Cicd Expert

# CI/CD Pipeline Examples

This file contains comprehensive pipeline examples for various platforms and use cases.

---

## Table of Contents

1. [GitLab CI Examples](#gitlab-ci-examples)
2. [Jenkins Pipeline Examples](#jenkins-pipeline-examples)
3. [Advanced Matrix Builds](#advanced-matrix-builds)
4. [Monorepo Strategies](#monorepo-strategies)
5. [Docker Build Optimization](#docker-build-optimization)
6. [GitOps with ArgoCD](#gitops-with-argocd)

---

## GitLab CI Examples

### Complete GitLab CI/CD Pipeline

```yaml
# .gitlab-ci.yml
variables:
  DOCKER_DRIVER: overlay2
  DOCKER_TLS_CERTDIR: "/certs"
  IMAGE_TAG: $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA

stages:
  - security
  - build
  - test
  - scan
  - deploy
  - verify

# Security stage
secret-scan:
  stage: security
  image: trufflesecurity/trufflehog:latest
  script:
    - trufflehog git file://. --json --fail
  allow_failure: false

sast:
  stage: security
  image: returntocorp/semgrep
  script:
    - semgrep --config=p/security-audit --config=p/owasp-top-ten --sarif -o semgrep.sarif .
  artifacts:
    reports:
      sast: semgrep.sarif
    expire_in: 1 week

dependency-scan:
  stage: security
  image: node:20
  script:
    - npm audit --audit-level=high
    - npm ci
    - npx snyk test --severity-threshold=high
  only:
    - merge_requests
    - main

# Build stage
build:
  stage: build
  image: node:20
  cache:
    key:
      files:
        - package-lock.json
    paths:
      - node_modules/
  script:
    - npm ci
    - npm run build
  artifacts:
    paths:
      - dist/
    expire_in: 1 day
  only:
    - merge_requests
    - main

# Test stage
unit-tests:
  stage: test
  image: node:20
  dependencies:
    - build
  cache:
    key:
      files:
        - package-lock.json
    paths:
      - node_modules/
  script:
    - npm ci
    - npm run test:unit -- --coverage
  coverage: '/Lines\s*:\s*(\d+\.\d+)%/'
  artifacts:
    reports:
      coverage_report:
        coverage_format: cobertura
        path: coverage/cobertura-coverage.xml
    expire_in: 1 week

integration-tests:
  stage: test
  image: node:20
  services:
    - postgres:14
    - redis:7
  variables:
    POSTGRES_DB: testdb
    POSTGRES_USER: testuser
    POSTGRES_PASSWORD: testpass
    DATABASE_URL: postgresql://testuser:testpass@postgres:5432/testdb
    REDIS_URL: redis://redis:6379
  dependencies:
    - build
  script:
    - npm ci
    - npm run db:migrate
    - npm run test:integration
  only:
    - merge_requests
    - main

# Container scan stage
container-build:
  stage: scan
  image: docker:24
  services:
    - docker:24-dind
  before_script:
    - echo $CI_REGISTRY_PASSWORD | docker login -u $CI_REGISTRY_USER --password-stdin $CI_REGISTRY
  script:
    - docker build --cache-from $CI_REGISTRY_IMAGE:latest -t $IMAGE_TAG -t $CI_REGISTRY_IMAGE:latest .
    - docker push $IMAGE_TAG
    - docker push $CI_REGISTRY_IMAGE:latest
  only:
    - main

container-scan:
  stage: scan
  image: aquasec/trivy:latest
  script:
    - trivy image --severity HIGH,CRITICAL --exit-code 1 $IMAGE_TAG
  dependencies:
    - container-build
  only:
    - main

# Deploy stages
deploy-staging:
  stage: deploy
  image: bitnami/kubectl:latest
  environment:
    name: staging
    url: https://staging.example.com
  before_script:
    - kubectl config use-context $KUBE_CONTEXT_STAGING
  script:
    - kubectl set image deployment/myapp myapp=$IMAGE_TAG -n staging
    - kubectl rollout status deployment/myapp -n staging --timeout=5m
  only:
    - main

verify-staging:
  stage: verify
  image: curlimages/curl:latest
  script:
    - |
      for i in {1..30}; do
        if curl -f https://staging.example.com/health; then
          echo "Staging health check passed"
          exit 0
        fi
        sleep 10
      done
      echo "Staging health check failed"
      exit 1
  dependencies:
    - deploy-staging
  only:
    - main

deploy-production:
  stage: deploy
  image: bitnami/kubectl:latest
  environment:
    name: production
    url: