Container Service: Developing an Application - Integrating with gitlab.umich.edu

It is often useful to set up a GitLab deployment key within your OpenShift project.  Avoid using personal SSH keys, which are dependent on a specific individual's credentials.

 

In order to set up automated image builds for gitlab.umich.edu and containers.it.umich.edu, do the following:

 

Create an SSH keypair specific to the OpenShift project and GitLab repo. NOTE:  Don't set a passphrase (just press Return twice when prompted)

 

Create an OpenShift secret containing the SSH private key.

 

In the GitLab repo, go to Settings -> Repository -> Deploy Keys.  Use the SSH key comment (`clustername:projectname`) as the title, and for the key paste the contents of the public key (the file `myproject-gitlab-key.pub`.  Leave the write access checkbox unchecked since this key will only be used to trigger an OpenShift image build via a webhook.

 

Create the build configuration:

1. In your OpenShift project, open the build configuration for your application, then choose Actions -> Edit from the upper right corner of the screen.
2. Under the 'Git Repository URL', click on Advanced Options.
3. Scroll down to the section labeled Triggers.
4. Click on Create New Webhook Secret, provide a name for the secret, and click on Generate to create a new unique secret value for your webhook.
5. Click Add Webhook, choose a type of GitLab and choose the secret name you created in the previous step.
6. Click Save at the bottom of the screen to save the creation of the webhook.
7. Click on the Configuration tab of the build configuration, and copy the Gitlab Webhook URL from the right side of the form.
8. In the GitLab repo, go to Settings -> Integrations.  Set up a new webhook using the Generic Webhook URL obtained.
9. In the GitLab repo, Click Test -> Push events to make sure the hook executes successfully.  Then in the OpenShift console, check the build logs to make sure everything succeeded (Builds -> Builds -> my-application -> #2 -> Logs).