makefile

# Define variables
TEAM_NAME := mfoster
VERSION := 0.1.0
GENAI_STACK_COMPONENTS := genai-stack-bot genai-stack-loader genai-stack-pdf-bot genai-stack-api genai-stack-front-end genai-stack-pull-model
# Emojivoto is built separately (one source tree, four images) — see build-emojivoto / EMOJIVOTO_IMAGES
EMOJIVOTO_IMAGES := emojivoto-svc-base emojivoto-web emojivoto-emoji-svc emojivoto-voting-svc
APPLICATIONS:= apache-struts dvwa dvwa-hummingbird hi-python-demo log4shell nodejs-goof-vuln-main patient-portal-database patient-portal-frontend patient-portal-payment-processor web-ctf-container webgoat $(GENAI_STACK_COMPONENTS)
MANIFEST_DIR ?= deployment-manifests
GENAI_STACK_DIR := image-builds/genai-stack

# docker/genai-stack does not publish genai-stack-front-end or genai-stack-pull-model on a public registry (compose always builds them from Git).
# To skip local builds, set both to full image refs you can pull (e.g. CI-built linux/amd64 images on Quay or ghcr.io), then: make pull-retag-genai-stack-images
GENAI_STACK_FRONT_END_SOURCE ?=
GENAI_STACK_PULL_MODEL_SOURCE ?=

update:
	@echo "Updating image tags in Kubernetes manifests in $(MANIFEST_DIR)"
	@find $(MANIFEST_DIR) -type f \( -name "*.yaml" -o -name "*.yml" \) | while read -r file; do \
		echo "Processing $$file"; \
		sed -E 's|\(quay\.io/mfoster/vulnerable-demo-applications:[^:]*:\)[0-9]+$$|\1$(VERSION)|' $$file; \
		echo "Updated image tags in $$file"; \
	done
	@echo "All relevant manifest files in $(MANIFEST_DIR) have been updated to use version: $(VERSION)"

build-images:
	@echo "========================================================="
	@echo "Starting build process for all applications..."
	@echo "========================================================="
	@SUCCESSFUL_BUILDS=""; \
	FAILED_BUILDS=""; \
	SKIPPED_BUILDS=""; \
	TOTAL=0; \
	SUCCESS=0; \
	FAILED=0; \
	SKIPPED=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
	done; \
	TOTAL_COUNT=$$TOTAL; \
	TOTAL=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
		echo ""; \
		IMAGE_NAME="quay.io/$(TEAM_NAME)/$${component}:$(VERSION)"; \
		BUILD_CONTEXT="image-builds/$${component}"; \
		DOCKERFILE="$$BUILD_CONTEXT/Dockerfile"; \
		case "$$component" in \
			genai-stack-bot) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/bot.Dockerfile" ;; \
			genai-stack-loader) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/loader.Dockerfile" ;; \
			genai-stack-pdf-bot) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/pdf_bot.Dockerfile" ;; \
			genai-stack-api) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/api.Dockerfile" ;; \
			genai-stack-front-end) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/front-end.Dockerfile" ;; \
			genai-stack-pull-model) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/pull_model.Dockerfile" ;; \
		esac; \
		SHOULD_BUILD=false; \
		if ! podman image exists $$IMAGE_NAME >/dev/null 2>&1; then \
			SHOULD_BUILD=true; \
			echo "Building $$component ($$TOTAL/$$TOTAL_COUNT)... (image does not exist)"; \
		elif [ -f "$$DOCKERFILE" ]; then \
			IMAGE_CREATED=$$(podman image inspect $$IMAGE_NAME --format '{{.Created}}' 2>/dev/null || echo ""); \
			if [ -n "$$IMAGE_CREATED" ]; then \
				IMAGE_TIME=$$(python3 -c "from datetime import datetime; print(int(datetime.fromisoformat('$$IMAGE_CREATED'.replace('Z', '+00:00')).timestamp()))" 2>/dev/null || echo "0"); \
				DOCKERFILE_TIME=$$(stat -c %Y "$$DOCKERFILE" 2>/dev/null || stat -f %m "$$DOCKERFILE" 2>/dev/null || echo "0"); \
				if [ "$$DOCKERFILE_TIME" -gt "$$IMAGE_TIME" ] 2>/dev/null && [ "$$IMAGE_TIME" != "0" ]; then \
					SHOULD_BUILD=true; \
					echo "Building $$component ($$TOTAL/$$TOTAL_COUNT)... (Dockerfile is newer than image)"; \
				fi; \
			fi; \
		fi; \
		if [ "$$SHOULD_BUILD" = "false" ]; then \
			SKIPPED=$$((SKIPPED + 1)); \
			SKIPPED_BUILDS="$$SKIPPED_BUILDS $$component"; \
			echo "⊘ Skipping $$component ($$TOTAL/$$TOTAL_COUNT) - image is up to date"; \
			echo "  Image: $$IMAGE_NAME"; \
		else \
			PLATFORM="linux/amd64"; \
			if [ ! -f "$$DOCKERFILE" ]; then \
				FAILED=$$((FAILED + 1)); \
				FAILED_BUILDS="$$FAILED_BUILDS $$component"; \
				echo "✗ Failed to build $$component (Dockerfile not found: $$DOCKERFILE)"; \
			elif ( cd "$$BUILD_CONTEXT"; \
				podman build --platform $$PLATFORM \
				-f "$$(basename "$$DOCKERFILE")" \
				-t $$IMAGE_NAME . ); then \
				SUCCESS=$$((SUCCESS + 1)); \
				SUCCESSFUL_BUILDS="$$SUCCESSFUL_BUILDS $$component"; \
				echo "✓ Successfully built $$component"; \
			else \
				FAILED=$$((FAILED + 1)); \
				FAILED_BUILDS="$$FAILED_BUILDS $$component"; \
				echo "✗ Failed to build $$component"; \
			fi; \
		fi; \
	done; \
	echo ""; \
	echo "========================================================="; \
	echo "Build Summary"; \
	echo "========================================================="; \
	echo "Total components processed: $$TOTAL"; \
	echo "Successful builds: $$SUCCESS"; \
	echo "Skipped (already exist): $$SKIPPED"; \
	echo "Failed builds: $$FAILED"; \
	echo ""; \
	if [ -n "$$SUCCESSFUL_BUILDS" ]; then \
		echo "✓ Successfully built:"; \
		for component in $$SUCCESSFUL_BUILDS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	if [ -n "$$SKIPPED_BUILDS" ]; then \
		echo "⊘ Skipped (already exist):"; \
		for component in $$SKIPPED_BUILDS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	if [ -n "$$FAILED_BUILDS" ]; then \
		echo "✗ Failed builds:"; \
		for component in $$FAILED_BUILDS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	echo "========================================================="; \
	echo "Building Emojivoto ($(words $(EMOJIVOTO_IMAGES)) images)..."; \
	echo "========================================================="; \
	if ( cd image-builds/emojivoto && \
		TEAM_NAME=$(TEAM_NAME) VERSION=$(VERSION) REGISTRY_PREFIX=quay.io/$(TEAM_NAME) IMAGE_TAG=$(VERSION) \
		./build-images.sh ); then \
		echo "✓ Emojivoto build succeeded"; \
	else \
		FAILED=$$((FAILED + 1)); \
		echo "✗ Emojivoto build failed"; \
	fi; \
	echo ""; \
	echo "========================================================="; \
	if [ $$FAILED -gt 0 ]; then \
		echo "Build completed with errors. Some builds failed."; \
		exit 1; \
	else \
		echo "All builds completed successfully!"; \
	fi

