bulk-scan-payment-processor/Jenkinsfile_CNP at master · hmcts/bulk-scan-payment-processor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
#!groovy
import uk.gov.hmcts.contino.DockerImage
@Library("Infrastructure")

import uk.gov.hmcts.contino.GradleBuilder
import uk.gov.hmcts.contino.Kubectl
import uk.gov.hmcts.pipeline.TeamConfig

def type = "java"
def product = "bulk-scan"
def component = "payment-processor"

def channel = '#bsp-build-notices'
GradleBuilder builder = new GradleBuilder(this, product)

env.TESTCONTAINERS_HUB_IMAGE_NAME_PREFIX = 'hmctspublic.azurecr.io/imported/'

def previewSecrets = [
  'bulk-scan-${env}': [
    secret('s2s-secret-payment-processor', 'S2S_SECRET'),
    secret('idam-users-bulkscan-username', 'IDAM_USERS_BULKSCAN_USERNAME'),
    secret('idam-users-bulkscan-password', 'IDAM_USERS_BULKSCAN_PASSWORD'),
    secret('idam-client-secret', 'IDAM_CLIENT_SECRET'),
    secret('launch-darkly-sdk-key', 'LAUNCH_DARKLY_SDK_KEY'),
    secret('launch-darkly-offline-mode', 'LAUNCH_DARKLY_OFFLINE_MODE'),
    secret('all-preview-queue-access-key', 'PAYMENTS_QUEUE_READ_ACCESS_KEY'),
    secret('all-preview-queue-access-key', 'PAYMENTS_QUEUE_WRITE_ACCESS_KEY')
  ]
]

def nonPreviewSecrets = [
  'bulk-scan-${env}': [
    secret('s2s-secret-payment-processor', 'S2S_SECRET'),
    secret('idam-users-bulkscan-username', 'IDAM_USERS_BULKSCAN_USERNAME'),
    secret('idam-users-bulkscan-password', 'IDAM_USERS_BULKSCAN_PASSWORD'),
    secret('idam-client-secret', 'IDAM_CLIENT_SECRET'),
    secret('payments-staging-queue-send-shared-access-key', 'PAYMENTS_QUEUE_WRITE_ACCESS_KEY'),
    secret('launch-darkly-sdk-key', 'LAUNCH_DARKLY_SDK_KEY'),
    secret('launch-darkly-offline-mode', 'LAUNCH_DARKLY_OFFLINE_MODE')
  ]
]

static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
  [ $class: 'AzureKeyVaultSecret',
    secretType: 'Secret',
    name: secretName,
    version: '',
    envVariable: envVar
  ]
}

withPipeline(type, product, component) {
  afterSuccess('akschartsinstall'){
    // Vars needed for AKS testing
    env.S2S_NAME = 'bulk_scan_payment_processor'
    env.JMS_ENABLED = false
    env.SPRING_PROFILES_ACTIVE = 'default'
    env.S2S_URL = 'http://rpe-service-auth-provider-aat.service.core-compute-aat.internal'
    env.CORE_CASE_DATA_API_URL = 'http://ccd-data-store-api-aat.service.core-compute-aat.internal'
    env.IDAM_API_URL = 'https://idam-api.aat.platform.hmcts.net'
    env.IDAM_CLIENT_REDIRECT_URI = 'https://bulk-scan-orchestrator-aat.service.core-compute-aat.internal/oauth2/callback'
  }

  before('smoketest:preview') {
    withAksClient('nonprod', product) {
      def dockerImage = new DockerImage(product, component, null, env.BRANCH_NAME, env.GIT_COMMIT, env.LAST_COMMIT_TIMESTAMP)
      def subscription = env.SUBSCRIPTION_NAME
      def aksServiceName = dockerImage.getAksServiceName().toLowerCase()
      def namespace = new TeamConfig(this).getNameSpace(product)

      def kubectl = new Kubectl(this, subscription, namespace)
      kubectl.login()

      env.PAYMENTS_QUEUE_NAMESPACE = "bsp-sb-preview"
      env.PAYMENTS_QUEUE_NAME = "${aksServiceName}-servicebus-payments"
      env.PAYMENTS_QUEUE_WRITE_ACCESS_KEY_NAME = "RootManageSharedAccessKey"
    }
  }

  // Vars needed for smoke / functional testing
  env.TEST_PAY_HUB_URL = 'http://ccpay-bulkscanning-api-aat.service.core-compute-aat.internal'
  env.PROCESSOR_URL = 'http://bulk-scan-processor-aat.service.core-compute-aat.internal'

  afterSuccess('test') {
    builder.gradle('integration')
  }

  enableAksStagingDeployment()
  disableLegacyDeployment()
  enableSlackNotifications(channel)

  onPR() {
    loadVaultSecrets(previewSecrets)
  }

  onNonPR() {
    loadVaultSecrets(nonPreviewSecrets)
  }

  def branchesToSync = ['demo', 'perftest', 'ithc']
  syncBranchesWithMaster(branchesToSync)
}