.gitlab-ci-dso.yml

include:
  - project: $CATALOG_PATH
    file:
      - vault-ci.yml
      - kaniko-ci.yml
    ref: main
  - local: "/includes/java-mvn.yml"

# default:
#  tags:
#    - ADD_CUSTOM_TAG_HERE

cache:
  paths:
    - .m2/repository/
    - node_modules

variables:
  TAG: "${CI_COMMIT_REF_SLUG}"
  DOCKERFILE: Dockerfile
  REGISTRY_URL: "${IMAGE_REPOSITORY}"
  REMOTE_DOCKER_HUB_REGISTRY: $REGISTRY_HOST/dockerhub

stages:
  - read-secret
  - test-app

test-vault:
  rules:
    - if: $CI_PIPELINE_SOURCE == "push"
  stage: read-secret
  extends:
    - .vault:read_secret

test-nexus:
  rules:
    - if: $CI_PIPELINE_SOURCE == "push"
  variables:
    BUILD_IMAGE_NAME: $REMOTE_DOCKER_HUB_REGISTRY/maven:3.9.6-eclipse-temurin-21
    WORKING_DIR: "."
    ARTEFACT_DIR: "target/"
    MAVEN_OPTS: "-Dmaven.repo.local=$CI_PROJECT_DIR/.m2/repository"
    MAVEN_CLI_OPTS: "-Ddependency-check.skip=true -DskipITs -DskipTests -Dmaven.test.skip=true --no-transfer-progress"
    MVN_CONFIG_FILE: $MVN_CONFIG
  stage: test-app
  extends:
    - .java:deploy
  artifacts:
    paths:
      - "${ARTEFACT_DIR}"
    expire_in: 1 hrs

test-sonar:
  rules:
    - if: $CI_PIPELINE_SOURCE == "push"
  variables:
    BUILD_IMAGE_NAME: $REMOTE_DOCKER_HUB_REGISTRY/maven:3.9.6-eclipse-temurin-21
    WORKING_DIR: .
  stage: test-app
  extends:
    - .java:sonar
  allow_failure: true

test-harbor:
  rules:
    - if: $CI_PIPELINE_SOURCE == "push"
  variables:
    WORKING_DIR: "."
    IMAGE_NAME: java-demo
    EXTRA_BUILD_ARGS: "--build-arg PROJECT_PATH=$PROJECT_PATH --build-arg NEXUS_USERNAME=$NEXUS_USERNAME --build-arg NEXUS_PASSWORD=$NEXUS_PASSWORD"
  stage: test-app
  before_script:
    - cp "$MVN_CONFIG_FILE" settings.xml
    - if [ ! -z $CA_BUNDLE ]; then cp $CA_BUNDLE ./internal-ca.crt; else touch ./internal-ca.crt; fi
  extends:
    - .kaniko:simple-build-push