build:
	@if [ -z "$(COMPONENT)" ]; then \
		echo "Error: Please specify a COMPONENT to build (e.g., make build COMPONENT=example)."; \
		exit 1; \
	fi
	@IMAGE_NAME="quay.io/$(TEAM_NAME)/$(COMPONENT):$(VERSION)"; \
	BUILD_CONTEXT="image-builds/$(COMPONENT)"; \
	DOCKERFILE="$$BUILD_CONTEXT/Dockerfile"; \
	case "$(COMPONENT)" in \
		genai-stack-bot) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/bot.Dockerfile" ;; \
		genai-stack-loader) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/loader.Dockerfile" ;; \
		genai-stack-pdf-bot) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/pdf_bot.Dockerfile" ;; \
		genai-stack-api) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/api.Dockerfile" ;; \
		genai-stack-front-end) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/front-end.Dockerfile" ;; \
		genai-stack-pull-model) BUILD_CONTEXT="image-builds/genai-stack"; DOCKERFILE="$$BUILD_CONTEXT/pull_model.Dockerfile" ;; \
	esac; \
	if [ ! -f "$$DOCKERFILE" ]; then \
		echo "Error: Dockerfile not found for component $(COMPONENT)"; \
		echo "  Expected: $$DOCKERFILE"; \
		exit 1; \
	fi; \
	SHOULD_BUILD=false; \
	if ! podman image exists $$IMAGE_NAME >/dev/null 2>&1; then \
		SHOULD_BUILD=true; \
		echo "========================================================="; \
		echo "Building component: $(COMPONENT)"; \
		echo "========================================================="; \
		echo "Reason: Image does not exist"; \
	elif [ -f "$$DOCKERFILE" ]; then \
		IMAGE_CREATED=$$(podman image inspect $$IMAGE_NAME --format '{{.Created}}' 2>/dev/null || echo ""); \
		if [ -n "$$IMAGE_CREATED" ]; then \
			IMAGE_TIME=$$(python3 -c "from datetime import datetime; print(int(datetime.fromisoformat('$$IMAGE_CREATED'.replace('Z', '+00:00')).timestamp()))" 2>/dev/null || echo "0"); \
			DOCKERFILE_TIME=$$(stat -c %Y "$$DOCKERFILE" 2>/dev/null || stat -f %m "$$DOCKERFILE" 2>/dev/null || echo "0"); \
			if [ "$$DOCKERFILE_TIME" -gt "$$IMAGE_TIME" ] 2>/dev/null && [ "$$IMAGE_TIME" != "0" ]; then \
				SHOULD_BUILD=true; \
				echo "========================================================="; \
				echo "Building component: $(COMPONENT)"; \
				echo "========================================================="; \
				echo "Reason: Dockerfile is newer than image"; \
			fi; \
		fi; \
	fi; \
	if [ "$$SHOULD_BUILD" = "false" ]; then \
		echo "========================================================="; \
		echo "Image already exists locally: $(COMPONENT)"; \
		echo "========================================================="; \
		echo "⊘ Skipping build - image is up to date"; \
		echo "Image: $$IMAGE_NAME"; \
		echo "========================================================="; \
	else \
		PLATFORM="linux/amd64"; \
		if ( cd "$$BUILD_CONTEXT"; \
			podman build --platform $$PLATFORM \
			-f "$$(basename "$$DOCKERFILE")" \
			-t $$IMAGE_NAME . ); then \
			echo ""; \
			echo "========================================================="; \
			echo "✓ Successfully built $(COMPONENT)"; \
			echo "Image: $$IMAGE_NAME"; \
			echo "========================================================="; \
		else \
			echo ""; \
			echo "========================================================="; \
			echo "✗ Failed to build $(COMPONENT)"; \
			echo "========================================================="; \
			exit 1; \
		fi; \
	fi


check:
	@echo "========================================================="
	@echo "Starting container health checks for all applications..."
	@echo "========================================================="
	@SUCCESSFUL_CHECKS=""; \
	FAILED_CHECKS=""; \
	SKIPPED_CHECKS=""; \
	CONTAINER_NAMES=""; \
	TOTAL=0; \
	SUCCESS=0; \
	FAILED=0; \
	SKIPPED=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
	done; \
	TOTAL_COUNT=$$TOTAL; \
	TOTAL=0; \
	echo ""; \
	echo "Phase 1: Starting all containers in parallel..."; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
		IMAGE_NAME="quay.io/$(TEAM_NAME)/$${component}:$(VERSION)"; \
		CONTAINER_NAME="check-$${component}-$$$$"; \
		if ! podman image exists $$IMAGE_NAME >/dev/null 2>&1; then \
			SKIPPED=$$((SKIPPED + 1)); \
			SKIPPED_CHECKS="$$SKIPPED_CHECKS $$component"; \
			echo "⊘ Skipping $$component ($$TOTAL/$$TOTAL_COUNT) - image does not exist"; \
			echo "  Image: $$IMAGE_NAME"; \
			echo "  Run 'make build COMPONENT=$$component' to build it first"; \
		else \
			echo "Starting $$component ($$TOTAL/$$TOTAL_COUNT)..."; \
			echo "  Image: $$IMAGE_NAME"; \
			if podman run -d --name $$CONTAINER_NAME $$IMAGE_NAME >/dev/null 2>&1; then \
				CONTAINER_NAMES="$$CONTAINER_NAMES $$CONTAINER_NAME"; \
				echo "  ✓ Container started: $$CONTAINER_NAME"; \
			else \
				FAILED=$$((FAILED + 1)); \
				FAILED_CHECKS="$$FAILED_CHECKS $$component"; \
				echo "  ✗ Failed to start container"; \
				sleep 1; \
				if podman ps -a --filter "name=$$CONTAINER_NAME" --format "{{.Names}}" | grep -q "$$CONTAINER_NAME"; then \
					echo "  Last 10 lines of logs:"; \
					podman logs $$CONTAINER_NAME 2>&1 | tail -10 | sed 's/^/    /' || true; \
					podman rm -f $$CONTAINER_NAME >/dev/null 2>&1 || true; \
				fi; \
			fi; \
		fi; \
	done; \
	echo ""; \
	echo "Waiting 60 seconds for containers to initialize..."; \
	sleep 60; \
	echo ""; \
	echo "Phase 2: Checking container status and logs..."; \
	TOTAL=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
		IMAGE_NAME="quay.io/$(TEAM_NAME)/$${component}:$(VERSION)"; \
		if echo "$$SKIPPED_CHECKS" | grep -q "$$component"; then \
			continue; \
		fi; \
		if echo "$$FAILED_CHECKS" | grep -q "$$component"; then \
			continue; \
		fi; \
		echo ""; \
		echo "Checking $$component ($$TOTAL/$$TOTAL_COUNT)..."; \
		echo "  Image: $$IMAGE_NAME"; \
		CONTAINER_NAME=$$(podman ps -a --filter "name=check-$${component}-" --format "{{.Names}}" | head -1); \
		if [ -z "$$CONTAINER_NAME" ]; then \
			FAILED=$$((FAILED + 1)); \
			FAILED_CHECKS="$$FAILED_CHECKS $$component"; \
			echo "  ✗ Container not found"; \
			continue; \
		fi; \
		CONTAINER_STATUS=$$(podman ps -a --filter "name=$$CONTAINER_NAME" --format "{{.Status}}" 2>/dev/null || echo ""); \
		EXIT_CODE=$$(podman inspect $$CONTAINER_NAME --format '{{.State.ExitCode}}' 2>/dev/null || echo "-1"); \
		if [ -n "$$CONTAINER_STATUS" ]; then \
			if echo "$$CONTAINER_STATUS" | grep -qE "^Up"; then \
				CONTAINER_LOGS=$$(podman logs $$CONTAINER_NAME 2>&1 | tail -30 || echo ""); \
				if echo "$$CONTAINER_LOGS" | grep -qiE "(error|exception|failed|fatal|cannot|unable to)" >/dev/null 2>&1; then \
					if echo "$$CONTAINER_LOGS" | grep -qiE "(MongoError|ECONNREFUSED|connection.*refused|database.*connection|mongodb.*connection|MongoNetworkError|WARNING.*illegal|WARNING.*reflective|WARNING.*module|WARNING.*opens|Too many errors)" >/dev/null 2>&1; then \
						HAS_CRITICAL_ERRORS="no"; \
					else \
						HAS_CRITICAL_ERRORS="yes"; \
					fi; \
				else \
					HAS_CRITICAL_ERRORS="no"; \
				fi; \
				if [ "$$HAS_CRITICAL_ERRORS" = "yes" ]; then \
					FAILED=$$((FAILED + 1)); \
					FAILED_CHECKS="$$FAILED_CHECKS $$component"; \
					echo "  ✗ Container has errors in logs"; \
					echo "  Last 10 lines of logs:"; \
					echo "$$CONTAINER_LOGS" | tail -10 | sed 's/^/    /'; \
				else \
					SUCCESS=$$((SUCCESS + 1)); \
					SUCCESSFUL_CHECKS="$$SUCCESSFUL_CHECKS $$component"; \
					if echo "$$CONTAINER_LOGS" | grep -qiE "(MongoError|ECONNREFUSED|connection.*refused|database.*connection|mongodb.*connection|MongoNetworkError)"; then \
						echo "  ✓ Container is running (database connection errors are expected without external services)"; \
					else \
						echo "  ✓ Container is running without errors"; \
					fi; \
				fi; \
			elif echo "$$CONTAINER_STATUS" | grep -qE "Exited \(0\)"; then \
				CONTAINER_LOGS=$$(podman logs $$CONTAINER_NAME 2>&1 | tail -30); \
				if echo "$$CONTAINER_LOGS" | grep -qiE "(error|exception|failed|fatal|cannot|unable to)"; then \
					FAILED=$$((FAILED + 1)); \
					FAILED_CHECKS="$$FAILED_CHECKS $$component"; \
					echo "  ✗ Container exited but has errors in logs"; \
					echo "  Last 10 lines of logs:"; \
					echo "$$CONTAINER_LOGS" | tail -10 | sed 's/^/    /'; \
				else \
					SUCCESS=$$((SUCCESS + 1)); \
					SUCCESSFUL_CHECKS="$$SUCCESSFUL_CHECKS $$component"; \
					echo "  ✓ Container exited successfully (expected for script-based containers)"; \
				fi; \
			elif [ "$$EXIT_CODE" = "0" ]; then \
				SUCCESS=$$((SUCCESS + 1)); \
				SUCCESSFUL_CHECKS="$$SUCCESSFUL_CHECKS $$component"; \
				echo "  ✓ Container exited with code 0 (success)"; \
			else \
				FAILED=$$((FAILED + 1)); \
				FAILED_CHECKS="$$FAILED_CHECKS $$component"; \
				echo "  ✗ Container exited with error"; \
				echo "  Status: $$CONTAINER_STATUS"; \
				echo "  Exit Code: $$EXIT_CODE"; \
				echo "  Last 10 lines of logs:"; \
				podman logs $$CONTAINER_NAME 2>&1 | tail -10 | sed 's/^/    /' || true; \
			fi; \
		else \
			FAILED=$$((FAILED + 1)); \
			FAILED_CHECKS="$$FAILED_CHECKS $$component"; \
			echo "  ✗ Container not found"; \
		fi; \
		podman stop $$CONTAINER_NAME >/dev/null 2>&1 || true; \
		podman rm -f $$CONTAINER_NAME >/dev/null 2>&1 || true; \
	done; \
	echo ""; \
	echo "========================================================="; \
	echo "Check Summary"; \
	echo "========================================================="; \
	echo "Total components checked: $$TOTAL_COUNT"; \
	echo "Successful checks: $$SUCCESS"; \
	echo "Skipped (image missing): $$SKIPPED"; \
	echo "Failed checks: $$FAILED"; \
	echo ""; \
	if [ -n "$$SUCCESSFUL_CHECKS" ]; then \
		echo "✓ Successfully checked:"; \
		for component in $$SUCCESSFUL_CHECKS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	if [ -n "$$SKIPPED_CHECKS" ]; then \
		echo "⊘ Skipped (image missing):"; \
		for component in $$SKIPPED_CHECKS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	if [ -n "$$FAILED_CHECKS" ]; then \
		echo "✗ Failed checks:"; \
		for component in $$FAILED_CHECKS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	echo "========================================================="; \
	if [ $$FAILED -gt 0 ]; then \
		echo "Check completed with errors. Some containers failed to start."; \
		exit 1; \
	else \
		echo "All checks completed successfully!"; \
	fi

