#!groovy

@Library('infraLib') _

List<String> softwareCatalogFiles = [
  "software-catalog.yaml",
  "software-catalog-rti.yaml",
]

def bumpVersionBranch = 'master'

def setDefaultDeployEnv(branch) {
  switch(branch) {
    case "master":
    case ~/release.*$/:
    case ~/hotfix.*$/:
      return ("stage")
    default:
      return ("dev")
  }
}

def setDeploymentEnv(deployEnvChoice, branch) {
  switch(deployEnvChoice) {
    case "default":
      return setDefaultDeployEnv(branch)
    case "skip_deployment":
      return deployEnvChoice
    default:
      return (deployEnvChoice)
  }
}

pipeline {
  agent {
    label 'linux-agents'
  }
  options {
    ansiColor('xterm')
    disableConcurrentBuilds()
    timeout(60)
    timestamps()
    buildDiscarder logRotator(artifactDaysToKeepStr: '', artifactNumToKeepStr: '', daysToKeepStr: '', numToKeepStr: '30')
  }
  environment {
    PROJECT        = 'auth-proxy'
    PROJECT_GROUP  = 'core'

    AWS_PROFILE    = 'gdb-core-dev'
    AWS_ACCOUNT_ID = '582412345909'
    AWS_REGION     = 'us-east-1'

    ECR_REGISTRY        = "${env.AWS_ACCOUNT_ID}.dkr.ecr.${env.AWS_REGION}.amazonaws.com"
    ECR_REPOSITORY_NAME = "${PROJECT_GROUP}/${PROJECT}"
    ECR_REGISTRY_URI    = "${env.ECR_REGISTRY}/${ECR_REPOSITORY_NAME}"

    OCTOPUS_PROJECT     = "${env.PROJECT_GROUP}.${env.PROJECT}"
    OCTOPUS_CLI_SERVER  = 'https://octopus.delphi.zone'
    OCTOPUS_CLI_API_KEY = utility.getSecretValueById('infra/jenkins/octopus_api_key', 'gdb-delphi-dev')
    OCTOPUS_CHANNEL     = octopus.setOctoChannel(env.BRANCH_NAME)
    DEPLOY_ENV          = setDeploymentEnv(params.DEPLOY_ENV_CHOICE, env.BRANCH_NAME)
    VERSION             = octopus.getVersion(env.BRANCH_NAME,env.WORKSPACE)

    PYPI_INDEX_URL = "https://artifacts.apollo.stream/repository/pypi-all/simple"

    NOTIFICATIONS_CHANNEL = '#core-deployments'
  }

  parameters {
    separator(name: 'separator-auth-proxy-deployment', sectionHeader: 'Deployment parameters')
    choice(
      choices: [
        'default',
        'dev',
        'qa',
        'stage',
        'uat',
        'prod',
        'skip_deployment'
      ],
      description: 'Set environment for deployment.',
      name: 'DEPLOY_ENV_CHOICE'
    )
    choice(
      choices: [
        'default',
        'yes',
        'no'
      ],
      description: 'By default deploy is only triggered for develop/release/master branch',
      name: 'TRIGGER_DEPLOY'
    )
    choice(
      choices: [
        'error',
        'overwrite',
        'skip_build'
      ],
      description: "Docker image upload mode - ovewrite if the image with such tag already exists, raise error if exists, or skip build part if exists.",
      name: 'IMAGE_UPLOAD_MODE'
    )
    choice(
      choices: [
        'no',
        'yes'
      ],
      description: "Don't raise errors in case release already exists",
      name: 'SKIP_RELEASE_CREATION'
    )
    separator(name: 'separator-auth-proxy-checks', sectionHeader: 'Skip static checks')
    booleanParam(name: 'SKIP_TEST', defaultValue: false, description: 'Skip unit tests')
    booleanParam(name: 'SKIP_STATIC', defaultValue: false, description: 'Skip static checks')
    booleanParam(name: 'RUN_SECURITY_CHECK', defaultValue: true, description: 'Run security check stage')
  }

  stages {
    stage('Validate Software Catalog Definition') {
      steps {
        library "jenkins-global-libraries@master"
        script {
          softwareCatalogFiles.each {file ->
            datadogSoftwareCatalogValidate(
              serviceDefinitionFilePath: file,
            )
          }
        }
      }
    }
    stage('Build') {
      options {
        retry(2)
      }
      steps {
        script { currentBuild.displayName = env.VERSION }
        sh label: 'build', script: '''
            make docker/image/build
        '''
      } /** end: steps */
    } /** end: stage */

    stage('Test') {
      when {
        not {
          expression { return params.SKIP_TEST }
        }
      }
      steps {
        sh label: 'test', script: '''
            make docker/test
        '''
      } /** end: steps */
      post {
        always {
          sh "sudo chown \$(whoami):\$(whoami) -R ${env.WORKSPACE}"
          // junit allowEmptyResults: false, testResults: "report.xml"
          // cobertura autoUpdateHealth: false,
          //   autoUpdateStability: false,
          //   coberturaReportFile: 'coverage.xml',
          //   conditionalCoverageTargets: '98, 70, 70',
          //   failUnhealthy: false,
          //   failUnstable: false,
          //   lineCoverageTargets: '98, 70, 70',
          //   maxNumberOfBuilds: 0,
          //   methodCoverageTargets: '100, 70, 70',
          //   onlyStable: false,
          //   zoomCoverageChart: false
          sh "make docker/clean"
        }
      }
    } /** end: stage */
    stage('Style check') {
      steps {
        sh "make docker/lint"
      }
      post {
        always {
          sh "sudo chown \$(whoami):\$(whoami) -R ${env.WORKSPACE}"
          sh "make docker/clean"
        }
      }
    } /** end: stage */
    stage('Security check') {
       when {
         expression { return params.RUN_SECURITY_CHECK }
       }
       stages {
        stage('Bandit') {
          steps {
            sh "make docker/bandit"
          }
        }
        stage('Dependencies Check') {
          steps {
            sh "make docker/dependencies-check"
          }
        }
      }
    } /** end: stage */
    stage('SonarQube Analysis') {
      when {
        allOf {
          branch 'develop' // there is a limit to a single branch in the sonarqube community edition
        }
      }
      environment {
        SONAR_HOST_URL         = "https://sonar.delphiplatform.io"
        SONAR_PROJECT_BASE_DIR = "${env.WORKSPACE}"
        SONAR_TOKEN            = utility.getSecretValueById('infra/jenkins/common/sonar_login_token', 'gdb-infra-dev')
      }
      steps {
        script {
          docker.image("sonarsource/sonar-scanner-cli").inside {
            sh script: """
set +x
sonar-scanner \
  -Dsonar.projectKey=atlas.auth-proxy \
  -Dsonar.projectBaseDir=${env.SONAR_PROJECT_BASE_DIR} \
  -Dsonar.host.url=${env.SONAR_HOST_URL} \
  -Dsonar.login=${env.SONAR_TOKEN} \
  -Dsonar.projectVersion=${env.VERSION}
"""
          }
        }
      } /** end: steps */
    } /** end: stage */
    stage('Deploy') {
      when {
        anyOf {
          branch 'master'
          branch 'develop'
          branch comparator: 'GLOB', pattern: 'hotfix/*'
          branch comparator: 'GLOB', pattern: 'hotfix*'
          expression { return params.TRIGGER_DEPLOY.equals('yes') }
        }
      }
      stages {
        stage('Check version') {
          when { expression { return params.IMAGE_UPLOAD_MODE == 'error' && octopus.ecrImageTagExists(env.VERSION,env.ECR_REPOSITORY_NAME,env.AWS_PROFILE) }}
          steps { error "Image with ${env.VERSION} version tag already exists. To ignore this error set IMAGE_UPLOAD_MODE parameter to overwrite or skip_build"}
        } /** end: stage */
        stage('Scan image') {
          steps {
            script {
              octopus.prismaCloudScanImage(env.VERSION,
                                           env.ECR_REPOSITORY_NAME,
                                           env.AWS_PROFILE)
            }
          } /** end: steps */
        } /** end: stage */
        stage('Push to ECR') {
          when {
            expression { return params.IMAGE_UPLOAD_MODE == 'overwrite' || !octopus.ecrImageTagExists(env.VERSION,env.ECR_REPOSITORY_NAME,env.AWS_PROFILE) }
          }
          steps {
            sh label: 'push', script: '''
              make docker/image/push
            '''
          } /** end: steps */
        } /** end: stage */
        stage('Create a release in octopus') {
          //Check if release already exists. If it does, raise error or skip it, based on given param
          when {
            expression { return params.SKIP_RELEASE_CREATION.equals('no') || !octopus.releaseExists(env.OCTOPUS_PROJECT,env.VERSION) }
          }
          steps {
            echo octopus.createRelease(env.OCTOPUS_PROJECT,env.VERSION,env.OCTOPUS_CHANNEL)
          } /** end: steps */
        } /** end: stage */
        stage('Deploy release in octopus') {
          when {
            not { expression { return env.DEPLOY_ENV.equals('skip_deployment') } }
          }
          steps {
            echo octopus.deployReleaseToAllTenants(env.OCTOPUS_PROJECT,env.DEPLOY_ENV,env.VERSION,env.OCTOPUS_CHANNEL)
          } /** end: steps */
        } /** end: stage */
        stage('Publish Software Catalog Definition') {
          when {
            branch 'master'
          }
          steps {
            script {
              softwareCatalogFiles.each {file ->
                datadogSoftwareCatalogPublish(
                  serviceDefinitionFilePath: file,
                  fetchAdditionalMetadata: false,
                )
              }
            }
          }
        }
      } /** end: stages */
    } /** end: stage */
  } /** end: stages */
  post {
    always {
      sh label: 'fix permissions', script: "sudo chown \$(whoami):\$(whoami) -R ${env.WORKSPACE}"
      sh label: 'shutdown containers', script: 'make docker/clean'
      script {
        utility.slackNotify(currentBuild.currentResult, env.NOTIFICATIONS_CHANNEL)
      }
    }
    cleanup {
      deleteDir()
    }
  } /** end: post */
} /* end: pipeline */