Как сделать GitLab CI/CD вашим лучшим другом для сборки и доставки Flutter приложений. Часть 3

include:
  - local: '/common.gitlab-ci.yml'

.supply_track:
  script:
    - bundle exec fastlane run supply track:"$SUPPLY_TRACK" aab:"$BUILD_AAB_FILE_PATH"

.variables:deploy_google_play:
  variables:
    GOOGLE_PLAY_REQUIRED: true

.before_script:deploy_google_play:
  before_script:
    - !reference [ .clone_project, before_script ]
    - !reference [ .configure_fastlane, before_script ]

.script:deploy_google_play:
  script:
    - !reference [ .supply_track, script ]

include:
  - local: '/common.gitlab-ci.yml'

.configure_significa:
  before_script:
    - export SIGNIFICA_ENABLED=$([ -n "$SIGNIFICA_SERVER_URL" ] && [ -n "$SIGNIFICA_SECRET" ] && echo "true" || echo "false")
    - |
      if ! $SIGNIFICA_ENABLED; then
        echo "❌️ Error: App distribution server is disabled. Please specify the required variables: SIGNIFICA_SERVER_URL, SIGNIFICA_SECRET"
        echo "Read more: https://github.com/significa/app-distribution-server"
        exit 1
      fi

.upload_to_significa:
  script:
    - echo -e "\e[0Ksection_start:`date +%s`:upload_to_significa_section\r\e[0KDistribute app via Significa"
    - |
      i=1
      while [ $i -le "$SIGNIFICA_UPLOAD_MAX_RETRIES" ]; do
        echo "ℹ️ Attempt $i to upload to Significa..."
        BUILD=$(curl -X "POST" \
          "$SIGNIFICA_SERVER_URL/api/upload" \
          -H "Accept: application/json" \
          -H "X-Auth-Token: $SIGNIFICA_SECRET" \
          -H "Content-Type: multipart/form-data" \
          -F "app_file=@$APP_FILE")
        if echo "$BUILD" | jq empty >/dev/null 2>&1; then
          BUNDLE_VERSION=$(echo "$BUILD" | jq -r '.bundle_version // empty')
          UPLOAD_ID=$(echo "$BUILD" | jq -r '.upload_id // empty')
          PLATFORM_NAME=$(echo "$BUILD" | jq -r '.platform // empty')
        else
          echo "⚠️ Warning: Received invalid JSON response or no response at all:"
          echo "$BUILD"
        fi
        if [[ -n "$BUNDLE_VERSION" && -n "$UPLOAD_ID" && -n "$PLATFORM_NAME" ]]; then
          echo "✅ Upload successful!"
          break
        else
          echo "⚠️ Warning: Upload failed. Missing required fields. Retrying in $SIGNIFICA_UPLOAD_RETRY_DELAY seconds..."
          sleep "$SIGNIFICA_UPLOAD_RETRY_DELAY"
        fi
        i=$((i + 1))
      done
    - |
      if [ -z "$BUNDLE_VERSION" ] || [ -z "$UPLOAD_ID" ] || [ -z "$PLATFORM_NAME" ]; then
        echo "❌ Error: All attempts to upload to Significa failed."
        exit 1
      fi
    - |
      echo "ℹ️ Info: Distribute app version $BUNDLE_VERSION ($UPLOAD_ID)"
    - echo "UPLOAD_ID=$UPLOAD_ID" > "$DEPLOY_ENV_PATH"
    - |
      if [[ -n "$CI_PROJECT_TOKEN" ]]; then
        if [ -z "${!SIGNIFICA_UPLOADS_VAR}" ]; then
          export ${SIGNIFICA_UPLOADS_VAR}='{}'
        fi
        SIGNIFICA_UPLOADS_NEW_VALUE=$(echo "${!SIGNIFICA_UPLOADS_VAR}" | jq --arg branch "$CI_COMMIT_REF_SLUG" --arg upload_id "$UPLOAD_ID" '
          .[$branch] = (.[$branch] // []) + [$upload_id]
        ')
        eval "export $SIGNIFICA_UPLOADS_VAR='$SIGNIFICA_UPLOADS_NEW_VALUE'"
        echo "✅ Updated ${SIGNIFICA_UPLOADS_VAR}: ${!SIGNIFICA_UPLOADS_VAR}"
        curl --request POST --header "PRIVATE-TOKEN: $CI_PROJECT_TOKEN" \
          "$CI_API_V4_URL/projects/$CI_PROJECT_ID/variables" \
          --form "key=$SIGNIFICA_UPLOADS_VAR" \
          --form "value=${!SIGNIFICA_UPLOADS_VAR}" \
          --form "description=These upload IDs are used to manage files, particularly for deletion or cleanup operations. Variable auto synced." \
          --form "raw=true"
        curl --request PUT --header "PRIVATE-TOKEN: $CI_PROJECT_TOKEN" \
          "$CI_API_V4_URL/projects/$CI_PROJECT_ID/variables/$SIGNIFICA_UPLOADS_VAR" \
          --form "value=${!SIGNIFICA_UPLOADS_VAR}"
      else
        echo "⚠️ Warning: The `CI_PROJECT_TOKEN` variable is required to enable automatic cleanup of builds in Significa."
        echo "If this variable is not set, builds will not be deleted automatically when environment stopped."
      fi
    - echo -e "\e[0Ksection_end:`date +%s`:upload_to_significa_section\r\e[0K"

