-
Notifications
You must be signed in to change notification settings - Fork 3
/
Jenkinsfile_nightly
117 lines (99 loc) · 4.31 KB
/
Jenkinsfile_nightly
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
#!groovy
properties([
pipelineTriggers([cron('10 08 * * 1-5')]), // scheduling to trigger jenkins job
parameters([
string(name: 'URL_TO_TEST', defaultValue: 'https://rd-judicial-data-load-aat.service.core-compute-aat.internal', description: 'The URL you want to run these tests against'),
string(name: 'SecurityRules',
defaultValue: 'https://raw.githubusercontent.com/hmcts/security-test-rules/master/conf/security-rules.conf',
description: 'The URL you want to run these tests against'),
])
])
@Library("Infrastructure")
import uk.gov.hmcts.contino.DockerImage
import uk.gov.hmcts.contino.GradleBuilder
import uk.gov.hmcts.contino.Kubectl
import uk.gov.hmcts.pipeline.TeamConfig
def type = "java"
def product = "rd"
def component = "judicial-data-load"
static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
[$class : 'AzureKeyVaultSecret',
secretType : 'Secret',
name : secretName,
version : '',
envVariable: envVar
]
}
def vaultOverrides = [
'preview' : 'aat',
'spreview': 'saat'
]
def secrets = [
'rd-${env}': [
secret('ACCOUNT-KEY-PREVIEW', 'ACCOUNT_KEY_PREVIEW'),
secret('ACCOUNT-NAME', 'ACCOUNT_NAME'),
secret('ACCOUNT-KEY', 'ACCOUNT_KEY'),
secret('LD-SDK-KEY', 'LD_SDK_KEY'),
secret('OAUTH2-AUTH', 'OAUTH2_AUTH'),
secret('OAUTH2-CLIENT-AUTH', 'OAUTH2_CLIENT_AUTH')
]
]
GradleBuilder builder = new GradleBuilder(this, product)
withNightlyPipeline(type, product, component) {
env.TEST_URL = "http://rd-judicial-data-load-aat.service.core-compute-aat.internal"
env.Rules = params.SecurityRules
env.execution_environment = "aat"
// Var for testcontainers.org
env.TESTCONTAINERS_HUB_IMAGE_NAME_PREFIX = "hmctspublic.azurecr.io/imported/"
overrideVaultEnvironments(vaultOverrides)
loadVaultSecrets(secrets)
enableMutationTest()
enableSecurityScan()
enableFortifyScan()
afterSuccess('securityScan') {
def sleepTime = (env.BRANCH_NAME.startsWith("PR")) ? '210s' : '120s'
sh "sleep ${sleepTime}"
if (env.BRANCH_NAME.startsWith("PR")) {
withAksClient('nonprod', product) {
def dockerImage = new DockerImage(product, component, null, env.BRANCH_NAME, env.GIT_COMMIT, env.LAST_COMMIT_TIMESTAMP)
def subscription = env.SUBSCRIPTION_NAME
def aksServiceName = dockerImage.getAksServiceName().toLowerCase()
def serviceBusSecret = "servicebus-secret-topic-${aksServiceName}-servicebus-jrd-aks-topic"
def namespace = new TeamConfig(this).getNameSpace(product)
def kubectl = new Kubectl(this, subscription, namespace)
kubectl.login()
env.serviceBusSecretString = kubectl.getSecret(serviceBusSecret, namespace, "{.data.connectionString}")
}
}
try {
builder.gradle('functional')
} finally {
junit '**/test-results/**/*.xml'
junit 'build/test-results/functional/**/*.xml'
archiveArtifacts 'build/reports/tests/functional/index.html'
publishHTML target: [
allowMissing : true,
alwaysLinkToLastBuild: true,
keepAll : true,
reportDir : "build/reports/tests/functional",
reportFiles : "index.html",
reportName : "JRD Functional Test Report"
]
}
}
afterSuccess('fortify-scan') {
steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/Fortify Scan/**/*'
}
afterSuccess('mutationTest') {
steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/site/serenity/**/*'
steps.archiveArtifacts allowEmptyArchive: true, artifacts: 'build/reports/**/*'
publishHTML target: [
allowMissing : true,
alwaysLinkToLastBuild: true,
keepAll : true,
reportDir : "build/reports/pitest",
reportFiles : "index.html",
reportName : "Mutation Tests Report"
]
}
}