dc-observatio/.gitlab/ci/pcp-coverage-scheme-service.yml

variables:
  GRADLE_USER_HOME: "$CI_PROJECT_DIR/.gradle"

  COVERAGE_SCHEME_SERVICE_DIR: "services/pcp-coverage-scheme-service"
  COVERAGE_SCHEME_HELM_CHART_DIR: "helm/pcp-coverage-scheme-service"
  COVERAGE_SCHEME_HELM_RELEASE: "pcp-coverage-scheme-service"
  COVERAGE_SCHEME_IMAGE_REPOSITORY: "$INTERNAL_REGISTRY/pcp-coverage-scheme-service"
  COVERAGE_SCHEME_IMAGE_TAG: "$CI_COMMIT_SHORT_SHA"
  COVERAGE_SCHEME_K8S_NAMESPACE_DEV: "pcp-dev"
  COVERAGE_SCHEME_K8S_NAMESPACE_MASTER: "pcp-master"

.coverage_scheme_changes: &coverage_scheme_changes
  - services/pcp-coverage-scheme-service/**/*
  - libs/pcp-types-lib/**/*
  - build.gradle.kts
  - settings.gradle.kts
  - gradle.properties
  - .gitlab/ci/pcp-coverage-scheme-service.yml
  - helm/pcp-coverage-scheme-service/**/*
  - deploy/**/*

.coverage_scheme:rules:build-and-image:
  rules:
    - if: '$RUN_ALL == "true"'
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
      changes: *coverage_scheme_changes
    - if: '$CI_COMMIT_BRANCH == "dev"'
      changes: *coverage_scheme_changes
    - if: '$CI_COMMIT_BRANCH == "master"'
      changes: *coverage_scheme_changes
    - when: never

.coverage_scheme:rules:test:
  rules:
    - if: '$RUN_ALL == "true"'
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
      changes: *coverage_scheme_changes
    - if: '$CI_COMMIT_BRANCH == "dev"'
      changes: *coverage_scheme_changes
      when: manual
    - if: '$CI_COMMIT_BRANCH == "master"'
      changes: *coverage_scheme_changes
    - when: never

.coverage_scheme:rules:deploy-dev:
  rules:
    - if: '$RUN_ALL == "true"'
      when: manual
    - if: '$CI_COMMIT_BRANCH == "dev"'
      changes: *coverage_scheme_changes
      when: manual
    - when: never

.coverage_scheme:rules:deploy-master:
  rules:
    - if: '$CI_COMMIT_BRANCH == "master"'
      changes: *coverage_scheme_changes
      when: manual
    - when: never

.coverage_scheme:gradle-cache:
  cache:
    key: "gradle-coverage-scheme-$CI_DEFAULT_BRANCH"
    paths:
      - .gradle/wrapper
      - .gradle/caches
    policy: pull-push

.coverage_scheme:docker-build:
  image: repo.nstart.cloud/library/docker:26
  services:
    - name: repo.nstart.cloud/library/docker:26-dind
      alias: docker
      command: ["--tls=false", "--insecure-registry=registry.k8s.265.nstart.local"]
  variables:
    DOCKER_HOST: tcp://docker:2375
    DOCKER_TLS_CERTDIR: ""
    DOCKER_BUILDKIT: "1"
  before_script:
    - docker version
    - docker info

.coverage_scheme:helm-deploy:
  image: repo.nstart.cloud/dtzar/helm-kubectl:3.14.0
  before_script:
    - mkdir -p /root/.kube
    - helm version
  after_script:
    - rm -f /root/.kube/config

coverage-scheme:test:
  stage: test
  image: repo.nstart.cloud/library/gradle:jdk21-ubi10
  extends:
    - .coverage_scheme:rules:test
    - .coverage_scheme:gradle-cache
  before_script:
    - chmod +x gradlew
  script:
    - ./gradlew --no-daemon :services:pcp-coverage-scheme-service:test
  artifacts:
    when: always
    reports:
      junit:
        - services/pcp-coverage-scheme-service/build/test-results/test/*.xml
    paths:
      - services/pcp-coverage-scheme-service/build/reports/tests/
    expire_in: 7 days

coverage-scheme:build:
  stage: build
  image: repo.nstart.cloud/library/gradle:jdk21-ubi10
  extends:
    - .coverage_scheme:rules:build-and-image
    - .coverage_scheme:gradle-cache
  needs:
    - job: coverage-scheme:test
      artifacts: true
  before_script:
    - chmod +x gradlew
  script:
    - ./gradlew --no-daemon :services:pcp-coverage-scheme-service:bootJar
  artifacts:
    when: always
    paths:
      - services/pcp-coverage-scheme-service/build/libs/*.jar
    expire_in: 7 days

coverage-scheme:package:
  stage: package
  extends:
    - .coverage_scheme:rules:build-and-image
    - .coverage_scheme:docker-build
  needs:
    - job: coverage-scheme:build
      artifacts: true
  script:
    - 'echo "COVERAGE_SCHEME_IMAGE_REPOSITORY=$COVERAGE_SCHEME_IMAGE_REPOSITORY"'
    - |
      JAR_COUNT="$(find "$COVERAGE_SCHEME_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | wc -l)"

      if [ "$JAR_COUNT" -ne 1 ]; then
        echo "Expected exactly one executable jar, found: $JAR_COUNT"
        find "$COVERAGE_SCHEME_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' -print || true
        exit 1
      fi

