Removed pull event from build stage

.dockerignore

@@ -27,4 +27,6 @@ README.md
 !.git/config
 !.git/packed-refs
 !.git/refs/heads/**
-
+# Ensure the build output is NOT ignored
+!**/bin/Release/**/publish/
+!**/publish/

.drone.yml

@@ -1,117 +1,68 @@
 ---
 kind: pipeline
 type: docker
-name: build and test
+name: build-and-package
-
-clone:
-  disable: true
 
 steps:
-  - name: checkout
+  - name: build-test-publish
-    image: alpine/git
+    image: nexus.khongisa.co.za/sdk:10.0
     commands:
-      - git clone https://gitea.khongisa.co.za/MngomaLab/webapitest.git .
+      - dotnet restore --source https://nexus.khongisa.co.za/repository/nuget-group/index.json --no-cache
-      - git checkout ${DRONE_COMMIT}
+      - dotnet build --configuration Release --no-restore
+      - dotnet test --configuration Release --no-build
+      - dotnet publish --configuration Release --no-build
 
-  - name: dotnet build
+  - name: docker-build-and-push
-    image: mcr.microsoft.com/dotnet/sdk:8.0
+    image: plugins/docker
-    commands:
+    settings:
-      - dotnet build --configuration Release
+      registry: nexus.khongisa.co.za
+      repo: nexus.khongisa.co.za/webapitest
+      tags: [ "${DRONE_BUILD_NUMBER}", "latest" ]
+      username: { from_secret: docker_username }
+      password: { from_secret: docker_password }
 
-  - name: dotnet test
+  - name: vulnerability-scan
-    image: mcr.microsoft.com/dotnet/sdk:8.0
+    image: aquasec/trivy:0.50.1
-    commands:
-      - dotnet test --configuration Release
-
----
-x-docker-auth: &docker-auth
-  DOCKER_AUTH_CONFIG: |
-    {
-      "auths": {
-        "https://index.docker.io/v1/": {
-          "auth": "a2h3ZXppOlBHM0FRM0VPMFg="
-        }
-      }
-    }
-
-kind: pipeline
-type: docker
-name: package
-
-clone:
-  disable: true
-
-steps:
-  - name: checkout
-    image: alpine/git
-    commands:
-      - git clone https://gitea.khongisa.co.za/MngomaLab/webapitest.git .
-      - git checkout ${DRONE_COMMIT}
-
-  - name: dotnet publish
-    image: mcr.microsoft.com/dotnet/sdk:8.0
-    commands:
-      - dotnet publish --configuration Release
-
-  - name: build and push
-    image: gcr.io/kaniko-project/executor:debug
     environment:
-      <<: *docker-auth
+      TRIVY_USERNAME: { from_secret: docker_username }
+      TRIVY_PASSWORD: { from_secret: docker_password }
     commands:
-      - mkdir -p /kaniko/.docker
+      - trivy image --image-src remote --exit-code 1 --severity CRITICAL nexus.khongisa.co.za/webapitest:${DRONE_BUILD_NUMBER}
-      - echo "$DOCKER_AUTH_CONFIG" > /kaniko/.docker/config.json
+
-      - /kaniko/executor 
+trigger:
-          --verbosity=debug
+  branch:
-          --context=. 
+    - main
-          --dockerfile=Dockerfile 
+  event:
-          --destination=index.docker.io/khwezi/webapitest:latest 
+    exclude:
-          --destination=index.docker.io/khwezi/webapitest:${DRONE_BUILD_NUMBER}
+      - promote
 
 ---
 kind: pipeline
 type: docker
-name: deploy
+name: deploy-to-uat
 
-clone:
+depends_on:
-  disable: true
+  - build-and-package
 
 steps:
-  - name: uat
+  - name: uat-deployment
     image: appleboy/drone-ssh
     settings:
-      host: 
+      host: { from_secret: ssh_host }
-        from_secret: ssh_host
+      username: { from_secret: ssh_user }
-      username: 
+      password: { from_secret: ssh_password }
-        from_secret: ssh_user
-      key: 
-        from_secret: ssh_key
       script:
-        - docker pull khwezi/webapitest:latest
+        - echo $DOCKER_PASSWORD | docker login nexus.khongisa.co.za -u $DOCKER_USERNAME --password-stdin
-        - docker stop webapitest || true
+        - docker pull nexus.khongisa.co.za/webapitest:latest
-        - docker rm webapitest || true
+        - docker stop webapi 2>/dev/null || true
-        - docker run -d --name webapitest -p 4000:80 khwezi/webapitest:latest
+        - docker rm webapi 2>/dev/null || true
-    when:
+        - docker run -d --name webapi --restart unless-stopped -e ASPNETCORE_ENVIRONMENT=Development -p 4000:8081 nexus.khongisa.co.za/webapitest:latest
-      event:
+    environment:
-        - promote
+      DOCKER_USERNAME: { from_secret: docker_username }
-      target:
+      DOCKER_PASSWORD: { from_secret: docker_password }
-        - uat
 
