#!/usr/bin/env groovy

/*  Copyright (c) 2019 AT&T Intellectual Property.                             #
#                                                                              #
#   Licensed under the Apache License, Version 2.0 (the "License");            #
#   you may not use this file except in compliance with the License.           #
#   You may obtain a copy of the License at                                    #
#                                                                              #
#       http://www.apache.org/licenses/LICENSE-2.0                             #
#                                                                              #
#   Unless required by applicable law or agreed to in writing, software        #
#   distributed under the License is distributed on an "AS IS" BASIS,          #
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   #
#   See the License for the specific language governing permissions and        #
#   limitations under the License.                                             #
##############################################################################*/

properties([[$class: 'ParametersDefinitionProperty', parameterDefinitions: [
        [$class: 'hudson.model.StringParameterDefinition', name: 'PHASE', defaultValue: "BUILD"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'ENV', defaultValue: "dev"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'MECHID', defaultValue: "id"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'KUBE_CONFIG', defaultValue: "kubeConfig-dev"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'TILLER_NAMESPACE', defaultValue: "org-onar-otf"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'PKCS12_CERT', defaultValue: "otf_ssl_pkcs12_dev"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'PKCS12_KEY', defaultValue: "server_ssl_key_store_password"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'PEM_CERT', defaultValue: "otf_ssl_pem_dev"],
        [$class: 'hudson.model.StringParameterDefinition', name: 'PEM_KEY', defaultValue: "otf_ssl_pem_key_dev"]


]]])


echo "Build branch: ${env.BRANCH_NAME}"

node("docker"){
  stage 'Checkout'
  checkout scm
  PHASES=PHASE.tokenize( '_' );
  echo "PHASES : " + PHASES
  ARTIFACT_ID="otf-cert-secret-builder"
  echo "Tiller Namespace: " + TILLER_NAMESPACE

  withEnv(["PATH=${env.PATH}:${tool 'jdk180'}:${env.WORKSPACE}/linux-amd64", "JAVA_HOME=${tool 'jdk180'}","HELM_HOME=${env.WORKSPACE}"]) {

    echo "PATH=${env.PATH}"
    echo "JAVA_HOME=${env.JAVA_HOME}"
    echo "HELM_HOME=${env.HELM_HOME}"

    wrap([$class: 'ConfigFileBuildWrapper', managedFiles: [
      [fileId: 'maven-settings.xml', variable: 'MAVEN_SETTINGS']
      ]]) {

      if (PHASES.contains("DEPLOY") || PHASES.contains("UNDEPLOY")) {
        stage 'Init Helm'

        //check if helm exists if not install
        if(fileExists('linux-amd64/helm')){
          sh """
            echo "helm is already installed"
          """
        }
        else{
        //download helm
          sh """
            echo "installing helm"
            wget  https://storage.googleapis.com/kubernetes-helm/helm-v2.8.2-linux-amd64.tar.gz
            tar -xf helm-v2.8.2-linux-amd64.tar.gz
            rm helm-v2.8.2-linux-amd64.tar.gz
          """
        }

        withCredentials([file(credentialsId: KUBE_CONFIG, variable: 'KUBECONFIG')]) {

          dir('helm'){
              //check if charts are valid, and then perform dry run, if successful then upgrade/install charts

                if (PHASES.contains("UNDEPLOY") ) {
              stage 'Undeploy'

                  sh """
                    helm delete --tiller-namespace=$TILLER_NAMESPACE --purge $ARTIFACT_ID
                  """
                }

              //NOTE Double quotes are used below to access groovy variables like artifact_id and tiller_namespace
                    if (PHASES.contains("DEPLOY") ){
                            stage 'Deploy'
                      withCredentials(
                        [usernamePassword(credentialsId: MECHID, usernameVariable: 'USERNAME', passwordVariable: 'PASSWORD'),
                        file(credentialsId: PKCS12_CERT, variable: 'VAR_PKCS12_CERT'),
                        string(credentialsId: PKCS12_KEY, variable: 'VAR_PKCS12_KEY'),
                        file(credentialsId: PEM_CERT, variable: 'VAR_PEM_CERT'),
                        file(credentialsId: PEM_KEY, variable: 'VAR_PEM_KEY'),
                        file(credentialsId: 'PRIVATE_KEY', variable: 'VAR_PRIVATE_KEY'),
                        usernamePassword(credentialsId: 'PRIVATE_KEY_USER_PASS', usernameVariable: 'PRIVATE_KEY_USERNAME', passwordVariable: 'PRIVATE_KEY_PASSPHRASE')
                        ]) {

                        sh """

                          cp $VAR_PKCS12_CERT $ARTIFACT_ID
                          cp $VAR_PEM_CERT $ARTIFACT_ID
                          cp $VAR_PEM_KEY $ARTIFACT_ID
                          cp $VAR_PRIVATE_KEY $ARTIFACT_ID
                          FILE_PKCS12_CERT=`basename $VAR_PKCS12_CERT`
                          FILE_PEM_CERT=`basename $VAR_PEM_CERT`
                          FILE_PEM_KEY=`basename $VAR_PEM_KEY`
                          FILE_PRIVATE_KEY=`basename $VAR_PRIVATE_KEY`

                          echo "Validate Yaml"
                          helm lint $ARTIFACT_ID

                          echo "View Helm Templates"
                          helm template $ARTIFACT_ID \
                            --set Secret.PKCS12_CERT=\$FILE_PKCS12_CERT \
                            --set Secret.PKCS12_KEY=$VAR_PKCS12_KEY \
                            --set Secret.PEM_CERT=\$FILE_PEM_CERT \
                            --set Secret.PEM_KEY=\$FILE_PEM_KEY \
                            --set Secret.privateKey.key=\$FILE_PRIVATE_KEY \
                            --set Secret.privateKey.username=$PRIVATE_KEY_USERNAME \
                            --set Secret.privateKey.passphrase=$PRIVATE_KEY_PASSPHRASE \

                          echo "Perform Dry Run Of Install"
                          helm upgrade --tiller-namespace=$TILLER_NAMESPACE --install --dry-run $ARTIFACT_ID $ARTIFACT_ID \
                            --set Secret.PKCS12_CERT=\$FILE_PKCS12_CERT \
                            --set Secret.PKCS12_KEY=$VAR_PKCS12_KEY \
                            --set Secret.PEM_CERT=\$FILE_PEM_CERT \
                            --set Secret.PEM_KEY=\$FILE_PEM_KEY \
                            --set Secret.privateKey.key=\$FILE_PRIVATE_KEY \
                            --set Secret.privateKey.username=$PRIVATE_KEY_USERNAME \
                            --set Secret.privateKey.passphrase=$PRIVATE_KEY_PASSPHRASE \

                          echo "Helm Install/Upgrade"
                          helm upgrade --tiller-namespace=$TILLER_NAMESPACE --install $ARTIFACT_ID $ARTIFACT_ID \
                            --set Secret.PKCS12_CERT=\$FILE_PKCS12_CERT \
                            --set Secret.PKCS12_KEY=$VAR_PKCS12_KEY \
                            --set Secret.PEM_CERT=\$FILE_PEM_CERT \
                            --set Secret.PEM_KEY=\$FILE_PEM_KEY \
                            --set Secret.privateKey.key=\$FILE_PRIVATE_KEY \
                            --set Secret.privateKey.username=$PRIVATE_KEY_USERNAME \
                            --set Secret.privateKey.passphrase=$PRIVATE_KEY_PASSPHRASE \

                        """
                      }
              }

           }
        }
      }
    }
  }
}