      JAR_FILE="$(find "$COVERAGE_SCHEME_SERVICE_DIR/build/libs" -maxdepth 1 -type f -name '*.jar' ! -name '*-plain.jar' | head -n 1)"
    - rm -rf docker-context
    - mkdir -p docker-context/build/libs
    - cp "$COVERAGE_SCHEME_SERVICE_DIR/Dockerfile" docker-context/Dockerfile
    - cp "$JAR_FILE" docker-context/build/libs/app.jar
    - find docker-context -maxdepth 4 -type f -print -exec ls -la {} \;
    - docker build --file docker-context/Dockerfile --tag "$COVERAGE_SCHEME_IMAGE_REPOSITORY:$COVERAGE_SCHEME_IMAGE_TAG" docker-context
    - docker push "$COVERAGE_SCHEME_IMAGE_REPOSITORY:$COVERAGE_SCHEME_IMAGE_TAG"
    - printf "COVERAGE_SCHEME_IMAGE=%s\n" "$COVERAGE_SCHEME_IMAGE_REPOSITORY:$COVERAGE_SCHEME_IMAGE_TAG" > coverage-scheme-image.env
  artifacts:
    reports:
      dotenv: coverage-scheme-image.env
    expire_in: 7 days

coverage-scheme:deploy:dev:
  stage: deploy
  extends:
    - .coverage_scheme:rules:deploy-dev
    - .coverage_scheme:helm-deploy
  needs:
    - job: coverage-scheme:package
      artifacts: true
  environment:
    name: dev/pcp-coverage-scheme-service
  script:
    - |
      if [ -n "${KUBE_CONFIG_DEV:-}" ]; then
        printf '%s' "$KUBE_CONFIG_DEV" > /root/.kube/config
      elif [ -n "${KUBE_CONFIG_DEV_B64:-}" ]; then
        if printf '%s' "$KUBE_CONFIG_DEV_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then
          printf '%s' "$KUBE_CONFIG_DEV_B64" > /root/.kube/config
        elif ! printf '%s' "$KUBE_CONFIG_DEV_B64" | base64 -d > /root/.kube/config; then
          echo "KUBE_CONFIG_DEV_B64 is not valid base64. Set KUBE_CONFIG_DEV to raw kubeconfig or KUBE_CONFIG_DEV_B64 to base64 kubeconfig."
          exit 1
        fi
      else
        echo "KUBE_CONFIG_DEV or KUBE_CONFIG_DEV_B64 must be set."
        exit 1
      fi
    - chmod 600 /root/.kube/config
    - export KUBECONFIG=/root/.kube/config
    - 'export IMAGE_REPOSITORY="${COVERAGE_SCHEME_IMAGE%:*}"'
    - 'export IMAGE_TAG="${COVERAGE_SCHEME_IMAGE##*:}"'
    - >
      helm upgrade --install "$COVERAGE_SCHEME_HELM_RELEASE"
      "$COVERAGE_SCHEME_HELM_CHART_DIR"
      --namespace "$COVERAGE_SCHEME_K8S_NAMESPACE_DEV"
      --create-namespace
      --wait
      --atomic
      --timeout 10m
      -f "$COVERAGE_SCHEME_HELM_CHART_DIR/values.yaml"
      -f "$COVERAGE_SCHEME_HELM_CHART_DIR/values-dev.yaml"
      --set image.repository="$IMAGE_REPOSITORY"
      --set image.tag="$IMAGE_TAG"
      --set app.profile=dev
      --set app.configLabel=dev

coverage-scheme:deploy:master:
  stage: deploy
  extends:
    - .coverage_scheme:rules:deploy-master
    - .coverage_scheme:helm-deploy
  needs:
    - job: coverage-scheme:package
      artifacts: true
  environment:
    name: master/pcp-coverage-scheme-service
  script:
    - |
      if [ -n "${KUBE_CONFIG_MASTER:-}" ]; then
        printf '%s' "$KUBE_CONFIG_MASTER" > /root/.kube/config
      elif [ -n "${KUBE_CONFIG_MASTER_B64:-}" ]; then
        if printf '%s' "$KUBE_CONFIG_MASTER_B64" | grep -qE '(^apiVersion:|^kind: Config|^clusters:)'; then
          printf '%s' "$KUBE_CONFIG_MASTER_B64" > /root/.kube/config
        elif ! printf '%s' "$KUBE_CONFIG_MASTER_B64" | base64 -d > /root/.kube/config; then
          echo "KUBE_CONFIG_MASTER_B64 is not valid base64. Set KUBE_CONFIG_MASTER to raw kubeconfig or KUBE_CONFIG_MASTER_B64 to base64 kubeconfig."
          exit 1
        fi
      else
        echo "KUBE_CONFIG_MASTER or KUBE_CONFIG_MASTER_B64 must be set."
        exit 1
      fi
    - chmod 600 /root/.kube/config
    - export KUBECONFIG=/root/.kube/config
    - 'export IMAGE_REPOSITORY="${COVERAGE_SCHEME_IMAGE%:*}"'
    - 'export IMAGE_TAG="${COVERAGE_SCHEME_IMAGE##*:}"'
    - >
      helm upgrade --install "$COVERAGE_SCHEME_HELM_RELEASE"
      "$COVERAGE_SCHEME_HELM_CHART_DIR"
      --namespace "$COVERAGE_SCHEME_K8S_NAMESPACE_MASTER"
      --create-namespace
      --wait
      --atomic
      --timeout 10m
      -f "$COVERAGE_SCHEME_HELM_CHART_DIR/values.yaml"
      -f "$COVERAGE_SCHEME_HELM_CHART_DIR/values-master.yaml"
      --set image.repository="$IMAGE_REPOSITORY"
      --set image.tag="$IMAGE_TAG"
      --set app.profile=master
      --set app.configLabel=master