rm-all-containers:
	podman rm $$(podman ps -a -q)

rm-all-images:
	podman rmi -f $$(podman images -aq)

tag-and-push:
	@if [ -z "$(COMPONENT)" ]; then \
		echo "Error: Please specify a COMPONENT to tag and push (e.g., make tag-and-push COMPONENT=example)."; \
		exit 1; \
	fi
	@if [ -z "$(NEW_VERSION)" ]; then \
		echo "========================================================="; \
		echo "Tag and Push Image"; \
		echo "========================================================="; \
		echo ""; \
		echo "Component: $(COMPONENT)"; \
		echo "Current version: $(VERSION)"; \
		echo ""; \
		read -p "Enter new version to tag and push: " NEW_VERSION; \
		if [ -z "$$NEW_VERSION" ]; then \
			echo "Error: Version cannot be empty"; \
			exit 1; \
		fi; \
	else \
		NEW_VERSION="$(NEW_VERSION)"; \
	fi; \
	SOURCE_IMAGE="quay.io/$(TEAM_NAME)/$(COMPONENT):$(VERSION)"; \
	TARGET_IMAGE="quay.io/$(TEAM_NAME)/$(COMPONENT):$$NEW_VERSION"; \
	echo ""; \
	echo "========================================================="; \
	echo "Tagging and pushing $(COMPONENT)"; \
	echo "========================================================="; \
	echo "Source: $$SOURCE_IMAGE"; \
	echo "Target: $$TARGET_IMAGE"; \
	echo "========================================================="; \
	if ! podman image exists $$SOURCE_IMAGE >/dev/null 2>&1; then \
		echo ""; \
		echo "✗ Error: Source image does not exist locally"; \
		echo "  Image: $$SOURCE_IMAGE"; \
		echo "  Run 'make build COMPONENT=$(COMPONENT)' to build it first"; \
		echo "========================================================="; \
		exit 1; \
	fi; \
	echo ""; \
	echo "Tagging image..."; \
	if podman tag $$SOURCE_IMAGE $$TARGET_IMAGE; then \
		echo "✓ Successfully tagged $(COMPONENT)"; \
		echo ""; \
		echo "Pushing image..."; \
		if podman push $$TARGET_IMAGE; then \
			echo ""; \
			echo "========================================================="; \
			echo "✓ Successfully tagged and pushed $(COMPONENT)"; \
			echo "Image: $$TARGET_IMAGE"; \
			echo "========================================================="; \
		else \
			echo ""; \
			echo "========================================================="; \
			echo "✗ Failed to push $(COMPONENT)"; \
			echo "========================================================="; \
			exit 1; \
		fi; \
	else \
		echo ""; \
		echo "========================================================="; \
		echo "✗ Failed to tag $(COMPONENT)"; \
		echo "========================================================="; \
		exit 1; \
	fi