-  - name: prod
+trigger:
-    image: appleboy/drone-ssh
-    settings:
-      host: 
-        from_secret: ssh_host
-      username: 
-        from_secret: ssh_user
-      key: 
-        from_secret: ssh_key
-      script:
-        - docker pull khwezi/webapitest:latest
-        - docker stop webapi || true
-        - docker rm webapi || true
-        - docker run -d --name webapi -p 4001:80 khwezi/webapitest:latest
-    when:
   event:
     - promote
   target:
-        - prod
+    - staging

Dockerfile

@@ -1,9 +1,11 @@
-FROM mcr.microsoft.com/dotnet/aspnet:8.0
+FROM nexus.khongisa.co.za/aspnet:10.0 AS final
 WORKDIR /app
 
-COPY ./SampleApi/bin/Release/net8.0/publish/ .
+USER app
+
+COPY --chown=app:app ./SampleApi/bin/Release/net10.0/publish/ .
 
-ENV ASPNETCORE_HTTP_PORTS=8081
 EXPOSE 8081
+ENV ASPNETCORE_HTTP_PORTS=8081
 
 ENTRYPOINT ["dotnet", "SampleApi.dll"]

SampleApi/Controllers/DemoController.cs

@@ -0,0 +1,43 @@
+using Microsoft.AspNetCore.Mvc;
+
+// For more information on enabling Web API for empty projects, visit https://go.microsoft.com/fwlink/?LinkID=397860
+
+namespace SampleApi.Controllers
+{
+    [Route("api/[controller]")]
+    [ApiController]
+    public class DemoController : ControllerBase
+    {
+        // GET: api/<DemoController>
+        [HttpGet]
+        public IEnumerable<string> Get()
+        {
+            return new string[] { "value1", "value2" };
+        }
+
+        // GET api/<DemoController>/5
+        [HttpGet("{id}")]
+        public string Get(int id)
+        {
+            return "value";
+        }
+
+        // POST api/<DemoController>
+        [HttpPost]
+        public void Post([FromBody] string value)
+        {
+        }
+
+        // PUT api/<DemoController>/5
+        [HttpPut("{id}")]
+        public void Put(int id, [FromBody] string value)
+        {
+        }
+
+        // DELETE api/<DemoController>/5
+        [HttpDelete("{id}")]
+        public void Delete(int id)
+        {
+        }
+    }
+}

SampleApi/Program.cs

@@ -1,25 +1,22 @@
 var builder = WebApplication.CreateBuilder(args);
 
-// Add services to the container.
-
 builder.Services.AddControllers();
-// Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
 builder.Services.AddEndpointsApiExplorer();
 builder.Services.AddSwaggerGen();
+builder.Services.AddHealthChecks();
 
 var app = builder.Build();
 
-// Configure the HTTP request pipeline.
 if (app.Environment.IsDevelopment())
 {
     app.UseSwagger();
     app.UseSwaggerUI();
 }
 
+app.MapHealthChecks("/health");
+app.UseRouting();
 app.UseHttpsRedirection();
-
 app.UseAuthorization();
-
 app.MapControllers();
 
 app.Run();

SampleApi/SampleApi.csproj

@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
 
   <PropertyGroup>
-    <TargetFramework>net8.0</TargetFramework>
+    <TargetFramework>net10.0</TargetFramework>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
     <UserSecretsId>cfe6b4ce-2d40-4273-b3a3-e4df67304fc5</UserSecretsId>
@@ -9,8 +9,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.19.6" />
+    <PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.23.0" />
-    <PackageReference Include="Swashbuckle.AspNetCore" Version="6.4.0" />
+    <PackageReference Include="Polly" Version="8.6.6" />
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="10.1.7" />
   </ItemGroup>
 
 </Project>