#!groovy

@Library('infraLib') _

List<String> softwareCatalogFiles = [
  "software-catalog.yaml",
  "software-catalog-celery.yaml",
]

pipeline {
  agent {
    label 'linux-agents'
  }
  options {
    ansiColor('xterm')
    disableConcurrentBuilds()
    disableResume()
    timeout(60)
    timestamps()
    buildDiscarder logRotator(artifactDaysToKeepStr: '',
      artifactNumToKeepStr: '',
      daysToKeepStr: '',
      numToKeepStr: '15')
  }
  environment {
    PROJECT        = 'core-images'
    PROJECT_GROUP  = 'core'
    VERSION        = octopus.getVersion(env.BRANCH_NAME,env.WORKSPACE)

    AWS_PROFILE    = 'gdb-core-dev'
    AWS_ACCOUNT_ID = '582412345909'
    AWS_REGION     = 'us-east-1'

    ECR_REGISTRY        = "${env.AWS_ACCOUNT_ID}.dkr.ecr.${env.AWS_REGION}.amazonaws.com"
    ECR_REPOSITORY_NAME = "${env.PROJECT_GROUP}/${env.PROJECT}"
    ECR_REGISTRY_URI    = "${env.ECR_REGISTRY}/${ECR_REPOSITORY_NAME}"

    OCTOPUS_PROJECT     = "${env.PROJECT_GROUP}.${env.PROJECT}"
    OCTOPUS_CLI_SERVER  = 'https://octopus.delphi.zone'
    OCTOPUS_CLI_API_KEY = utility.getSecretValueById('infra/jenkins/octopus_api_key', 'gdb-delphi-dev')
    OCTOPUS_CHANNEL     = octopus.setOctoChannel(env.BRANCH_NAME)
    DEPLOY_ENV          = octopus.setDeploymentEnv(params.DEPLOY_ENV_CHOICE, env.PROJECT_GROUP, env.BRANCH_NAME)

