#!groovy

import groovy.transform.Field

@Field
def pulumiPod = '''
apiVersion: v1
kind: Pod
spec:
  containers:
  - name: main
    image: gcr.io/pingcap-public/third-party/pulumi:v2.15.3-go-v1.17.6
    command:
    - cat
    tty: true
    resources:
      requests:
        memory: "2000Mi"
        cpu: 2000m
      limits:
        memory: "4000Mi"
        cpu: 4000m
    env:
    - name: DOCKER_HOST
      value: tcp://localhost:2375
    - name: AWS_WEB_IDENTITY_TOKEN_FILE
      value: /identity/token
    volumeMounts:
    - mountPath: /identity
      name: identity
  - name: dind
    image: docker:18.09-dind
    securityContext:
      privileged: true
  - name: auth
    image: gcr.io/pingcap-gardener/jenkins/gcp-web-identity:20201201
    env:
    - name: AWS_WEB_IDENTITY_TOKEN_FILE
      value: /identity/token
    volumeMounts:
    - mountPath: /identity
      name: identity
  volumes:
  - emptyDir: {}
    name: identity
  restartPolicy: Never
'''

pipeline {
    agent {
        kubernetes {
            yaml pulumiPod
            defaultContainer "main"
            customWorkspace "/home/jenkins/agent/workspace/go/src/github.com/pingcap/dbaas"
        }
    }

    options {
        disableConcurrentBuilds()
    }

    environment {
        GOPATH = "/home/jenkins/agent/workspace/go"
        GOPRIVATE="github.com/tidbcloud"
        REGION = "us-west-2"
        AWS_DEFAULT_REGION  = "us-west-2"
        ENV = "dev"
        PROJECT = "nightly"
        GITHUB_BOT = credentials("github-sre-bot")
        AWS_ROLE_ARN = credentials("dbaas-${env.ENV}-aws-role")
        PULUMI_CONFIG_PASSPHRASE = credentials("dbaas-${env.ENV}-pulumi-pwd")
        KUBECONFIG = credentials("dbaas-${env.ENV}-kubeconfig")
        IMAGE_TAG = "${env.GIT_COMMIT}"
    }

    stages {
        stage('Deploy') {

            steps {
                sh '''
                echo "machine github.com login ${GITHUB_BOT_USR} password ${GITHUB_BOT_PSW}" > ~/.netrc
                ./hack/deploy.sh
                '''
            }
            post {
                unsuccessful {
                    script {
                        sendNotification("#dbaas-ci", 'FAILURE')
                    }
                }
                success {
                    script {
                        sendNotification("#dbaas-ci", 'SUCCESS')
                    }
                }
            }
        }
    }
}

def sendNotification(CHANNEL="#dbaas-ci", STATUS="SUCCESS") {
    def GIT_AUTHOR_NAME = sh(returnStdout: true, script: "git log -1 --pretty=format:'%an'").trim()
    def GIT_COMMIT_MSG = sh(returnStdout: true, script: "git log --oneline -n 1 --pretty=%B HEAD | head -n 1").trim()
    def slackmsg = "[<${env.RUN_DISPLAY_URL}|Deploy DBaaS to ${env.ENV}>] `${STATUS}`" + "\n" +
            "Commit: <https://github.com/tidbcloud/dbaas/commit/${env.GIT_COMMIT}|${GIT_COMMIT_MSG}>" + "\n" +
            "Branch: `${env.GIT_BRANCH}`, Authored by: `${GIT_AUTHOR_NAME}`"
    def COLOR = 'good'
    if (STATUS != "SUCCESS") {
        COLOR = 'danger'
    }
    slackSend channel: CHANNEL, color: COLOR, teamDomain: 'pingcap', tokenCredentialId: 'slack-pingcap-token', message: "${slackmsg}"
}