#!/usr/bin/env groovy /* Copyright (c) 2019 AT&T Intellectual Property. # # # # Licensed under the Apache License, Version 2.0 (the "License"); # # you may not use this file except in compliance with the License. # # You may obtain a copy of the License at # # # # http://www.apache.org/licenses/LICENSE-2.0 # # # # Unless required by applicable law or agreed to in writing, software # # distributed under the License is distributed on an "AS IS" BASIS, # # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # # See the License for the specific language governing permissions and # # limitations under the License. # ##############################################################################*/ properties([[$class: 'ParametersDefinitionProperty', parameterDefinitions: [ [$class: 'hudson.model.StringParameterDefinition', name: 'PHASE', defaultValue: "BUILD"], [$class: 'hudson.model.StringParameterDefinition', name: 'ENV', defaultValue: "dev"], [$class: 'hudson.model.StringParameterDefinition', name: 'MECHID', defaultValue: "id"], [$class: 'hudson.model.StringParameterDefinition', name: 'KUBE_CONFIG', defaultValue: "kubeConfig-dev"], [$class: 'hudson.model.StringParameterDefinition', name: 'TILLER_NAMESPACE', defaultValue: "org-onap-otf"] ]]]) echo "Build branch: ${env.BRANCH_NAME}" node("docker"){ stage 'Checkout' checkout scm PHASES=PHASE.tokenize( '_' ); echo "PHASES : " + PHASES ARTIFACT_ID="otf-aaf-credential-generator" echo "Tiller Namespace: " + TILLER_NAMESPACE withEnv(["PATH=${env.PATH}:${tool 'jdk180'}:${env.WORKSPACE}/linux-amd64", "JAVA_HOME=${tool 'jdk180'}","HELM_HOME=${env.WORKSPACE}"]) { echo "PATH=${env.PATH}" echo "JAVA_HOME=${env.JAVA_HOME}" echo "HELM_HOME=${env.HELM_HOME}" wrap([$class: 'ConfigFileBuildWrapper', managedFiles: [ [fileId: 'maven-settings.xml', variable: 'MAVEN_SETTINGS'] ]]) { if (PHASES.contains("DEPLOY") || PHASES.contains("UNDEPLOY")) { stage 'Init Helm' //check if helm exists if not install if(fileExists('linux-amd64/helm')){ sh """ echo "helm is already installed" """ } else{ //download helm sh """ echo "installing helm" wget https://storage.googleapis.com/kubernetes-helm/helm-v2.8.2-linux-amd64.tar.gz tar -xf helm-v2.8.2-linux-amd64.tar.gz rm helm-v2.8.2-linux-amd64.tar.gz """ } withCredentials([file(credentialsId: KUBE_CONFIG, variable: 'KUBECONFIG')]) { dir('helm'){ //check if charts are valid, and then perform dry run, if successful then upgrade/install charts if (PHASES.contains("UNDEPLOY") ) { stage 'Undeploy' sh """ helm delete --tiller-namespace=$TILLER_NAMESPACE --purge $ARTIFACT_ID """ } //NOTE Double quotes are used below to access groovy variables like artifact_id and tiller_namespace if (PHASES.contains("DEPLOY") ){ stage 'Deploy' withCredentials([usernamePassword(credentialsId: MECHID, usernameVariable: 'USERNAME', passwordVariable: 'PASSWORD')]) { //Note: KEYFILE_PATH must be within helm/$ARTIFACT_ID and must be relative path starting from that directory sh """ echo "Remove old key info" rm -rf keyfile; rm -rf digest.txt rm -rf $ARTIFACT_ID/keyfile ls echo "Create keyfile and digest" java -jar ../aaf_cadi_core_2.1.10_SNAPSHOT.jar keygen keyfile java -jar ../aaf_cadi_core_2.1.10_SNAPSHOT.jar digest $PASSWORD keyfile > digest.txt 2>&1 cp keyfile $ARTIFACT_ID KEYFILE_PATH=keyfile DIGEST="enc:" DIGEST+=\$(cat digest.txt) echo \$DIGEST echo "Validate Yaml" helm lint $ARTIFACT_ID echo "View Helm Templates" helm template $ARTIFACT_ID --set Secret.aafId=$USERNAME --set Secret.aafPassword=\$DIGEST --set Secret.aafMechPassword=$PASSWORD --set keyfilePath=\$KEYFILE_PATH echo "Perform Dry Run Of Install" helm upgrade --tiller-namespace=$TILLER_NAMESPACE --install --dry-run $ARTIFACT_ID $ARTIFACT_ID --set Secret.aafId=$USERNAME --set Secret.aafPassword=\$DIGEST --set Secret.aafMechPassword=$PASSWORD --set keyfilePath=\$KEYFILE_PATH echo "Helm Install/Upgrade" helm upgrade --tiller-namespace=$TILLER_NAMESPACE --install $ARTIFACT_ID $ARTIFACT_ID --set Secret.aafId=$USERNAME --set Secret.aafPassword=\$DIGEST --set Secret.aafMechPassword=$PASSWORD --set keyfilePath=\$KEYFILE_PATH rm -rf $ARTIFACT_ID/keyfile rm -rf keyfile rm -rf digest.txt """ } } } } } } } }