Goal#

Create a "beta" version of the Monofolio website that is automatically deployed and is a ref to the main branch of the repository.
Create a "production" version of the Monofolio website that is automatically deployed and is a ref to a tag in the repository. And Link to a Release Note with Changelog.
Make sure that the "production" version is tested in depth

Deploy flow#

Build the Frontend if the folder related to the Frontend has changed.
apps/front
libs/front/*
Build the Backend if the folder related to the Backend has changed.
apps/back
libs/back/*
folio_content
Push the images to a conteneur registry.
Deploy the images to a Kubernetes cluster.

Test flow#

Run Code Coverage tests on the Backend
Run E2E tests on the Frontend
Run Lighthouse tests on the Frontend/backend https://github.com/jenkins-x/lighthouse/blob/main/docs/install_lighthouse_with_tekton.md
Run Security tests on both the Backend and the Frontend

Deployment flow#

Write code in a new branch
Create a Pull Request
PR is tested by Github Actions then the Test flow is executed.
If both the Test flow and the PR checks pass, the PR is merged into the main branch.
The Release flow is executed and the beta version is deployed.
If the beta version is stable, a new tag is created and the production version is deployed.

Test#

test 12345

Tasks#

Update Github with pipeline status https://hub.tekton.dev/tekton/task/github-set-status
Generate a Software Bill of Materials (SBOM) https://hub.tekton.dev/tekton/task/syft
Analyze the SBOM for vulnerabilities https://hub.tekton.dev/tekton/task/grype
Send a notification to discord https://hub.tekton.dev/tekton/task/send-to-webhook-discord
When a PR pass the test flow
When a PR is merged
When a new version is deployed (beta or production)
When a vulnerability is found (don't know if it's possible to send the vulnerability from github to discord)
Create a Helm chart for the backend/frontend
Build the Frontend/Backend
Check if the Frontend/Backend helm chart is Okay https://hub.tekton.dev/tekton/task/pluto
Check secret https://hub.tekton.dev/tekton/task/kube-linter

Github Events to listen#

Pull Request "opened, synchronized"
Push on the main branch
Tag created