    NOTIFICATIONS_CHANNEL = "#core-deployments"
  }
  parameters {
    choice(
      choices: [
        'default',
        'dev',
        'qa',
        'prod',
        'skip_deployment'
      ],
      description: 'Set environment for deployment. Development by default',
      name: 'DEPLOY_ENV_CHOICE'
    )
    choice(
      choices: [
        'default',
        'yes',
        'no'
      ],
      description: 'By default deploy is only triggered for develop/release/master branch',
      name: 'TRIGGER_DEPLOY'
    )
    choice(
      choices: [
        'error',
        'overwrite',
        'skip_build'
      ],
      description: "Docker image upload mode - ovewrite if the image with such tag already exists, raise error if exists, or skip build part if exists.",
      name: 'IMAGE_UPLOAD_MODE'
    )
    choice(
      choices: [
        'no',
        'yes'
      ],
      description: "Don't raise errors in case release already exists",
      name: 'SKIP_RELEASE_CREATION'
    )
    booleanParam(
      defaultValue: true,
      description: 'Run security check stage',
      name: 'RUN_SECURITY_CHECK'
    )
  }
  triggers {
    issueCommentTrigger('.*build me.*')
  }
  stages {
    stage('Validate Software Catalog Definition') {
      steps {
        library "jenkins-global-libraries@master"
        script {
          softwareCatalogFiles.each {file ->
            datadogSoftwareCatalogValidate(
              serviceDefinitionFilePath: file,
            )
          }
        }
      }
    }
    stage('Build Container') {
      steps {
        sh label: 'build', script: '''
            make docker/login
            make docker/image/build
        '''
      }
    }
    stage('Test') {
      stages {
        stage('Unit tests') {
          steps {
            sh "make docker/test"
          }
        }
      }
    }
    stage('Style check') {
      stages {
        stage('Linter') {
          steps {
            sh "make docker/lint"
          }
        }
      }
    }
    stage('Security check') {
       when {
         expression { return params.RUN_SECURITY_CHECK }
       }
       stages {
        stage('Bandit') {
          steps {
            sh "make docker/bandit"
          }
        }
        stage('Dependencies Check') {
          steps {
            sh "make docker/dependencies-check"
          }
        }
      }
    }
    stage('SonarQube Analysis') {
      when {
        allOf {
          branch 'develop' // there is a limit to a single branch in the sonarqube community edition
        }
      }
      environment {
        SONAR_HOST_URL         = "https://sonar.delphiplatform.io"
        SONAR_PROJECT_BASE_DIR = "${env.WORKSPACE}"
        SONAR_TOKEN            = utility.getSecretValueById('infra/jenkins/common/sonar_login_token', 'gdb-infra-dev')
      }
      steps {
        script {
          docker.image("sonarsource/sonar-scanner-cli").inside {
            sh script: """
set +x
sonar-scanner \
  -Dsonar.projectKey=atlas.images-api \
  -Dsonar.projectBaseDir=${env.SONAR_PROJECT_BASE_DIR} \
  -Dsonar.host.url=${env.SONAR_HOST_URL} \
  -Dsonar.login=${env.SONAR_TOKEN} \
  -Dsonar.projectVersion=${env.VERSION}
"""
          }
        }
      } /** end: steps */
    } /** end: stage */
    stage('Deploy') {
      when {
        anyOf {
          branch 'master'
          branch 'develop'
          expression { return params.TRIGGER_DEPLOY.equals('yes') }
        }
      }
      stages {
        stage('Check version') {
          when { expression { return params.IMAGE_UPLOAD_MODE == 'error' && octopus.ecrImageTagExists(env.VERSION,env.ECR_REPOSITORY_NAME,env.AWS_PROFILE) }}
          steps { error "Image with ${env.VERSION} version tag already exists. To ignore this error set IMAGE_UPLOAD_MODE parameter to overwrite or skip_build"}
        } /** end: stage */
        stage('Push to ECR') {
          when {
            expression { return params.IMAGE_UPLOAD_MODE == 'overwrite' || !octopus.ecrImageTagExists(env.VERSION,env.ECR_REPOSITORY_NAME,env.AWS_PROFILE) }
          }
          steps {
            sh label: 'push', script: '''
              make docker/login
              make docker/image/push
            '''
          } /** end: steps */
        } /** end: stage */
        stage('Upload documentation') {
          steps {
            script {
              documentation.upload(env.BRANCH_NAME, env.WORKSPACE)
            }
          }
        }
        stage('Create a release in octopus') {
          //Check if release already exists. If it does, raise error or skip it, based on given param
          when {
            expression { return params.SKIP_RELEASE_CREATION.equals('no') || !octopus.releaseExists(env.OCTOPUS_PROJECT,env.VERSION) }
          }
          steps {
            echo octopus.createRelease(env.OCTOPUS_PROJECT,env.VERSION,env.OCTOPUS_CHANNEL)
          } /** end: steps */
        } /** end: stage */
        stage('Deploy release in octopus') {
          when {
            not { expression { return env.DEPLOY_ENV.equals('skip_deployment') } }
          }
          steps {
            echo octopus.deployRelease(env.OCTOPUS_PROJECT,env.DEPLOY_ENV,env.VERSION,env.OCTOPUS_CHANNEL)
          } /** end: steps */
        } /** end: stage */
        stage('Publish Software Catalog Definition') {
          when {
            branch 'master'
          }
          steps{
            script {
              softwareCatalogFiles.each {file ->
                datadogSoftwareCatalogPublish(
                  serviceDefinitionFilePath: file,
                  fetchAdditionalMetadata: false,
                )
              }
            }
          }
        }
      } /** end: stages */
    } /** end: stage */
  }
  post {
    always {
      sh 'make docker/clean'
      sh "sudo chown \$(whoami):\$(whoami) -R ${env.WORKSPACE}"
      script {
        utility.slackNotify(currentBuild.currentResult, env.NOTIFICATIONS_CHANNEL)
      }
    }
    cleanup {
        deleteDir()
    }
  }
}