.gitlab-ci.yml

# Source: https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Gradle.gitlab-ci.yml

# To contribute improvements to CI/CD templates, please follow the Development guide at:
# https://docs.gitlab.com/ee/development/cicd/templates.html
# This specific template is located at:
# https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Gradle.gitlab-ci.yml

# This is the Gradle build system for JVM applications
# https://gradle.org/
# https://github.com/gradle/gradle


image: svwsnrw/dockerrunner:21

# Disable the Gradle daemon for Continuous Integration servers as correctness
# is usually a priority over speed in CI environments. Using a fresh
# runtime for each build is more reliable since the runtime is completely
# isolated from any previous builds.
variables:
    GRADLE_OPTS: "-Dorg.gradle.daemon=false"

cache: &global_cache
    key: "$CI_COMMIT_REF_NAME"
    policy: pull-push
    paths:
        - ./**/build
        - .gradle_user
        - .gradle

stages:
    - build
    - integration-tests
    - analyze
    - build_installer
    - publish

publish_maven:
        stage: publish
        rules:
            -   if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+(\.\d+)?$/'
                when: on_success
        variables:
            SECURE_FILES_DOWNLOAD_PATH: '/'
        needs:
            -   job: build_linux
            -   job: build_windows
        script:
            - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
            - cat gradle_secure.properties >> gradle.properties
            - chmod +x ./deployment/setupVersion.sh
            - ./deployment/setupVersion.sh
            - ./gradlew signJar publishAllPublicationsToSonatypeRepository closeAndReleaseSonatypeStagingRepository

publish_all:
    stage: publish
    rules:
        -   if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+(\.\d+)?$/'
            when: on_success
    variables:
        SECURE_FILES_DOWNLOAD_PATH: '/'
    needs:
        -   job: build_linux
        -   job: build_windows
    script:
        - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
        - cat gradle_secure.properties >> gradle.properties
        - chmod +x ./deployment/setupVersion.sh
        - ./deployment/setupVersion.sh
        - ./gradlew signJar publishReleaseAll

publish_dockerhub:
    stage: publish
    rules:
        - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+(\.\d+)?$/'
          when: on_success
    variables:
        SECURE_FILES_DOWNLOAD_PATH: '/'
    needs:
        - job: build_linux
        - job: build_windows
    script:
        - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
        - cat gradle_secure.properties >> gradle.properties
        - cat dockerlogin.txt | docker login --username svwsnrw --password-stdin
        - chmod +x ./deployment/setupVersion.sh
        - ./deployment/setupVersion.sh
        - ./gradlew :deployment:docker:dockerPushAllDockerhub

publish_github:
    stage: publish
    rules:
        - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+(\.\d+)?$/'
          when: on_success
    variables:
        SECURE_FILES_DOWNLOAD_PATH: '/'
    needs:
        - job: build_linux
        - job: build_windows
    script:
        - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
        - cat gradle_secure.properties >> gradle.properties
        - chmod +x ./deployment/setupVersion.sh
        - ./deployment/setupVersion.sh
        - ./gradlew :deployment:githubRelease

build_linux:
    stage: build_installer
    rules:
        - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+(\.\d+)?$/'
    needs:
        - job: build
    script:
        - chmod +x ./deployment/setupVersion.sh
        - ./deployment/setupVersion.sh
        - ./gradlew :deployment:linux-installer:buildLinuxInstaller
        - mkdir artifacts_linux
        - cp -r ./deployment/linux-installer/build/distributions/ ./artifacts_linux
    artifacts:
        paths:
            - artifacts_linux/
    when: on_success

build_windows:
    stage: build_installer
    rules:
        - if: '$CI_COMMIT_TAG =~ /^v\d+\.\d+(\.\d+)?$/'
    needs:
        - job: build
    tags:
        - windows
    variables:
        SECURE_FILES_DOWNLOAD_PATH: '/'
        SVWS_SIGNTOOL_PATH: 'c:\tmp\signtool\signtool'
    image: svwsnrw/dockerrunner-win
    script:
        - ./deployment/setupVersion.ps1
        - c:/tmp/download-secure-files-windows-amd64.exe
        - Add-Content -Path ".\gradle.properties" -Value (Get-Content -Path ".\gradle_secure.properties")
        - dir /builds/svws/SVWS-Server/
        - ./gradlew :deployment:windows-installer:doZip
        - mkdir artifacts_windows
        - copy .\deployment\windows-installer\build\output\win64-installer* .\artifacts_windows\
    artifacts:
        paths:
            - artifacts_windows/
    when: on_success

integration-tests:
    dependencies:
        - build
    stage: integration-tests
    script:
        - chmod +x ./deployment/setupVersion.sh
        - ./deployment/setupVersion.sh
        - ./gradlew --build-cache testing:integrationTest --stacktrace -Penvironment=testing -PMDB_PASSWORD=$MDB_PASSWORD -PMariaDB_ROOT_PASSWORD=$MariaDB_ROOT_PASSWORD -PMariaDB_PASSWORD=$MariaDB_PASSWORD -PSVWS_TLS_KEYSTORE_PASSWORD=$SVWS_TLS_KEYSTORE_PASSWORD -PMariaDB_USER=$MariaDB_USER
    cache:
        <<: *global_cache
        policy: pull
    artifacts:
        when: always
        expire_in: "7 days"
        reports:
            junit: ./testing/**/build/test-results/**/*.xml

e2e-tests:
    dependencies:
        - build
    stage: integration-tests
    when: manual
    script:
        - ./gradlew --build-cache svws-webclient:browser-test:playwrightInstallDeps --stacktrace
        - ./gradlew --build-cache testing:svws-browser-test:runBrowserTest --stacktrace -Penvironment=testing -PMDB_PASSWORD=$MDB_PASSWORD -PMariaDB_ROOT_PASSWORD=$MariaDB_ROOT_PASSWORD -PMariaDB_PASSWORD=$MariaDB_PASSWORD -PSVWS_TLS_KEYSTORE_PASSWORD=$SVWS_TLS_KEYSTORE_PASSWORD -PMariaDB_USER=$MariaDB_USER
    artifacts:
        when: always
        expire_in: "1 days"
        reports:
            junit: "./svws-webclient/browser-test/build/testresults/results.xml"
        paths:
         - "./svws-webclient/browser-test/build/playwright-report/**"

build:
    stage: build
    script:
        - chmod +x ./deployment/setupVersion.sh
        - ./deployment/setupVersion.sh
        - ./gradlew --build-cache build -Penvironment=build

    cache:
        <<: *global_cache
        policy: pull
    when: always
    artifacts:
        when: always
        reports:
            junit: ./**/build/test-results/test/**/TEST-*.xml
        paths:
            - "./build/**"
            - "./**/build/**"
        expire_in: "1 days"


sonarqube_analysis:
    stage: analyze
    only:
        refs:
            - dev
    when: manual
    script:
        - ./gradlew sonarqube -Dsonar.projectKey=svws-server -Dsonar.host.url=$SONAR_URL -Dsonar.login=$SONAR_LOGIN -Dsonar.password=$SONAR_PASSWORD --full-stacktrace