em-annotation-api/Jenkinsfile_CNP at master · hmcts/em-annotation-api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
#!groovy
import uk.gov.hmcts.contino.AppPipelineDsl
import java.util.UUID

properties([
    [
        $class: 'GithubProjectProperty',
        displayName: 'Evidence Annotation App',
        projectUrlStr: 'https://github.com/hmcts/rpa-em-annotation-api'
    ],
    pipelineTriggers([
        [$class: 'GitHubPushTrigger']
    ])
])

@Library("Infrastructure")

def type = "java"
def product = "em"
def component = "anno"

def secrets = [
        's2s-${env}': [
                secret('microservicekey-em-gw', 'FUNCTIONAL_TEST_CLIENT_S2S_TOKEN'),
                secret('microservicekey-ccd-gw', 'FUNCTIONAL_TEST_CCD_GW_SERVICE_SECRET'),
                secret('microservicekey-xui-webapp', 'FUNCTIONAL_TEST_XUI_WEBAPP_SERVICE_SECRET')
        ],
        'rpa-${env}': [
                secret('show-oauth2-token', 'FUNCTIONAL_TEST_CLIENT_OAUTH_SECRET')
        ]
]

static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
    [ $class: 'AzureKeyVaultSecret',
      secretType: 'Secret',
      name: secretName,
      version: '',
      envVariable: envVar
    ]
}

// Vars for Kubernetes
env.IDAM_API_BASE_URI = 'https://idam-api.aat.platform.hmcts.net'
env.OPEN_ID_API_BASE_URI = 'https://idam-web-public.aat.platform.hmcts.net/o'
env.OIDC_ISSUER_BASE_URI = 'https://forgerock-am.service.core-compute-idam-aat.internal:8443/openam/oauth2/hmcts'
env.S2S_BASE_URI = 'http://rpe-service-auth-provider-aat.service.core-compute-aat.internal'
env.IDAM_WEBSHOW_WHITELIST = 'https://em-show-aat.service.core-compute-aat.internal/oauth2/callback'
env.DM_STORE_APP_URL = 'http://dm-store-aat.service.core-compute-aat.internal'
env.PACT_BROKER_FULL_URL = 'https://pact-broker.platform.hmcts.net'
env.CCD_DATA_API_URL = 'http://ccd-data-store-api-aat.service.core-compute-aat.internal'
env.TEST_USER_PASSWORD = 'A!' + UUID.randomUUID().toString().replace('-', '').take(20)


def vaultOverrides = [
        'preview' : 'aat',
        'spreview': 'saat'
]

withPipeline(type , product, component) {
    enableDbMigration('em-anno')
    overrideVaultEnvironments(vaultOverrides)
    loadVaultSecrets(secrets)
    disableLegacyDeployment()
    enableAksStagingDeployment()
    onMaster {
        enableFortifyScan('em-anno-aat')

        afterAlways('fortify-scan') {
            steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/Fortify Scan/**/*'
        }
    }
  afterSuccess('test') {
        sh '''
        curl https://raw.githubusercontent.com/hmcts/reform-api-docs/master/bin/publish-swagger-docs.sh > publish-swagger-docs.sh
        sh ./publish-swagger-docs.sh
         '''
    }

    enablePactAs([AppPipelineDsl.PactRoles.CONSUMER, AppPipelineDsl.PactRoles.PROVIDER])


    afterAlways('test') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/checkstyle/**/*'
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/integration/**/*'
    }

    afterAlways('pact-consumer-tests') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
    }

    afterAlways('pact-provider-verification') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
    }

    afterAlways('smoketest:preview') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
    }

    afterAlways('smoketest:aat') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
    }

    afterAlways('functionalTest:preview') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/site/serenity/**/*'
    }

    afterAlways('functionalTest:aat') {
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/reports/tests/**/*'
        steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/site/serenity/**/*'
    }

    syncBranchesWithMaster(['demo', 'perftest', 'ithc'])
}