.cleanup_significa:
  script:
    - echo -e "\e[0Ksection_start:`date +%s`:cleanup_significa_section\r\e[0KCleaning up Significa resources"
    - |
      if [[ -z "$CI_PROJECT_TOKEN" ]]; then
        echo "⚠️ Warning: The `CI_PROJECT_TOKEN` variable is required to enable automatic cleanup of builds in Significa."
        echo "If this variable is not set, builds will not be deleted automatically when environment stopped."
        exit 1
      fi
    - |
      if [ -z "${!SIGNIFICA_UPLOADS_VAR}" ]; then
        export ${SIGNIFICA_UPLOADS_VAR}='{}'
      fi
      UPLOAD_IDS=$(echo "${!SIGNIFICA_UPLOADS_VAR}" | jq -r --arg branch "$CI_COMMIT_REF_SLUG" '.[$branch] // []')
    - |
      if [ "$(echo "$UPLOAD_IDS" | jq length)" -gt 0 ]; then
        echo "ℹ️ Info: Found uploads to delete: $UPLOAD_IDS"
        for UPLOAD_ID in $(echo "$UPLOAD_IDS" | jq -r '.[]'); do
          echo "ℹ️ Info: Deleting upload $UPLOAD_ID"
          curl -X "DELETE" \
            "$SIGNIFICA_SERVER_URL/api/delete/$UPLOAD_ID" \
            -H "Accept: application/json" \
            -H "X-Auth-Token: $SIGNIFICA_SECRET"
        done
      else
        echo "ℹ️ Info: No uploads found for this branch."
        exit 0
      fi
    - |
      eval "SIGNIFICA_UPLOADS_VALUE=\${$SIGNIFICA_UPLOADS_VAR}"
      SIGNIFICA_UPLOADS_VALUE=$(echo "$SIGNIFICA_UPLOADS_VALUE" | jq --arg branch "$CI_COMMIT_REF_SLUG" 'del(.[$branch])')
      if ! curl --request PUT --header "PRIVATE-TOKEN: $CI_PROJECT_TOKEN" \
        "$CI_API_V4_URL/projects/$CI_PROJECT_ID/variables/$SIGNIFICA_UPLOADS_VAR" \
        --form "value=$SIGNIFICA_UPLOADS_VALUE"; then
        echo "❌ Failed to update variable $SIGNIFICA_UPLOADS_VAR"
        exit 1
      fi
    - echo -e "\e[0Ksection_end:`date +%s`:cleanup_significa_section\r\e[0K"

# Deploy android

.variables:deploy_android:
  variables:
    APP_FILE: $BUILD_APK_FILE_PATH
    DEPENDENCIES_TO_INSTALL: "curl jq"
    DEPLOY_ENV_PATH: "./deploy.env"
    SIGNIFICA_UPLOAD_MAX_RETRIES: 3
    SIGNIFICA_UPLOAD_RETRY_DELAY: 10
    SIGNIFICA_UPLOADS_VAR: "SIGNIFICA_ANDROID_UPLOADS"

.variables:cleanup_android:
  variables:
    DEPENDENCIES_TO_INSTALL: "curl jq"
    SIGNIFICA_UPLOADS_VAR: "SIGNIFICA_ANDROID_UPLOADS"

.before_script:deploy_android:
  before_script:
    - !reference [ .setup_environment, before_script ]
    - !reference [ .configure_significa, before_script ]

.script:deploy_android:
  script:
    - !reference [ .upload_to_significa, script ]

.before_script:cleanup_android:
  before_script:
    - !reference [ .setup_environment, before_script ]
    - !reference [ .configure_significa, before_script ]

.script:cleanup_android:
  script:
    - !reference [ .cleanup_significa, script ]