build-tag-and-push:
	$(MAKE) build-images
	$(MAKE) push-images

build-check-tag-push:
	@echo "========================================================="
	@echo "Starting build-check-tag-push pipeline..."
	@echo "This will:"
	@echo "  1. Build all images"
	@echo "  2. Check that containers can run"
	@echo "  3. Push images to registry"
	@echo "========================================================="
	@echo ""
	@make build-images && \
	make check && \
	make push-images && \
	echo "" && \
	echo "=========================================================" && \
	echo "✓ Pipeline completed successfully!" && \
	echo "  All images built, checked, and pushed" && \
	echo "========================================================="

pull:
	@echo "========================================================="
	@echo "Starting pull process for all applications..."
	@echo "========================================================="
	@SUCCESSFUL_PULLS=""; \
	FAILED_PULLS=""; \
	TOTAL=0; \
	SUCCESS=0; \
	FAILED=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
	done; \
	TOTAL_COUNT=$$TOTAL; \
	TOTAL=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
		echo ""; \
		echo "Pulling $$component ($$TOTAL/$$TOTAL_COUNT)..."; \
		if podman pull quay.io/$(TEAM_NAME)/$${component}:$(VERSION); then \
			SUCCESS=$$((SUCCESS + 1)); \
			SUCCESSFUL_PULLS="$$SUCCESSFUL_PULLS $$component"; \
			echo "✓ Successfully pulled $$component"; \
		else \
			FAILED=$$((FAILED + 1)); \
			FAILED_PULLS="$$FAILED_PULLS $$component"; \
			echo "✗ Failed to pull $$component"; \
		fi; \
	done; \
	echo ""; \
	echo "========================================================="; \
	echo "Pull Summary"; \
	echo "========================================================="; \
	echo "Total pulls attempted: $$TOTAL"; \
	echo "Successful pulls: $$SUCCESS"; \
	echo "Failed pulls: $$FAILED"; \
	echo ""; \
	if [ -n "$$SUCCESSFUL_PULLS" ]; then \
		echo "✓ Successful pulls:"; \
		for component in $$SUCCESSFUL_PULLS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	if [ -n "$$FAILED_PULLS" ]; then \
		echo "✗ Failed pulls:"; \
		for component in $$FAILED_PULLS; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	echo "========================================================="; \
	if [ $$FAILED -gt 0 ]; then \
		echo "Pull completed with errors. Some pulls failed."; \
		exit 1; \
	else \
		echo "All pulls completed successfully!"; \
	fi

# Pull two GenAI images from a registry you control and tag them as quay.io/$(TEAM_NAME)/…:$(VERSION).
# Required: GENAI_STACK_FRONT_END_SOURCE and GENAI_STACK_PULL_MODEL_SOURCE (full refs, e.g. quay.io/myorg/genai-front:0.1.0).
pull-retag-genai-stack-images:
	@if [ -z "$(GENAI_STACK_FRONT_END_SOURCE)" ] || [ -z "$(GENAI_STACK_PULL_MODEL_SOURCE)" ]; then \
		echo "Error: set both GENAI_STACK_FRONT_END_SOURCE and GENAI_STACK_PULL_MODEL_SOURCE."; \
		echo "There is no public upstream image for these services; use mirrors you pushed from a Linux/CI build."; \
		exit 1; \
	fi
	@echo "Pulling $(GENAI_STACK_FRONT_END_SOURCE) (linux/amd64)..."
	@podman pull --platform linux/amd64 $(GENAI_STACK_FRONT_END_SOURCE)
	@podman tag $(GENAI_STACK_FRONT_END_SOURCE) quay.io/$(TEAM_NAME)/genai-stack-front-end:$(VERSION)
	@echo "Tagged quay.io/$(TEAM_NAME)/genai-stack-front-end:$(VERSION)"
	@echo "Pulling $(GENAI_STACK_PULL_MODEL_SOURCE) (linux/amd64)..."
	@podman pull --platform linux/amd64 $(GENAI_STACK_PULL_MODEL_SOURCE)
	@podman tag $(GENAI_STACK_PULL_MODEL_SOURCE) quay.io/$(TEAM_NAME)/genai-stack-pull-model:$(VERSION)
	@echo "Tagged quay.io/$(TEAM_NAME)/genai-stack-pull-model:$(VERSION)"
	@echo "Done. Run make push-images (or push only these two) when ready."

# Local GenAI stack (https://github.com/docker/genai-stack) with Podman Compose + compose.podman.yaml (host-gateway for Ollama on host).
# Prereq: podman compose; copy env.example to .env in GENAI_STACK_DIR; start Ollama on host (ollama serve) unless using --profile linux.
genai-podman-up:
	@echo "Starting GenAI stack from $(GENAI_STACK_DIR) (Podman)..."
	cd $(GENAI_STACK_DIR) && podman compose -f docker-compose.yml -f compose.podman.yaml up --build -d

genai-podman-down:
	@echo "Stopping GenAI stack..."
	cd $(GENAI_STACK_DIR) && podman compose -f docker-compose.yml -f compose.podman.yaml down

genai-podman-logs:
	cd $(GENAI_STACK_DIR) && podman compose -f docker-compose.yml -f compose.podman.yaml logs -f

genai-podman-ps:
	cd $(GENAI_STACK_DIR) && podman compose -f docker-compose.yml -f compose.podman.yaml ps

push-images:
	@echo "========================================================="
	@echo "Starting push process for all applications..."
	@echo "========================================================="
	@SUCCESSFUL_PUSHES=""; \
	FAILED_PUSHES=""; \
	TOTAL=0; \
	SUCCESS=0; \
	FAILED=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
	done; \
	TOTAL_COUNT=$$TOTAL; \
	TOTAL=0; \
	for component in $(APPLICATIONS); do \
		TOTAL=$$((TOTAL + 1)); \
		echo ""; \
		echo "Pushing $$component ($$TOTAL/$$TOTAL_COUNT)..."; \
		if podman push quay.io/$(TEAM_NAME)/$${component}:$(VERSION); then \
			SUCCESS=$$((SUCCESS + 1)); \
			SUCCESSFUL_PUSHES="$$SUCCESSFUL_PUSHES $$component"; \
			echo "✓ Successfully pushed $$component"; \
		else \
			FAILED=$$((FAILED + 1)); \
			FAILED_PUSHES="$$FAILED_PUSHES $$component"; \
			echo "✗ Failed to push $$component"; \
		fi; \
	done; \
	echo ""; \
	echo "========================================================="; \
	echo "Pushing Emojivoto images..."; \
	echo "========================================================="; \
	for component in $(EMOJIVOTO_IMAGES); do \
		TOTAL=$$((TOTAL + 1)); \
		echo ""; \
		echo "Pushing $$component..."; \
		if podman push quay.io/$(TEAM_NAME)/$${component}:$(VERSION); then \
			SUCCESS=$$((SUCCESS + 1)); \
			SUCCESSFUL_PUSHES="$$SUCCESSFUL_PUSHES $$component"; \
			echo "✓ Successfully pushed $$component"; \
		else \
			FAILED=$$((FAILED + 1)); \
			FAILED_PUSHES="$$FAILED_PUSHES $$component"; \
			echo "✗ Failed to push $$component"; \
		fi; \
	done; \
	echo ""; \
	echo "========================================================="; \
	echo "Push Summary"; \
	echo "========================================================="; \
	echo "Total pushes attempted: $$TOTAL"; \
	echo "Successful pushes: $$SUCCESS"; \
	echo "Failed pushes: $$FAILED"; \
	echo ""; \
	if [ -n "$$SUCCESSFUL_PUSHES" ]; then \
		echo "✓ Successful pushes:"; \
		for component in $$SUCCESSFUL_PUSHES; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	if [ -n "$$FAILED_PUSHES" ]; then \
		echo "✗ Failed pushes:"; \
		for component in $$FAILED_PUSHES; do \
			echo "  - $$component"; \
		done; \
		echo ""; \
	fi; \
	echo "========================================================="; \
	if [ $$FAILED -gt 0 ]; then \
		echo "Push completed with errors. Some pushes failed."; \
		exit 1; \
	else \
		echo "All pushes completed successfully!"; \
	fi

push:
	@if [ -z "$(COMPONENT)" ]; then \
		echo "Error: Please specify a COMPONENT to push (e.g., make push COMPONENT=example)."; \
		exit 1; \
	fi
	@echo "========================================================="
	@echo "Pushing component: $(COMPONENT)"
	@echo "========================================================="
	@if podman push quay.io/$(TEAM_NAME)/$(COMPONENT):$(VERSION); then \
		echo ""; \
		echo "========================================================="; \
		echo "✓ Successfully pushed $(COMPONENT)"; \
		echo "Image: quay.io/$(TEAM_NAME)/$(COMPONENT):$(VERSION)"; \
		echo "========================================================="; \
	else \
		echo ""; \
		echo "========================================================="; \
		echo "✗ Failed to push $(COMPONENT)"; \
		echo "========================================================="; \
		exit 1; \
	fi

# Podman Compose targets
PODMAN_APPS := apache-struts dvwa dvwa-hummingbird hi-python-demo juice-shop log4shell nodejs-goof-vuln-main skupper-demo skupper-demo-hummingbird web-ctf-container webgoat
PODMAN_MANIFEST_DIR := podman-manifests

podman-up:
	@if [ -z "$(APP)" ]; then \
		echo "========================================================="; \
		echo "Starting all Podman Compose applications..."; \
		echo "========================================================="; \
		SUCCESSFUL_STARTS=""; \
		FAILED_STARTS=""; \
		SKIPPED_STARTS=""; \
		TOTAL=0; \
		SUCCESS=0; \
		FAILED=0; \
		SKIPPED=0; \
		for app in $(PODMAN_APPS); do \
			TOTAL=$$((TOTAL + 1)); \
		done; \
		TOTAL_COUNT=$$TOTAL; \
		TOTAL=0; \
		for app in $(PODMAN_APPS); do \
			TOTAL=$$((TOTAL + 1)); \
			COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/compose.yml"; \
			if [ ! -f "$$COMPOSE_FILE" ] && [ ! -f "$(PODMAN_MANIFEST_DIR)/$${app}/podman-compose.yml" ]; then \
				SKIPPED=$$((SKIPPED + 1)); \
				SKIPPED_STARTS="$$SKIPPED_STARTS $$app"; \
				echo "⊘ Skipping $$app ($$TOTAL/$$TOTAL_COUNT) - compose file not found"; \
				echo "  File: $$COMPOSE_FILE"; \
			else \
				echo ""; \
				echo "Starting $$app ($$TOTAL/$$TOTAL_COUNT)..."; \
				if [ ! -f "$$COMPOSE_FILE" ]; then \
					COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/podman-compose.yml"; \
				fi; \
				COMPOSE_FILE_NAME=$$(basename "$$COMPOSE_FILE"); \
				echo "  Compose file: $$COMPOSE_FILE"; \
				if ( cd "$(PODMAN_MANIFEST_DIR)/$${app}" && COMPOSE_PROJECT_NAME=$${app} podman compose -f "$$COMPOSE_FILE_NAME" up -d ); then \
					SUCCESS=$$((SUCCESS + 1)); \
					SUCCESSFUL_STARTS="$$SUCCESSFUL_STARTS $$app"; \
					echo "  ✓ Successfully started $$app"; \
				else \
					FAILED=$$((FAILED + 1)); \
					FAILED_STARTS="$$FAILED_STARTS $$app"; \
					echo "  ✗ Failed to start $$app"; \
				fi; \
			fi; \
		done; \
		echo ""; \
		echo "========================================================="; \
		echo "Podman Compose Start Summary"; \
		echo "========================================================="; \
		echo "Total applications: $$TOTAL_COUNT"; \
		echo "Successful starts: $$SUCCESS"; \
		echo "Skipped (file missing): $$SKIPPED"; \
		echo "Failed starts: $$FAILED"; \
		echo ""; \
		if [ -n "$$SUCCESSFUL_STARTS" ]; then \
			echo "✓ Successfully started:"; \
			for app in $$SUCCESSFUL_STARTS; do \
				echo "  - $$app"; \
			done; \
			echo ""; \
		fi; \
		if [ -n "$$SKIPPED_STARTS" ]; then \
			echo "⊘ Skipped (file missing):"; \
			for app in $$SKIPPED_STARTS; do \
				echo "  - $$app"; \
			done; \
			echo ""; \
		fi; \
		if [ -n "$$FAILED_STARTS" ]; then \
			echo "✗ Failed starts:"; \
			for app in $$FAILED_STARTS; do \
				echo "  - $$app"; \
			done; \
			echo ""; \
		fi; \
		echo "========================================================="; \
		if [ $$FAILED -gt 0 ]; then \
			echo "Some applications failed to start."; \
			exit 1; \
		else \
			echo "All applications started successfully!"; \
		fi; \
	else \
		APP_NAME="$(APP)"; \
		COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/compose.yml"; \
		if [ ! -f "$$COMPOSE_FILE" ] && [ ! -f "$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml" ]; then \
			echo "Error: Compose file not found for application '$$APP_NAME'"; \
			echo "  Expected: $$COMPOSE_FILE or $(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml"; \
			echo ""; \
			echo "Available applications:"; \
			for app in $(PODMAN_APPS); do \
				echo "  - $$app"; \
			done; \
			exit 1; \
		fi; \
		if [ ! -f "$$COMPOSE_FILE" ]; then \
			COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml"; \
		fi; \
		COMPOSE_FILE_NAME=$$(basename "$$COMPOSE_FILE"); \
		echo "========================================================="; \
		echo "Starting Podman Compose application: $$APP_NAME"; \
		echo "========================================================="; \
		echo "Compose file: $$COMPOSE_FILE"; \
		if ( cd "$(PODMAN_MANIFEST_DIR)/$${APP_NAME}" && COMPOSE_PROJECT_NAME=$${APP_NAME} podman compose -f "$$COMPOSE_FILE_NAME" up -d ); then \
			echo ""; \
			echo "========================================================="; \
			echo "✓ Successfully started $$APP_NAME"; \
			echo "========================================================="; \
		else \
			echo ""; \
			echo "========================================================="; \
			echo "✗ Failed to start $$APP_NAME"; \
			echo "========================================================="; \
			exit 1; \
		fi; \
	fi

podman-down:
	@if [ -z "$(APP)" ]; then \
		echo "========================================================="; \
		echo "Stopping all Podman Compose applications..."; \
		echo "========================================================="; \
		SUCCESSFUL_STOPS=""; \
		FAILED_STOPS=""; \
		SKIPPED_STOPS=""; \
		TOTAL=0; \
		SUCCESS=0; \
		FAILED=0; \
		SKIPPED=0; \
		for app in $(PODMAN_APPS); do \
			TOTAL=$$((TOTAL + 1)); \
		done; \
		TOTAL_COUNT=$$TOTAL; \
		TOTAL=0; \
		for app in $(PODMAN_APPS); do \
			TOTAL=$$((TOTAL + 1)); \
			COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/compose.yml"; \
			if [ ! -f "$$COMPOSE_FILE" ] && [ ! -f "$(PODMAN_MANIFEST_DIR)/$${app}/podman-compose.yml" ]; then \
				SKIPPED=$$((SKIPPED + 1)); \
				SKIPPED_STOPS="$$SKIPPED_STOPS $$app"; \
				echo "⊘ Skipping $$app ($$TOTAL/$$TOTAL_COUNT) - compose file not found"; \
			else \
				echo ""; \
				echo "Stopping $$app ($$TOTAL/$$TOTAL_COUNT)..."; \
				COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/compose.yml"; \
				if [ ! -f "$$COMPOSE_FILE" ]; then \
					COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/podman-compose.yml"; \
				fi; \
				COMPOSE_FILE_NAME=$$(basename "$$COMPOSE_FILE"); \
				if ( cd "$(PODMAN_MANIFEST_DIR)/$${app}" && podman compose -f "$$COMPOSE_FILE_NAME" down ); then \
					SUCCESS=$$((SUCCESS + 1)); \
					SUCCESSFUL_STOPS="$$SUCCESSFUL_STOPS $$app"; \
					echo "  ✓ Successfully stopped $$app"; \
				else \
					FAILED=$$((FAILED + 1)); \
					FAILED_STOPS="$$FAILED_STOPS $$app"; \
					echo "  ✗ Failed to stop $$app"; \
				fi; \
			fi; \
		done; \
		echo ""; \
		echo "========================================================="; \
		echo "Podman Compose Stop Summary"; \
		echo "========================================================="; \
		echo "Total applications: $$TOTAL_COUNT"; \
		echo "Successful stops: $$SUCCESS"; \
		echo "Skipped (file missing): $$SKIPPED"; \
		echo "Failed stops: $$FAILED"; \
		echo ""; \
		if [ -n "$$SUCCESSFUL_STOPS" ]; then \
			echo "✓ Successfully stopped:"; \
			for app in $$SUCCESSFUL_STOPS; do \
				echo "  - $$app"; \
			done; \
			echo ""; \
		fi; \
		if [ -n "$$SKIPPED_STOPS" ]; then \
			echo "⊘ Skipped (file missing):"; \
			for app in $$SKIPPED_STOPS; do \
				echo "  - $$app"; \
			done; \
			echo ""; \
		fi; \
		if [ -n "$$FAILED_STOPS" ]; then \
			echo "✗ Failed stops:"; \
			for app in $$FAILED_STOPS; do \
				echo "  - $$app"; \
			done; \
			echo ""; \
		fi; \
		echo "========================================================="; \
		if [ $$FAILED -gt 0 ]; then \
			echo "Some applications failed to stop."; \
			exit 1; \
		else \
			echo "All applications stopped successfully!"; \
		fi; \
	else \
		APP_NAME="$(APP)"; \
		COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/compose.yml"; \
		if [ ! -f "$$COMPOSE_FILE" ]; then \
			echo "Error: Compose file not found for application '$$APP_NAME'"; \
			echo "  Expected: $$COMPOSE_FILE"; \
			echo ""; \
			echo "Available applications:"; \
			for app in $(PODMAN_APPS); do \
				echo "  - $$app"; \
			done; \
			exit 1; \
		fi; \
		if [ ! -f "$$COMPOSE_FILE" ]; then \
			COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml"; \
		fi; \
		COMPOSE_FILE_NAME=$$(basename "$$COMPOSE_FILE"); \
		echo "========================================================="; \
		echo "Stopping Podman Compose application: $$APP_NAME"; \
		echo "========================================================="; \
		echo "Compose file: $$COMPOSE_FILE"; \
		if ( cd "$(PODMAN_MANIFEST_DIR)/$${APP_NAME}" && podman compose -f "$$COMPOSE_FILE_NAME" down ); then \
			echo ""; \
			echo "========================================================="; \
			echo "✓ Successfully stopped $$APP_NAME"; \
			echo "========================================================="; \
		else \
			echo ""; \
			echo "========================================================="; \
			echo "✗ Failed to stop $$APP_NAME"; \
			echo "========================================================="; \
			exit 1; \
		fi; \
	fi

