Jenkinsfile_CNP

#!groovy

@Library("Infrastructure")

import uk.gov.hmcts.contino.GithubAPI

String product = "cmc"
String component = "citizen-frontend"

def ccdDefBranch = "master"

def yarnBuilder = new uk.gov.hmcts.contino.YarnBuilder(this)

def checkForEnableHelmLabel(branch_name) {
    return new GithubAPI(this).getLabelsbyPattern(branch_name, "enableHelm").contains("enableHelm")
}

def secrets = [
  's2s-${env}':
    [
     secret('microservicekey-ccd-data', 'DATA_STORE_S2S_KEY'),
     secret('microservicekey-ccd-definition', 'DEFINITION_STORE_S2S_KEY'),
     secret('microservicekey-ccd-gw', 'API_GATEWAY_S2S_KEY'),
     secret('microservicekey-ccd-ps', 'PRINT_S2S_KEY'),
     secret('microservicekey-ccd-admin', 'ADMIN_S2S_KEY')
    ],
  'cmc-${env}':
    [
      secret('AppInsightsInstrumentationKey', 'AZURE_APPLICATIONINSIGHTS_INSTRUMENTATIONKEY'),
      secret('appinsights-connection-string', 'APPINSIGHTS_CONNECTION_STRING'),
      secret('citizen-oauth-client-secret', 'OAUTH_CLIENT_SECRET'),
      secret('citizen-oauth-client-secret', 'OAUTH2_CLIENT_SECRET'),
      secret('claim-store-db-password', 'CLAIM_STORE_DB_PASSWORD'),
      secret('cmc-db-password-v15', 'CMC_DB_PASSWORD'),
      secret('cmc-db-username-v15', 'CMC_DB_USERNAME'),
      secret('cmc-db-host-v15', 'CMC_DB_HOST'),
      secret('claim-store-s2s-secret', 'IDAM_S2S_AUTH_TOTP_SECRET'),
      secret('anonymous-caseworker-username', 'IDAM_CASEWORKER_ANONYMOUS_USERNAME'),
      secret('anonymous-caseworker-password', 'IDAM_CASEWORKER_ANONYMOUS_PASSWORD'),
      secret('system-update-username', 'IDAM_CASEWORKER_SYSTEM_USERNAME'),
      secret('system-update-password', 'IDAM_CASEWORKER_SYSTEM_PASSWORD'),
      secret('notify-api-key', 'GOV_NOTIFY_API_KEY'),
      secret('milo-recipient', 'MILO_CSV_RECIPIENT'),
      secret('staff-email', 'STAFF_NOTIFICATIONS_RECIPIENT'),
      secret('live-support-email', 'LIVE_SUPPORT_RECIPIENT'),
      secret('rpa-email-sealed-claim', 'RPA_NOTIFICATIONS_SEALEDCLAIMRECIPIENT'),
      secret('rpa-email-breathing-space', 'RPA_NOTIFICATIONS_BREATHINGSPACERECIPIENT'),
      secret('rpa-email-legal-sealed-claim', 'RPA_NOTIFICATIONS_LEGALSEALEDCLAIMRECIPIENT'),
      secret('rpa-email-more-time-requested', 'RPA_NOTIFICATIONS_MORETIMEREQUESTEDRECIPIENT'),
      secret('rpa-email-response', 'RPA_NOTIFICATIONS_RESPONSERECIPIENT'),
      secret('rpa-email-ccj', 'RPA_NOTIFICATIONS_COUNTYCOURTJUDGEMENTRECIPIENT'),
      secret('rpa-email-paid-in-full', 'RPA_NOTIFICATIONS_PAIDINFULLRECIPIENT'),
      secret('launchDarkly-sdk-key', 'LAUNCH_DARKLY_SDK_KEY'),
      secret('sendgrid-api-key', 'SENDGRID_API_KEY'),
      secret('staff-email-legal-rep', 'STAFF_NOTIFICATIONS_LEGALRECIPIENT'),
      secret('smoke-test-citizen-username', 'SMOKE_TEST_CITIZEN_USERNAME'),
      secret('smoke-test-user-password', 'SMOKE_TEST_USER_PASSWORD'),
      secret('ccd-importer-username', 'CCD_CONFIGURER_IMPORTER_USERNAME'),
      secret('ccd-importer-password', 'CCD_CONFIGURER_IMPORTER_PASSWORD'),
      secret('microservicekey-ccd-admin', 'ADMIN_S2S_KEY')
    ],
  'ccd-${env}': [
    secret('ccd-data-s2s-secret', 'DATA_STORE_S2S_KEY'),
    secret('ccd-definition-s2s-secret', 'DEFINITION_STORE_S2S_KEY'),
    secret('ccd-admin-web-oauth2-client-secret', 'ADMIN_WEB_IDAM_SECRET'),
    secret('idam-data-store-client-secret','IDAM_OAUTH2_DATA_STORE_CLIENT_SECRET'),
    secret('idam-data-store-system-user-username','IDAM_DATA_STORE_SYSTEM_USER_USERNAME'),
    secret('idam-data-store-system-user-password','IDAM_DATA_STORE_SYSTEM_USER_PASSWORD'),
    secret('microservicekey-ccd-gw', 'CCD_API_GATEWAY_S2S_SECRET'),
    secret('ccd-api-gateway-oauth2-client-secret', 'CCD_API_GATEWAY_IDAM_CLIENT_SECRET'),
    secret('ccd-api-gateway-oauth2-client-secret', 'CCD_API_GATEWAY_OAUTH2_CLIENT_SECRET'),
  ]
]

