s-integration
]
. This basically allows to have
[
GitLab's Kubernetes integration
][
gitlab-k8s-integration
]
. This basically
a link to the review app directly from the merge request widget.
allows to have a link to the Review App directly from the merge request widget.
-
The manual
`stop_review`
in the
`post-cleanup`
stage can be used to stop a
-
The manual
`stop_review`
in the
`test`
stage can be used to stop a Review App
review app manually, and is also started by GitLab once a branch is deleted
manually, and is also started by GitLab once a branch is deleted.
-
[TBD] Review apps are cleaned up regularly using a pipeline schedule that runs
-
Review Apps are cleaned up regularly using a pipeline schedule that runs
the
[
`scripts/review_apps/automated_cleanup.rb`
][
automated_cleanup.rb
]
script
the
[
`scripts/review_apps/automated_cleanup.rb`
][
automated_cleanup.rb
]
script.
-
If you're unable to log in using the
`root`
username and password, the
-
If the Review App deployment fails, you can simply retry it (there's no need
deployment may have failed. Stop the Review App via the
`stop_review`
to run the
`stop_review`
job first).
-
If you're unable to log in using the
`root`
username and password, you may
encounter
[
this bug
][
password-bug
]
. Stop the Review App via the
`stop_review`
manual job and then retry the
`review`
job to redeploy the Review App.
manual job and then retry the
`review`
job to redeploy the Review App.
[
^1
]:
We
use the
`CNG-mirror`
project so that the
`CNG`
, (
**C**
loud
**N**
ative
**G**
itLab), project's registry is
not overloaded with a lot of transient Docker images.
[
^2
]:
Since
we're using
[
the official GitLab Helm chart
][
helm-chart
]
, this means
you get the a dedicated environment for your branch that's very close to what it
would look in production
## Frequently Asked Questions
## Frequently Asked Questions
**Will it be too much to trigger CNG image builds on every test run? This could create thousands of unused docker images.**
**
Isn't it too much to trigger CNG image builds on every test run? This creates
thousands of unused Docker images.
**
> We have to start somewhere and improve later. If we see this getting out of hand, we will revisit.
> We have to start somewhere and improve later. Also, we're using the
CNG-mirror project to store these Docker images so that we can just wipe out
the registry at some point, and use a new fresh, empty one.
**How big
is the Kubernetes cluster
?**
**How big
are the Kubernetes clusters (`review-apps-ce` and `review-apps-ee`)
?**
> The cluster
is currently setup with a single pool of preemptible
> The cluster
s are currently set up with a single pool of preemptible nodes,
nodes, with a minimum of 1 node and a maximum of 3
0 nodes.
with a minimum of 1 node and a maximum of 10
0 nodes.
**What are the machine running on the cluster?**
**What are the machine running on the cluster?**
> We're currently using `n1-standard-4` (4 vCPUs, 15 GB memory) machines.
> We're currently using `n1-standard-4` (4 vCPUs, 15 GB memory) machines.
**How do we secure this from abuse? Apps are open to the world so we need to find a way to limit it to only us.**
**
How do we secure this from abuse? Apps are open to the world so we need to
find a way to limit it to only us.
**
> This
won't work for forks. We will add a root password to 1password shared vault
.
> This
isn't enabled for forks
.
[
gitlab-pipeline
]:
https://gitlab.com/gitlab-org/gitlab-
ee/pipelines/29302122
[
gitlab-pipeline
]:
https://gitlab.com/gitlab-org/gitlab-
ce/pipelines/35850709
[
review-job
]:
https://gitlab.com/gitlab-org/gitlab-
ee/-/jobs/94294136
[
review-job
]:
https://gitlab.com/gitlab-org/gitlab-
ce/-/jobs/118076368
[
cng-mirror
]:
https://gitlab.com/gitlab-org/build/CNG-mirror
[
cng-mirror
]:
https://gitlab.com/gitlab-org/build/CNG-mirror
[
cng-pipeline
]:
https://gitlab.com/gitlab-org/build/CNG-mirror/pipelines/
29307727
[
cng-pipeline
]:
https://gitlab.com/gitlab-org/build/CNG-mirror/pipelines/
35883435
[
cng-mirror-registry
]:
https://gitlab.com/gitlab-org/build/CNG-mirror/container_registry
[
cng-mirror-registry
]:
https://gitlab.com/gitlab-org/build/CNG-mirror/container_registry
[
helm-chart
]:
https://gitlab.com/charts/gitlab/
[
helm-chart
]:
https://gitlab.com/charts/gitlab/
[
review-apps-ee
]:
https://console.cloud.google.com/kubernetes/clusters/details/us-central1-b/review-apps-ee?project=gitlab-review-apps
[
review-apps-ee
]:
https://console.cloud.google.com/kubernetes/clusters/details/us-central1-b/review-apps-ee?project=gitlab-review-apps
...
@@ -77,6 +84,7 @@ Review Apps are automatically deployed by each pipeline, both in
...
@@ -77,6 +84,7 @@ Review Apps are automatically deployed by each pipeline, both in
[
automated_cleanup.rb
]:
https://gitlab.com/gitlab-org/gitlab-ee/blob/master/scripts/review_apps/automated_cleanup.rb
[
automated_cleanup.rb
]:
https://gitlab.com/gitlab-org/gitlab-ee/blob/master/scripts/review_apps/automated_cleanup.rb
[
Auto-DevOps.gitlab-ci.yml
]:
https://gitlab.com/gitlab-org/gitlab-ce/blob/master/lib/gitlab/ci/templates/Auto-DevOps.gitlab-ci.yml
[
Auto-DevOps.gitlab-ci.yml
]:
https://gitlab.com/gitlab-org/gitlab-ce/blob/master/lib/gitlab/ci/templates/Auto-DevOps.gitlab-ci.yml
[
gitlab-k8s-integration
]:
https://docs.gitlab.com/ee/user/project/clusters/index.html
[
gitlab-k8s-integration
]:
https://docs.gitlab.com/ee/user/project/clusters/index.html
[
password-bug
]:
https://gitlab.com/gitlab-org/gitlab-ce/issues/53621
---
---
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment