Skip to content
Snippets Groups Projects
Select Git revision
  • 64151faecaf996500e621710e6db119baedbd164
  • main default protected
  • OZG-6978-prevent-other-pages-from-being-called
  • OZG-7986-mandat-anfragen
  • testing-imports
  • storybook-improvements
  • OZG-7287-forward-saml-token
  • release-administration
  • OZG-8422-BenutzerSpeichern
  • OZG-8314-Alfa-Vorgang-Bearbeiter-Zuweisung-entfernen
  • release-info
  • release
  • OZG-7856_schadcode-scanner-e2e
  • OZG-7985-fix-sorting
  • OZG-8305-Create-webpack-sbom
  • tooltip-improvements
  • OZG-7714-UpgradeKeycloakDependencyTo25
  • OZG-8086-Admin-Datenanfrage-erstellen
  • OZG-8086-Datenanfrage-Umbenennung
  • mongodb-7-0-16-e2e
  • OZG-6220-Bescheid-speichern-ohne-Postfach
  • 1.12.1-administration
  • 1.12.0-administration
  • 1.12.0-info
  • 2.27.0-alfa
  • 1.11.0-info
  • 1.11.0-administration
  • 2.26.0-alfa
  • 1.10.0-info
  • 1.10.0-administration
  • 2.25.0-alfa
  • 1.9.0-info
  • 1.9.0-administration
  • 2.24.0-alfa
  • 1.8.0-info
  • 1.8.0-administration
  • 2.23.0-alfa
  • 1.7.0-info
  • 1.7.0-administration
  • 2.22.0-alfa
  • 1.6.0-info
41 results

benutzer.e2e.component.ts

Blame
  • Jenkinsfile 13.20 KiB
    pipeline {
        agent {
           node {
               label 'ozgcloud-jenkins-build-agent-jdk21'
            }
        }
    
        environment {
            BLUE_OCEAN_URL = "https://jenkins.infra.ozg-cloud.systems/job/bayernid-proxy/job/${env.BRANCH_NAME}/${env.BUILD_NUMBER}/"
            RELEASE_REGEX = /\d+.\d+.\d+/
            SNAPSHOT_REGEX = /\d+.\d+.\d+-SNAPSHOT/
            FAILED_STAGE = ""
            SH_SUCCESS_STATUS_CODE = 0
        }
    
        options {
            timeout(time: 1, unit: 'HOURS')
            disableConcurrentBuilds()
            buildDiscarder(logRotator(numToKeepStr: '5'))
        }
    
        stages {
            stage('Check Version') {
                steps {
                    script {
                        FAILED_STAGE = env.STAGE_NAME
                        def bayernIdProxyParent = getPomVersion('pom.xml')
                        def bayernIdProxyInterface = getPomVersion('bayernid-proxy-interface/pom.xml')
    
                        if(isReleaseBranch()){
                            if ( !(bayernIdProxyParent ==~ RELEASE_REGEX) || !(bayernIdProxyInterface ==~ RELEASE_REGEX)) {
                                error("Keine Release Version für BayernIdProxy Branch ${env.BRANCH_NAME}.")
                            }
                        } else {
                            if ( !(bayernIdProxyParent ==~ SNAPSHOT_REGEX) || !(bayernIdProxyInterface ==~ SNAPSHOT_REGEX)) {
                                error("Keine Snapshot Version für BayernIdProxy Branch ${env.BRANCH_NAME}.")
                            }
                        }
                         if( !(bayernIdProxyParent == bayernIdProxyInterface)){
                            error("Versionen BayernIdProxy sind nicht identisch")                        
                        }
                    }
                }
            }
    
            stage('Set Version') {
              when {
                not {
                    anyOf {
                        branch 'main'
                        branch 'release'
                    }
                }
              }
              steps {
                    script {
                        FAILED_STAGE=env.STAGE_NAME
                        JAR_TAG = generateBranchPRJarTag('pom.xml')
                    }
                    configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
                        sh "mvn -s $MAVEN_SETTINGS versions:set -DnewVersion=${JAR_TAG} -DprocessAllModules=true"
                        
                    }
              }
            }   
    
            stage('Build BayernIdProxy') {
              steps {
                    script {
                        FAILED_STAGE=env.STAGE_NAME
                    }
                    configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
                        sh 'mvn --no-transfer-progress -s $MAVEN_SETTINGS clean install -Dmaven.wagon.http.retryHandler.count=3 -DelasticTests.disabled=true'
                        
                    }
                }
            }
            
            stage('Deploy to Nexus'){
                steps {
                    script {
                        FAILED_STAGE = env.STAGE_NAME
                    }
                    configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
                        sh 'mvn --no-transfer-progress -s $MAVEN_SETTINGS -DskipTests deploy -Dmaven.wagon.http.retryHandler.count=3'
                    }
                   
                }       
            }
    
            stage('Build Docker image nachrichten-bayernid-proxy') {
              steps {
                    script {
                        FAILED_STAGE=env.STAGE_NAME
                    }
    
                    configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
                        dir('bayernid-proxy-impl') {
                            sh 'mvn --no-transfer-progress -s $MAVEN_SETTINGS spring-boot:build-image -DskipTests -Dmaven.wagon.http.retryHandler.count=3'
                        }
                        sh "mvn -s $MAVEN_SETTINGS versions:revert"
                    }
               }
            }
    
            stage('Tag and Push Docker image nachrichten-bayernid-proxy') {
                steps {
                    script {
                        FAILED_STAGE=env.STAGE_NAME
                        IMAGE_TAG_BAYERN_ID_PROXY = buildVersionName('pom.xml')
    
                        tagAndPushDockerImage('bayernid-proxy', IMAGE_TAG_BAYERN_ID_PROXY)
    
                        if (env.BRANCH_NAME == 'main') {
                            tagAndPushDockerImage('bayernid-proxy', 'snapshot-latest')
                            tagAndPushDockerImage('bayernid-proxy', 'e2e-test')
                        }
                        else if (env.BRANCH_NAME == 'release') {
                            tagAndPushDockerImage('bayernid-proxy', 'latest')
                        }
                    }
                }
            }
    
            stage('Test, build and deploy Helm Chart bayernid-proxy') {
                steps {
                    script {
                        FAILED_STAGE=env.STAGE_NAME
    
                        HELM_CHART_VERSION_BAYERN_ID_PROXY = buildVersionName("pom.xml")
    
                        sh "./run_helm_test.sh"
    
                        dir('src/main/helm') {
    
                            sh "helm package --version=${HELM_CHART_VERSION_BAYERN_ID_PROXY} ."
    
                            deployHelmChart("bayernid-proxy", HELM_CHART_VERSION_BAYERN_ID_PROXY)
                        }
                    }
                }
            }
    
            stage('Trigger Dev rollout') {
                when {
                    branch 'main'
                }
                steps {
                    script {
                        FAILED_STAGE = env.STAGE_NAME
    
                        cloneGitopsRepo()
    
                        setNewNachrichtenBayernIdProxyGitopsVersion("dev")
                        pushDevGitopsRepo()
                    }
                }
            }
    
            stage('Trigger Test rollout') {
                when {
                    branch 'release'
                }	
                	
                steps {	
                    script {	
                        FAILED_STAGE = env.STAGE_NAME
    
                        cloneGitopsRepo()
    
                        setNewNachrichtenBayernIdProxyGitopsVersion("test")
    
                        pushTestGitopsRepo()
                    }
                }	
            }
            
            stage ('Deploy SBOM to DependencyTrack') {
                steps {
                    script {
                        IMAGE_TAG = buildVersionName('pom.xml')
    
                        configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
                            withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) {
    
                                dir('bayernid-proxy-impl') {
                                    catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') {
                                        sh "mvn  --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=${IMAGE_TAG} -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de"
                                    }
                                }
                            }
                        }
                    }
                }
            }
    
            stage('Sonar Checks') {
                when {
                    branch 'main'
                }
            	steps {
            	    script {
                        FAILED_STAGE=env.STAGE_NAME
    
                      	configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
                            dir('bayernid-proxy-impl') {
                            	try {
                                    withSonarQubeEnv('sonarqube-ozg-sh'){
                                        sh 'mvn -s $MAVEN_SETTINGS sonar:sonar'
    	                            }
    	                        } catch (Exception e) {
                                    unstable("SonarQube BayernIdProxy failed")
                                }
                            }
                		}
                    }
                }
            }
        }
        
    
        post {
            always{
                junit testResults: '**/target/surefire-reports/*.xml', skipPublishingChecks: true
            }
            failure {
                script {
                    if (env.BRANCH_NAME == 'main' || env.BRANCH_NAME == 'release') {
                        sendFailureMessage()
                    }
                }
            }
        }
    }
    
    
    Boolean isReleaseBranch() {
        return env.BRANCH_NAME == 'release'
    }
    
    void deployHelmChart(String helmChartName, String helmChartVersion) {       
        withCredentials([usernamePassword(credentialsId: 'jenkins-nexus-login', usernameVariable: 'USERNAME', passwordVariable: 'PASSWORD')]){
            if (env.BRANCH_NAME == 'release') {
                result = sh script: '''curl -u $USERNAME:$PASSWORD https://nexus.ozg-sh.de/service/rest/v1/components?repository=ozg-base-apps -F file=@'''+helmChartName+'''-'''+helmChartVersion+'''.tgz''', returnStdout: true
            }
            else {
                result = sh script: '''curl -u $USERNAME:$PASSWORD https://nexus.ozg-sh.de/service/rest/v1/components?repository=ozg-base-apps-snapshot -F file=@'''+helmChartName+'''-'''+helmChartVersion+'''.tgz''', returnStdout: true
            }
    
            if (result != '') {
                error(result)
            }
        }
    }
    
    String validateBranchName(branchName) {
        int maxLength = 19
        if (branchName.length() > maxLength) {
            String originalBranchName = branchName
            branchName = branchName.substring(0, maxLength)
            echo "WARNING: Branch name '${originalBranchName}' exceeded ${maxLength} characters. " +
                 "It has been truncated to '${branchName}' for deployment purposes."
        }
        return branchName
    }
    
    String buildVersionName(String pomFile) {
        if (isReleaseBranch()) {
            return getPomVersion(pomFile)
        }
        return "${getPomVersion(pomFile)}-${validateBranchName(env.BRANCH_NAME)}-${env.GIT_COMMIT.take(7)}".replaceAll("_", "-")
    }
    
    Void tagAndPushDockerImage(String imageName, String newTag){
        withCredentials([usernamePassword(credentialsId: 'jenkins-nexus-login', usernameVariable: 'USER', passwordVariable: 'PASSWORD')]) {
            sh 'docker login docker.ozg-sh.de -u ${USER} -p ${PASSWORD}'
    
            sh "docker tag docker.ozg-sh.de/${imageName}:build-latest docker.ozg-sh.de/${imageName}:${newTag}"
            sh "docker push docker.ozg-sh.de/${imageName}:${newTag}"
        }
    }
    
    String getPomVersion(String pomFile){
        def pom = readMavenPom file: pomFile
    
        return pom.version
    }
    
    String generateBranchPRJarTag(String pomFile) {
        def jarTag = getPomVersion(pomFile).replace("SNAPSHOT", "${env.BRANCH_NAME}-SNAPSHOT")
    
        return jarTag
    }
    
    Void configureGit() {
        final email = "jenkins@ozg-sh.de"
        final name = "jenkins"
    
        dir("gitops") {
            sh "git config user.email '${email}'"
            sh "git config user.name '${name}'"
        }
    }
    
    Void cloneGitopsRepo() {
        withCredentials([usernamePassword(credentialsId: 'jenkins-gitea-access-token', passwordVariable: 'TOKEN', usernameVariable: 'USER')]) {
            sh 'git clone https://${USER}:${TOKEN}@git.ozg-sh.de/ozgcloud-devops/gitops.git'
        }
    
        configureGit()
    }
    
    Void setNewNachrichtenBayernIdProxyGitopsVersion(String environment) {
        dir("gitops") {
            def envFile = "${environment}/application/values/bayernid-proxy-values.yaml"
            def envVersions = readYaml file: envFile
    
            envVersions.bayernid_proxy.image.tag = IMAGE_TAG_BAYERN_ID_PROXY
            envVersions.bayernid_proxy.helm.version = HELM_CHART_VERSION_BAYERN_ID_PROXY
    
            writeYaml file: envFile, data: envVersions, overwrite: true
        }
    }
    
    Void pushDevGitopsRepo() {
        pushNewGitopsVersion('dev')
    }
    
    Void pushTestGitopsRepo() {
        pushNewGitopsVersion('test')
    }
    
    Void pushNewGitopsVersion(String environment) {
        dir('gitops') {
            if (!hasGitopsValuesFileChanged(environment)) {
                return
            }
    
            withCredentials([usernamePassword(credentialsId: 'jenkins-gitea-access-token', passwordVariable: 'TOKEN', usernameVariable: 'USER')]) {
                sh "git add ${environment}/application/values/*-values.yaml"
    
                sh "git commit -m 'jenkins rollout ${environment}  bayern-id version ${IMAGE_TAG_BAYERN_ID_PROXY}'"
                sh 'git push https://${USER}:${TOKEN}@git.ozg-sh.de/ozgcloud-devops/gitops.git'
            }
        }
    }
    
    Boolean hasGitopsValuesFileChanged(String environment) {
        return sh (script: "git status | grep '${environment}/application/values/'", returnStatus: true) == env.SH_SUCCESS_STATUS_CODE as Integer
    }
    
    Void sendFailureMessage() {
        def room = ''
        def data = """{"msgtype":"m.text", \
                        "body":"BayernIdProxy: Build Failed. Stage: ${FAILED_STAGE} Build-ID: ${env.BUILD_NUMBER} Link:
                        ${BLUE_OCEAN_URL}", \
                        "format": "org.matrix.custom.html", \
                        "formatted_body":"BayernIdProxy: Build Failed. Stage: ${FAILED_STAGE} Build-ID: <a
                        href='${BLUE_OCEAN_URL}'>${env.BUILD_NUMBER}</a>"}"""
           
        if (env.BRANCH_NAME == 'main') {
            room = "!GjqhmouBtnDbwUkAjx:matrix.ozg-sh.de"
        }
        else if (env.BRANCH_NAME == 'release') {
            room = "!oWZpUGTFsxkJIYNfYg:matrix.ozg-sh.de"
        }
    
        sh "curl -XPOST -H 'authorization: Bearer ${getElementAccessToken()}' -d '${data}' https://matrix.ozg-sh.de/_matrix/client/v3/rooms/$room/send/m.room.message"
    }
    
    String getElementAccessToken() {
        withCredentials([string(credentialsId: 'element-login-json', variable: 'LOGIN_JSON')]) {
            return readJSON ( text: sh (script: '''curl -XPOST -d \"$LOGIN_JSON\" https://matrix.ozg-sh.de/_matrix/client/v3/login''', returnStdout: true)).access_token
        }
    }