build:
  image: node:14-alpine
  stage: build
  script:
    - apk update
    - yarn install --production=false
    - npx ng build       \
        --env=prod       \
        --base-href ./   \
        --progress=false \
        --verbose
  artifacts:
    paths:
      - dist
      - package.json
    expire_in: 1 hour

FROM node:alpine AS base
WORKDIR /webapi

FROM node:alpine AS build

WORKDIR /webapi
RUN apk update

COPY . /webapi
RUN yarn install

FROM base
COPY --from=build /webapi /webapi
CMD /usr/local/bin/node dist/main.js 3000

$ docker run -d --rm                             \
    --name=gitlab-runner                         \
    --restart=always                             \
    -v $PWD/config.toml:/etc/gitlab/config.toml  \
    -v /var/run/docker.sock:/var/run/docker.sock \
    gitlab/gitlab-runner:alpine-v13.9.0
    
$ docker exec -it gitlab-runner register


# podman? I don't know, how to?

docker_build:
  image: docker:1903-dind
  stage: docker_build
  variables:
    IMAGE: registry.example.io/
      ${CI_PROJECT_NAME}:${CI_COMMIT_SHORT_SHA}
    #example:  quay.io/example-image:v1.0
  script:
    - docker login -u myusername -p mypassword
    - docker build . -t $IMAGE
    - docker push       $IMAGE
  dependencies:
    - build

review_docker:
  image: docker:1903-dind
  stage: review
  variables:
    IMAGE: registry.example.io/
      ${CI_PROJECT_NAME}:${CI_COMMIT_SHORT_SHA}
    #example:  quay.io/example-image:v1.0
  script:
    - docker rm -f ${CI_PROJECT_NAME}
    - docker run -d --rm          \
        --name=${CI_PROJECT_NAME} \
        --restart=always          \
        ${IMAGE}
  tags:
    - testing

deploy_compose:
  image: rockwyc992/docker-compose:latest
  stage: deploy
  variables:
    IMAGE: registry.example.io/
      ${CI_PROJECT_NAME}:${CI_COMMIT_SHORT_SHA}
    #example:  quay.io/example-image:v1.0
  script:
    - envsubst                        \
        < docker-compose.template.yml \
        > docker-compose.yml
    - docker-compose up -d
  only:
    - master
  tags:
    - production

apiVersion: apps/v1
kind: Deployment
metadata:
  name: gitlab-runner
  namespace: gitlab
spec:
  template:
    spec:
      containers:
        image: gitlab/gitlab-runner:alpine-v13.9.0
        volumeMounts:
        - mountPath: /etc/gitlab-runner
          name: config
      serviceAccountName: runner
      volumes:
      - configMap:
          name: gitlab-runner
        name: config
  replicas: 1

concurrent = 10

[[runners]]
  name = "Kubernetes Runner"
  url = "https://gitlab.example.com"
  token = "__REDACTED__"
  executor = "kubernetes"
  [runners.kubernetes]
    #host = "http://localhost:9876/"
    image = "alpine:3.12"
    namespace = "gitlab"
    privileged = false
    service_account_overwrite_allowed = "runner"
    [runners.kubernetes.volumes]
      [[runners.kubernetes.volumes.host_path]]
        name = "docker"
        mount_path = "/var/run/docker.sock"

apiVersion: v1
kind: ServiceAccount
metadata:
  name: runner
  namespace: gitlab
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: runner
  namespace: gitlab
subjects:
  - kind: ServiceAccount
    name: runner
    namespace: gitlab
roleRef:
  kind: ClusterRole
  name: admin
  apiGroup: rbac.authorization.k8s.io

kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: gitlab-runner
  namespace: mynamespace
subjects:
  - kind: ServiceAccount
    name: runner
    namespace: gitlab
roleRef:
  kind: ClusterRole
  name: admin
  apiGroup: rbac.authorization.k8s.io

.kubectl_template:
  image: lachlanevenson/k8s-kubectl:v1.19.8
  stage: deploy
  variables:
    NAMESPACE: default
  script:
    - envsubst                     \
        < deployment.template.yaml \
        > deployment.yaml
    - envsubst                     \
        < service.template.yaml    \
        > service.yaml
    - kubectl -n $NAMESPACE apply -f deployment.yaml
    - kubectl -n $NAMESPACE apply -f service.yaml
  tags:
    - kubernetes

review_kubectl:
  extends: .kubectl_template
  stage: review
  variables:
    NAMESPACE: gitlabops-review

staging_kubectl:
  extends: .kubectl_template
  stage: staging
  variables:
    NAMESPACE: gitlabops-staging
  only:
    - master

deploy_kubectl:
  extends: .kubectl_template
  stage: deploy
  variables:
    NAMESPACE: gitlabops-production
  when: manual
  only:
    - master