# Deploy iOS

.variables:deploy_ios:
  variables:
    APP_FILE: $BUILD_IPA_FILE_PATH
    DEPENDENCIES_TO_INSTALL: "curl jq"
    DEPLOY_ENV_PATH: "./deploy.env"
    SIGNIFICA_UPLOAD_MAX_RETRIES: 3
    SIGNIFICA_UPLOAD_RETRY_DELAY: 10
    SIGNIFICA_UPLOADS_VAR: "SIGNIFICA_IOS_UPLOADS"

.variables:cleanup_ios:
  variables:
    DEPENDENCIES_TO_INSTALL: "curl jq"
    SIGNIFICA_UPLOADS_VAR: "SIGNIFICA_IOS_UPLOADS"

.before_script:deploy_ios:
  before_script:
    - !reference [ .setup_environment, before_script ]
    - !reference [ .configure_significa, before_script ]

.script:deploy_ios:
  script:
    - !reference [ .upload_to_significa, script ]

.before_script:cleanup_ios:
  before_script:
    - !reference [ .setup_environment, before_script ]
    - !reference [ .configure_significa, before_script ]

.script:cleanup_ios:
  script:
    - !reference [ .cleanup_significa, script ]

include:
  - local: '/common.gitlab-ci.yml'

.upload_to_testflight:
  script:
    - |
      bundle exec fastlane run upload_to_testflight \
        api_key_path:"$APP_STORE_CONNECT_API_KEY_PATH" \
        ipa:"$BUILD_IPA_FILE_PATH" \
        skip_submission:true \
        skip_waiting_for_build_processing:true

.variables:deploy_testflight:
  variables:
    APP_STORE_CONNECT_REQUIRED: true

.before_script:deploy_testflight:
  before_script:
    - !reference [ .clone_project, before_script ]
    - !reference [ .configure_fastlane, before_script ]

.script:deploy_testflight:
  script:
    - !reference [ .upload_to_testflight, script ]

include:
  - project: 'project-group/flutter-ci-templates'
    ref: v1.1.0
    file:
      - '/build/android.gitlab-ci.yml'
      - '/build/ios.gitlab-ci.yml'
      - '/deploy/significa.gitlab-ci.yml'
      - '/common.gitlab-ci.yml'

deploy_android:
  image: node:$NODE_VERSION
  stage: deploy
  needs:
    - build_android
  <<: *common_rules
  artifacts:
    reports:
      dotenv: $DEPLOY_ENV_PATH
  extends:
    - .before_script:deploy_android
    - .script:deploy_android
    - .variables:deploy_android
  environment:
    name: android/$CI_COMMIT_REF_SLUG
    url: $SIGNIFICA_SERVER_URL/get/$UPLOAD_ID
    on_stop: cleanup_android
    auto_stop_in: 1 month
  tags:
    - $MACOS_RUNNER_TAG

cleanup_android:
  image: node:$NODE_VERSION
  stage: cleanup
  needs: [ ]
  rules:
    - if: |
        $CI_PROJECT_TOKEN != "" &&
        ($CI_MERGE_REQUEST_IID || $CI_COMMIT_BRANCH =~ $CI_BRANCHES)
      when: manual
      allow_failure: true
    - when: never
  extends:
    - .before_script:cleanup_android
    - .script:cleanup_android
    - .variables:cleanup_android
  environment:
    name: android/$CI_COMMIT_REF_SLUG
    action: stop
  tags:
    - $MACOS_RUNNER_TAG

deploy_ios:
  image: node:$NODE_VERSION
  stage: deploy
  needs:
    - build_ios
  rules:
    - if: $CI_MERGE_REQUEST_IID || $CI_COMMIT_BRANCH =~ $CI_BRANCHES
      when: on_success
    - when: never
  extends:
    - .before_script:deploy_ios
    - .script:deploy_ios
    - .variables:deploy_ios
  artifacts:
    reports:
      dotenv: $DEPLOY_ENV_PATH
  environment:
    name: ios/$CI_COMMIT_REF_SLUG
    url: $SIGNIFICA_SERVER_URL/get/$UPLOAD_ID
    on_stop: cleanup_ios
    auto_stop_in: 1 month
  tags:
    - $MACOS_RUNNER_TAG

cleanup_ios:
  image: node:$NODE_VERSION
  stage: cleanup
  needs: [ ]
  rules:
    - if: |
        $CI_PROJECT_TOKEN != "" &&
        ($CI_MERGE_REQUEST_IID || $CI_COMMIT_BRANCH =~ $CI_BRANCHES)
      when: manual
      allow_failure: true
    - when: never
  extends:
    - .before_script:cleanup_ios
    - .script:cleanup_ios
    - .variables:cleanup_ios
  environment:
    name: ios/$CI_COMMIT_REF_SLUG
    action: stop
  tags:
    - $MACOS_RUNNER_TAG