static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
  [ $class: 'AzureKeyVaultSecret',
    secretType: 'Secret',
    name: secretName,
    version: '',
    envVariable: envVar
  ]
}

// Vars needed for AKS testing - keep values in sync with: charts/cmc-citizen-frontend/...
// THESE WILL BE OVERWRITTEN IN ASE DEPLOYMENTS WITH TERRAFORM OUTPUTS.TF
// THESE CAN BE PICKED UP IN INTEGRATION-TEST CODE DIRECTLY
env.IDAM_URL = 'https://idam-api.aat.platform.hmcts.net'
env.CLAIM_STORE_URL = 'http://cmc-claim-store-aat.service.core-compute-aat.internal'
env.FEATURE_ADMISSIONS = 'true'
env.FEATURE_DIRECTIONS_QUESTIONNAIRE = 'true'
env.FEATURE_TESTING_SUPPORT = 'true'
env.FEATURE_INVERSION_OF_CONTROL = 'true'
env.FEATURE_PCQ = 'true'
env.FEATURE_BREATHING_SPACE = 'true'
env.CUI_DASHBOARD_REDIRECT = 'true'
// add any others needed to selective testing...

String notificationsChannel = '#cmc-tech-notification'

def branchesToSync = ['demo', 'perftest', 'ithc']


withPipeline("nodejs", product, component) {

  afterSuccess('build') {
    yarnBuilder.yarn('setup')
  }

  before('smoketest:preview'){
    log.info env.TEST_URL
    env.CLAIM_STORE_URL = "https://claim-store-cmc-citizen-frontend-pr-${CHANGE_ID}.preview.platform.hmcts.net"
    env.CCD_DEFINITION_CLAIM_STORE_URL = "http://cmc-citizen-frontend-pr-${CHANGE_ID}-claim-store"
    sh """
    eval \$(./bin/variables/load-preview-env-variables.sh ${CHANGE_ID})
    ./bin/add-roles.sh
    ./bin/wait-for.sh definition-store
    ./bin/pull-latest-ccd-defintion.sh ${ccdDefBranch}
    """
  }

  before('functionalTest:preview'){
      log.info env.TEST_URL
      env.CLAIM_STORE_URL = "https://claim-store-cmc-citizen-frontend-pr-${CHANGE_ID}.preview.platform.hmcts.net"
      env.CCD_DEFINITION_CLAIM_STORE_URL = "http://cmc-citizen-frontend-pr-${CHANGE_ID}-claim-store"
  }

  afterSuccess('functionalTest:preview') {
    try {
      sh './bin/run-preview-playwright-tests.sh'
    } finally {
      steps.sh 'npx allure generate allure-results -o allure-report || true'
      publishHTML([
        allowMissing         : true,
        alwaysLinkToLastBuild: true,
        keepAll              : true,
        reportDir            : 'allure-report',
        reportFiles          : 'index.html',
        reportName           : 'CMC API Security & Functional Test Report'
      ])
      steps.archiveArtifacts allowEmptyArchive: true, artifacts: 'allure-results/**/*,allure-report/**/*'
      junit allowEmptyResults: true, testResults: 'playwright-report/results.xml'
    }
  }

  afterSuccess('test') {
    onMaster {
      yarnBuilder.yarn('tests:a11y')
    }
  }

  enableAksStagingDeployment()
  disableLegacyDeployment()

  enableSlackNotifications(notificationsChannel)
  syncBranchesWithMaster(branchesToSync)

  onMaster {
    env.ENVIRONMENT="aat"
    loadVaultSecrets(secrets)
  }

  onPR {
    env.ENVIRONMENT = "preview"
    env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
    loadVaultSecrets(secrets)
  }
}