.gitlab-ci.yml

variables:
  GIT_STRATEGY: fetch
  GIT_SUBMODULE_STRATEGY: recursive
  IMAGE_REDEMPTION_ANALYZE: redemption-analyze
  TESTDIR: test_tmpdir

stages:
  - build-docker-images
  - build

build-analyze-image:
  stage: build-docker-images
  image: docker.io/docker:19.03
  variables:
    BUILD_ANALYZE_PATH: builder/analyze/
  script:
    # DOCKER_AUTH_CONFIG only works when pulling images from private repo for jobs...
    - echo "${WAB_PROXIES_NEXUS_TOKEN}" | docker login -u "${WAB_PROXIES_NEXUS_USER}" "${NEXUS_WAB_PROXIES_URL}" --password-stdin
    - docker build -t ${IMAGE_REDEMPTION_ANALYZE} -f ${BUILD_ANALYZE_PATH}/Dockerfile ${BUILD_ANALYZE_PATH}
    - docker tag ${IMAGE_REDEMPTION_ANALYZE} ${NEXUS_WAB_PROXIES_URL}/${IMAGE_REDEMPTION_ANALYZE}
    - docker push ${NEXUS_WAB_PROXIES_URL}/${IMAGE_REDEMPTION_ANALYZE}
  when: manual


branch-pages:
  stage: build
  rules:
    - if: $CI_COMMIT_BRANCH =~ /^maintenance_bastion_/
      when: on_success
    - if: $CI_COMMIT_BRANCH == "future"
      when: on_success
    - when: never
  image: ${NEXUS_WAB_PROXIES_URL}/${IMAGE_REDEMPTION_ANALYZE}
  variables:
    GITLAB_REMOTE: ci
    GIT_BRANCH: pages
  script:
    - mkdir "tmp"
    - tools/conf_migration_tool/rdp_conf_migrate.py --dump=json > tmp/migrate.json
    - cp projects/redemption_configs/autogen/doc/*.json docs/theme/*.png tmp
    - cp projects/redemption_configs/pages/config.html tmp/index.html
    - git config user.email "cipipeline@wallix.com"
    - git config user.name "CI Pipeline"
    - git remote remove "${GITLAB_REMOTE}" || true
    - git remote add "${GITLAB_REMOTE}" "https://${PAGES_ACCESS_NAME}:${PAGES_ACCESS_TOKEN}@gitlab.corp.wallix.com/git/redemption.git"
    - git fetch "${GITLAB_REMOTE}"
    - git switch "${GIT_BRANCH}" || git checkout -b "${GIT_BRANCH}" "${GITLAB_REMOTE}/${GIT_BRANCH}"
    - rm -rf "public/${CI_COMMIT_BRANCH}"
    - mkdir -p "public"
    - mv "tmp" "public/${CI_COMMIT_BRANCH}"
    - git add "public/${CI_COMMIT_BRANCH}"
    - if git commit -m "Update page from ${CI_COMMIT_BRANCH} ${CI_COMMIT_SHORT_SHA}"; then
    -   git push "${GITLAB_REMOTE}" "${GIT_BRANCH}"
    - fi


build-analyze:
  stage: build
  needs: []
  rules:
    - if: $CI_COMMIT_TAG
      when: never
    - when: on_success
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  image: ${NEXUS_WAB_PROXIES_URL}/${IMAGE_REDEMPTION_ANALYZE}
  script:
    - mkdir -p "$TESTDIR"
    - TMPDIR_TEST="$TESTDIR" ./tools/gitlab-analyze.sh full
  artifacts:
    when: always
    paths:
      - report.txt
      - clang_tidy_report.txt
      - gcovr_report.xml
      - valgrind_reports/
      - ruff_report.txt
      - py_coverage.xml
      - "$TESTDIR"
  timeout: 2h 30m


sonarqube-check:
  stage: build
  needs: [build-analyze]
  rules:
    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
      when: on_success
    - if: $CI_COMMIT_BRANCH == "future"
      when: on_success
    - when: never
  image:
    name: sonarsource/sonar-scanner-cli:latest
    entrypoint: [""]
  variables:
    GIT_SUBMODULE_STRATEGY: normal
    SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar"  # Defines the location of the analysis task cache
    GIT_DEPTH: "0"  # Tells git to fetch all the branches of the project, required by the analysis task
  cache:
    key: "${CI_JOB_NAME}"
    paths:
      - .sonar/cache
  script:
    - sonar-scanner
  allow_failure: true