stages:
  - build
  - deploy

include:
  - project: 'project-group/flutter-ci-templates'
    ref: v1.1.0
    file:
      - '/build/android.gitlab-ci.yml'
      - '/build/ios.gitlab-ci.yml'
      - '/deploy/google_play.gitlab-ci.yml'
      - '/deploy/testflight.gitlab-ci.yml'
      - '/common.gitlab-ci.yml'

variables:
  BUILD_AAB_ARCHIVE: true
  BUILD_AAB_FILE_NAME: "app-$BUILD_TYPE.aab"
  BUILD_AAB_FILE_PATH: "$CI_PROJECT_DIR/build/$BUILD_AAB_FILE_NAME"
  BUILD_APK_FILE_NAME: "app-$BUILD_TYPE.apk"
  BUILD_APK_FILE_PATH: "$CI_PROJECT_DIR/build/$BUILD_APK_FILE_NAME"
  BUILD_IPA_FILE_NAME: "Runner.ipa"
  BUILD_IPA_FILE_PATH: "$CI_PROJECT_DIR/build/$BUILD_IPA_FILE_NAME"
  BUILD_TYPE: release
  DART_DEFINE_JSON_REQUIRED_KEYS: '[
   "ENV_EXAMPLE_1",
   "ENV_EXAMPLE_2"
  ]'
  DART_DEFINE_PATH: "./launch.json"
  FASTLANE_TEAM_ID: "EXAMPLE_TEAM_ID"
  FLUTTER_SDK_VERSION: 3.35.1
  GIT_CLONE_PROJECT_PATH: "${CI_PROJECT_NAMESPACE}/flutter-example"
  GIT_CLONE_REF_NAME: "v1.0.0"
  KEYCHAIN_NAME: "${CI_PROJECT_NAME}-${CI_COMMIT_REF_SLUG}.keychain-db"
  LINUX_RUNNER_TAG: linux-runner-tag-name
  MACOS_RUNNER_TAG: macos-runner-tag-name
  PROJECT_ENTRY_POINT: "./lib/main.dart"
  SIGN_TYPE: "appstore"
  SUPPLY_TRACK: "beta"
  TARGET_BUNDLE_MAPPING: |
    [
      {
          "bundle_id": "com.example.myapp",
          "target_name": "Runner"
      }
    ]

default:
  interruptible: true

.build_project: &build_project
  - echo -e "\e[0Ksection_start:`date +%s`:build_project_section[collapsed=true]\r\e[0KBuild project"
  - flutter pub get
  - dart run build_runner build --delete-conflicting-outputs
  - echo -e "\e[0Ksection_end:`date +%s`:build_project_section\r\e[0K"

build_android:
  image: ghcr.io/cirruslabs/flutter:$FLUTTER_SDK_VERSION
  stage: build
  needs: [ ]
  script:
    - echo -e "\e[0Ksection_start:`date +%s`:build_app_section\r\e[0KBuild & sign app in $BUILD_TYPE mode"
    - *build_project
    - !reference [ .build_android, script ]
    - echo -e "\e[0Ksection_end:`date +%s`:build_app_section\r\e[0K"
  when: manual
  allow_failure: false
  artifacts:
    name: "android-$CI_COMMIT_REF_SLUG"
    expire_in: 1 week
    paths:
      - $BUILD_APK_FILE_PATH
      - $BUILD_AAB_FILE_PATH
  extends:
    - .before_script:build_android
    - .variables:build_android
  tags:
    - $MACOS_RUNNER_TAG

build_ios:
  stage: build
  needs: [ ]
  script:
    - *build_project
    - !reference [ .build_ios, script ]
  when: manual
  allow_failure: false
  artifacts:
    name: "ios-$CI_COMMIT_REF_SLUG"
    expire_in: 1 week
    paths:
      - $BUILD_IPA_FILE_PATH
  extends:
    - .before_script:build_ios
    - .after_script:build_ios
  tags:
    - $MACOS_RUNNER_TAG

deploy_testflight:
  stage: deploy
  needs:
    - build_ios
  when: manual
  extends:
    - .before_script:deploy_testflight
    - .script:deploy_testflight
    - .variables:deploy_testflight
  tags:
    - $MACOS_RUNNER_TAG

deploy_google_play:
  stage: deploy
  needs:
    - build_android
  when: manual
  extends:
    - .before_script:deploy_google_play
    - .script:deploy_google_play
    - .variables:deploy_google_play
  tags:
    - $MACOS_RUNNER_TAG