Skip to main content

CI Build Stage Settings

This topic provides settings and permissions for a CI Build Stage.

Permissions​

Role(s) required to create, retrieve, update, and delete data in Pipeline stage. Project Admin, Project Member.

Stage Name​

The unique name for this Stage.

ID​

See Entity Identifier Reference.

Description​

Text string.

Clone Codebase​

When you select this option, Harness automatically clones your codebase repository before executing the steps of this stage.

No special configuration is required.

If you don't select the option here, you can select it in Stage Details.

Configure Codebase​

These settings specify the codebase for the Stage. See Edit Codebase Configuration.

Connector​

A Harness Connector that connects to the repository where the codebase is located.

Repository URL​

The full URL for the codebase.

Stage Details​

The name of the stage and the Clone Codebase option.

Stage Name​

You can edit the stage name.

Description​

Text string.

Tags​

See Tags Reference.

Clone Codebase​

Same as Clone Codebase above.

Workspace​

Harness automatically creates a temporary volume, known as your workspace, and clones your codebase repository into this volume. The workspace is the current working directory for each step in your Pipeline.

Enter a workspace volume, beginning with a forward slash, such as /vol. If you enter /vol, the workspace will be /vol/harness.

The workspace is ephemeral: the Build creates the workspace when the Stage starts and destroys it when the Stage ends.

Individual Steps can communicate and share state using the workspace filesystem. The workspace is a volume, so filesystem changes persist across the entire Stage.

Share Paths​

You can add Shared Paths to share data in folders outside the default workspace. For example, the maven m2 repo is stored in /root/.m2 by default. If your Build Stage uses Maven, you can specify the shared path/root/.m2 so that all Steps can access the repo.

Variables​

Environment variables are available to all steps in the stage. For an example use case, see Option: Build a Docker Image without Pushing.

Infrastructure​

This functionality is limited temporarily to the platforms and settings you can see. More functionality for this feature is coming soon.Infrastructure is where the build is run. It is a build farm. For example, a Kubernetes cluster. The cluster uses a container to execute Run steps in the stage. See Run Step Settings.

Kubernetes Cluster​

A Kubernetes cluster can be used as a build farm. See Setting up a Kubernetes Cluster Build Infrastructure.

Namespace​

The Kubernetes namespace in the target cluster to use.

Override Image Connector​

By default, Harness pulls certain images from public Docker Hub repos that are needed to run a build. You can override this by using a Connector that downloads these images from the Harness Container Image Registry instead. This option is useful when your default Delegate cannot access the public registry (due to security policies in your organization, for example, or if your infrastructure is running in a private cloud).

To override how the Build Stage pulls these images, create a Connector as described in Connect to Harness Container Image Registry Using Docker Connector.

Advanced​

Volumes​

A list of the volumes you want to mount onto the pod running the Stage.

Empty Directory​

Mount a new emptyDir volume that gets deleted when the Stage finishes execution.

  • Mount Path: The volume path for Step containers.
  • Medium: The storage medium for the volume. Leave blank to use the default medium for the host node, or enter memory to mount a tmpfs (RAM-backed filesystem) on the host node.
  • Size: Maximum memory that the volume can use. You can express memory as a plain integer or as a fixed-point number using the suffixes G or M. You can also use the power-of-two equivalents Gi and Mi. If not specified, the volume can use up to 50% of available memory on the host node.
Host Path​

Mount a file or folder from the host node filesystem.

It is good practice to avoid hostPath volumes in most cases. See hostPath in the Kubernetes docs.* Mount Path: The volume path for Step containers.

  • Path: The volume path on the host node.
  • Path Type: To apply a precheck on the specified path before mounting the volume, enter a supported value such as FileOrCreate. Leave blank to skip any prechecks before mounting.
Persistent Volume Claim​

Mount a Persistent Volume using a predefined Persistent Volume Claim.

  • Mount Path: The volume path for Step containers.
  • Claim Name: Name of a PVC defined in your build infrastructure.
  • Read Only: Mount the volume in read-only mode.

Service Account Name​

The Service Account for Step containers to use when communicating with the Kubernetes API server. Leave blank to use the default service account for the namespace.

Init Timeout​

Timeout for the initialization phase. During this phase, Harness downloads the build step images and spins up the containers to execute the build steps.

Annotations​

Kubernetes Annotation to the pod YAML used to create the host pod for the Stage. See Annotation.

Labels​

Key/Value pair that will be added to the Kubernetes pod YAM used to create the host pod for the Stage. See Labels.

Automount Service Account Token​

By default, Kubernetes mounts a token for the Service Account when it creates a pod, which enables the pod to communicate with the Kubernetes API server. When this option is disabled, the service account token will not get mounted.

Priority Class​

The PriorityClass of the Stage pod in case resources run out on the host node. Specify a PriorityClass from your build infrastructure. You can also specify the predefined classes system-cluster-critical or system-node-critical, which ensure that the Stage is always scheduled first.

If you leave this field blank, the PriorityClass will be the globalDefault (if your infrastructure has one defined) or 0, which is lowest priority.

Container Security Context​

Configure the Security Context for the Stage (pod) and Steps (containers):

  • Privileged: Run all containers with the --privileged flag enabled. This flag is disabled by default. You can override this setting in individual Run and Run Tests steps.
  • Allow Privilege Escalation: When enabled, a process can gain more privileges than its parent process. This setting determines whether the no_new_privs flag gets set on the container process.
  • Add Capabilities: The list of capabilities to add to each Step by default, in addition to the runtime defaults. This field corresponds to the DefaultAddCapabilities option in Kubernetes.
  • Drop Capabilities: The list of capabilities that must be dropped from each Step. This field corresponds to the RequiredDropCapabilities option in Kubernetes.
  • Run as Non-Root: Run all Steps as a non-root User. To specify a default User Id for all containers, set the Run as User field.
  • Read-Only Root Filesystem: Run all Steps with a read-only root filesystem, with no writable layer.
  • Run as User: Run with this user Id for containers in the pod. A typical example of a Run as User value would be 1000. To override this default, set Run as User in individual Steps.

Node Selector​

A list of nodeSelectors, which whitelist the set of candidate nodes based on your Stage pod requirements.

Tolerations​

A list of tolerations, which allow (but do not require) the pods to schedule onto nodes with matching taints.

Execution​

The Execution section is where you add the steps that are performed in this stage.

See CI Technical Reference.

Build Stage YAML Example​

Here's an example of a Build Stage definition taken from a Pipeline YAML:

        - stage:  
              name: plugin-download-drone  
              identifier: plugindownloaddrone  
              type: CI  
              spec:  
                  cloneCodebase: true  
                  infrastructure:  
                      type: KubernetesDirect  
                      spec:  
                          connectorRef: account.docexample  
                          namespace: default  
                          volumes:  
                              - mountPath: /root/.m2  
                                type: EmptyDir  
                                spec:  
                                    medium: ""  
                                    size: 10Gi  
                              - mountPath: /var/run  
                                type: HostPath  
                                spec:  
                                    path: /var/run  
                              - mountPath: /var/my-pv1  
                                type: PersistentVolumeClaim  
                                spec:  
                                    claimName: my-pv1  
                                    readOnly: true  
                          serviceAccountName: myServiceAccountName  
                          automountServiceAccountToken: true  
                          nodeSelector:  
                              kubernetes.io/os: windows  
                          containerSecurityContext:  
                              capabilities:  
                                  drop:  
                                      - ALL  
                  execution:  
                      steps:

See Also​