podman-logs:
	@if [ -z "$(APP)" ]; then \
		echo "Error: Please specify an APP to view logs (e.g., make podman-logs APP=apache-struts)."; \
		echo ""; \
		echo "Available applications:"; \
		for app in $(PODMAN_APPS); do \
			echo "  - $$app"; \
		done; \
		exit 1; \
	fi
	@APP_NAME="$(APP)"; \
	COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/compose.yml"; \
	if [ ! -f "$$COMPOSE_FILE" ] && [ ! -f "$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml" ]; then \
		echo "Error: Compose file not found for application '$$APP_NAME'"; \
		echo "  Expected: $$COMPOSE_FILE or $(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml"; \
		exit 1; \
	fi; \
	if [ ! -f "$$COMPOSE_FILE" ]; then \
		COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${APP_NAME}/podman-compose.yml"; \
	fi; \
	COMPOSE_FILE_NAME=$$(basename "$$COMPOSE_FILE"); \
	cd "$(PODMAN_MANIFEST_DIR)/$${APP_NAME}" && podman compose -f "$$COMPOSE_FILE_NAME" logs -f

podman-ps:
	@echo "========================================================="
	@echo "Podman Compose Status"
	@echo "========================================================="
	@for app in $(PODMAN_APPS); do \
		COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/compose.yml"; \
		if [ -f "$$COMPOSE_FILE" ]; then \
			echo ""; \
			echo "Application: $$app"; \
			echo "----------------------------------------"; \
			COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/compose.yml"; \
			if [ ! -f "$$COMPOSE_FILE" ]; then \
				COMPOSE_FILE="$(PODMAN_MANIFEST_DIR)/$${app}/podman-compose.yml"; \
			fi; \
			COMPOSE_FILE_NAME=$$(basename "$$COMPOSE_FILE"); \
			( cd "$(PODMAN_MANIFEST_DIR)/$${app}" && podman compose -f "$$COMPOSE_FILE_NAME" ps ) || echo "  No containers running"; \
		fi; \
	done; \
	echo ""; \
	echo "========================================================="

# Emojivoto (multi-image app under image-builds/emojivoto/)
.PHONY: build-emojivoto push-emojivoto build-push-emojivoto update-emojivoto-manifests

build-emojivoto:
	@cd image-builds/emojivoto && \
		TEAM_NAME=$(TEAM_NAME) VERSION=$(VERSION) REGISTRY_PREFIX=quay.io/$(TEAM_NAME) IMAGE_TAG=$(VERSION) \
		./build-images.sh

push-emojivoto:
	@cd image-builds/emojivoto && \
		TEAM_NAME=$(TEAM_NAME) VERSION=$(VERSION) REGISTRY_PREFIX=quay.io/$(TEAM_NAME) IMAGE_TAG=$(VERSION) \
		PUSH=1 ./build-images.sh

build-push-emojivoto: build-emojivoto push-emojivoto

# Pull docker.io/buoyantio/emojivoto-*:v11, retag to quay.io/$(TEAM_NAME)/*:$(VERSION), push.
# Run on bastion after: podman login docker.io && podman login quay.io
mirror-emojivoto-to-quay:
	@chmod +x scripts/mirror-emojivoto-to-quay.sh
	@TEAM_NAME=$(TEAM_NAME) VERSION=$(VERSION) PUSH=1 \
		scripts/mirror-emojivoto-to-quay.sh

update-emojivoto-manifests:
	@echo "Updating emojivoto image refs to quay.io/$(TEAM_NAME)/emojivoto-*:$(VERSION)"
	@sed -E -i.bak \
		's|quay\.io/[^/]+/emojivoto-(web|emoji-svc|voting-svc):[^[:space:]]+|quay.io/$(TEAM_NAME)/emojivoto-\1:$(VERSION)|g' \
		k8s-deployment-manifests/emojivoto/everything.yml
	@rm -f k8s-deployment-manifests/emojivoto/everything.yml.bak
	@echo "Done. Review k8s-deployment-manifests/emojivoto/everything.yml"