In my previous years as an engineer, I always looked at Continuous Integration/Continuous Delivery (CI/CD) with a smug face. It has never been anything but a rough experience (thank you, Jenkins š¤¢). However, it is my firm belief that in 2019 we will be seeing an uptick in conversation about how to easily manage and deploy your apps; considering developing the app is only a single step, right? For this article, I am going to assume that you have already created a Vue.js application and are now ready to set up with GitLabās continuous deployment. Although this article shows how to deploy a Vue.js app, it is the basic structure for using GitLabās CI/CD to deploy anything to S3. First things first, letās set up an and create a new S3 bucket! Any new AWS accounts go under their which will allow us to deploy to S3 for free (for the first year, under certain request constraints). AWS account free tier S3: Once signed up, head over to the and click āCreate Bucketā S3 console Create bucketĀ modal You will be shown this modal. Enter in a bucket name (remember this will be required to be unique across AWS). On the āSet Permissionsā tab, ensure you uncheck āBlock new public bucket policiesā and āBlock public and cross-account access if bucket has public policiesā: After the bucket has been created, click into the bucket and click the second tab called āPropertiesā. You will see a card called āStatic website hostingā. Click that and enable āuse this bucket to host a websiteā and fill in for the index document as so: index.html Note: The endpoint at the top of the modal will be the URL you can use to access your website! Now for the final part, allow read permissions to your S3 bucket (so your users can see your awesome website!). Navigate to the third tab that says āPermissionsā and then click āBucket Policyā. You will need to add the following policy in the editor: {"Version": "2012-10-17","Statement": [{"Effect": "Allow","Principal": "*","Action": "s3:GetObject","Resource": "arn:aws:s3:::YOUR_BUCKET_NAME/*"}]} Donāt forget to replace _YOUR_BUCKET_NAME_ with the bucket name that you used when creating. This allows any user to _GET_ from your bucket. Head back over to the āPublic Access Settingsā tab and re-enable blocking new bucket policies: This ensures the bucket policy cannot beĀ updated Now if we go to the URL that Amazon assigned this bucket, you should see aā¦ 404! Thatās because we havenāt pushed your project from GitLab! The final thing we must do in the AWS dashboard is to create an IAM user so that we can safely allow GitLab to access and upload data to this bucket. This allows us to revoke access if we ever need to. IAM User: Navigate to the and click the blue āAdd userā button at the top. Give a descriptive username such as and select āProgrammatic accessā IAM Management Console gitlabci You will next create a group if you havenāt already done so and attach a policy. For the means of this demo, we will use āāhowever, you may want to change policies based on your security needs. AmazonS3FullAccess After the final step when you click ācreate userā you will be shown a success screen, which will house two very important pieces of information: Access Key and Secret Key. . You can either write it down or download theĀ .csv and then you delete later. Whatever you do, make certain that no one gains access to the keys. Note: Once you leave this screen, you will no longer have access to the Secret Key ensure Either download theĀ .csv or click show secret key and copy and paste somewhere Weāre almost there! Now we just need to setup GitLab to push to our S3 bucket. GitLab: Welcome, GitLab CI/CD. Prior to testing out I always hosted my code on GitHub. GitHub did an amazing job at keeping my source code secure and widely available, however, I noticed that without some elbow grease, it did pretty much just that. I told myself that I wanted to be able to make a code change, commit, push, and then see my new code deployed on the internet. GitLab CI/CD Head over to , signup for an account, and create a new project. GitLab acts just as GitHub in the sense that you will need to add its remote origin to your local project. Once the project is setup you will rename/add this as a new remote to your local : GitLab .git git remote rename origin old-origingit remote add origin https://gitlab.com/croossin/vues3example.gitgit push -u origin --all Now for the key file that you need in order to get CI/CD setup with GitLab: Funny enough, using GitHub Gistās for a GitLab article š¤£ Go to the root directory of your app and add this file and copy the content of the above Gist; once pushed, GitLab will automatically recognize and begin itās ādev-opsā process. .gitlab-ci.yml So what exactly does this file do? stages: build deploy This tells GitLab what āstepsā to run during your CI/CD process. You can easily forsee adding more steps such as , etc. Letās take a look at the first stageāā : test build build prod:image: node:10.15.0-stretchstage: buildonly:- tagsscript:# Install vuecli- npm install -g @vue/cli@latest# Install dependencies- npm install# Build App- npm run buildartifacts:paths:# Build folder- dist/expire_in: 1 hour : Since we are building our Vue.js app, we will want to set the docker image to be some version (preferably latest) of Node. image : This should coincide with one of the that we described at the very top of the file. This letās GitLab know how stages are associated. stage stages : This is very key if you want GitLab to run these scripts conditionally based on a specific branch or tag. For me, I like to set up a stage and production environment. When I merge changes into master, it will run the stage scripts, and when I create a tag, it will run the prod scripts. only : As it may sound, this is sequence of commands that are run in this stage. For this particular instance, we install the latest , download all the dependencies, and then run our build script from our āāwhich for me looks something like: script Vue Cli package.json vue-cli-service build : Since we have two stages in our deployment process (build and deploy) and they are both on two different images, we need a way for the second stage (deploy) to have access to our build folderāā . With artifacts, we can set a path to āstoreā for other stages to reference. Thus, I set my path for the folder and set an expiration for 1 hour. artifacts Now this is what got me tripped up in the beginning. dist/ dist/ Now for the final stage in the pipelineāā : deploy deploy prod:image: python:lateststage: deployonly:- tagsscript:- pip install awscli- aws s3 sync ./dist s3://YOUR_BUCKET_NAME Python is the supported CLI for AWS, so we set our image to . When this runs, it will install the latest AWS CLI and sync the dist folder with the bucket we created in the beginning. Ensure is the same as the bucket we created in the S3 console. python:latest YOUR_BUCKET_NAME Note: If you want both stage and production environments, you will need to create a second bucket in S3 (with the same configuration as the first) and use that as the staging bucket. Last Step: How does AWS know that it should allow this user to sync to the S3 bucket? From the IAM user we created in the beginning half of the article! Since I mentioned that it is an extremely bad technique to expose/commit your keys we will add them to GitLabās . Navigate to the CI/CD in the Settings tab and expand āEnvironment Variablesā environment variables GitLab AWS Environment Variables You will add two variables: and . Fill in the values with the associated keys that you downloaded/copied when created the user in the IAM management console. AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY Weāre all set to test it out! Push some code to master and watch GitLab automatically kick off the CI/CD process. You can watch the stages execute and see your completed pipelines: Take a look at to see how you can extend your jobs to accomplish anything you may need. GitLabs CI/CD documentation Summed up: After completing these steps, you should in essence have: Created an AWS account Created an S3 bucket and set permissions to public access Created an IAM user for GitLab to use Create a GitLab account/project Add our and fill with our CI/CD stages .gitlab-ci.yml Add our IAM credentials as environment variables Sit back, smile, and watch as your code is automatically deployed to S3 via GitLabās CI/CD process Feel free to comment, clap, or reach out if you have any questions or concern. I am planning to write a follow-up article in which I will show you how to deploy a distribution in front of your S3 bucket to ensure fast and reliable distribution of your site as well as adding SSL certs from AWSās ! CloudFront Certificate Manager
