.gitlab-ci.yml

image: docker.anders.fi/anders/ci-configuration:v3

include:
  - local: '.gitlab-ci-base-template.yml'

variables:
  BOOTSTRAP_IMAGE: ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA}
  DEVELOPMENT_IMAGE: ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA}-development

stages:
  - build-bootstrap
  - build
  - test
  - post-test
  - release

.code-tests:
  image: ${DEVELOPMENT_IMAGE}
  stage: test
  tags:
    - light
  only:
    - merge_requests
    - master
    - v3

build-bootstrap:
  extends: .build
  stage: build-bootstrap
  only:
    - merge_requests
    - master
    - /^r-[\d]+$/
    - v3
  variables:
    # Don't add any additional tags
    DOCKER_IMAGE_TAGS: ""
    # Don't build development image
    DOCKER_TEST_IMAGE_STAGE: ""

build:
  image: ${BOOTSTRAP_IMAGE}
  extends: .build
  only:
    - merge_requests
    - master
    - /^r-[\d]+$/
    - v3
  variables:
    # Don't add any additional tags
    DOCKER_IMAGE_TAGS: ""

test-image:
  extends: .docker-image-scan
  allow_failure: true
  variables:
    # Scan production image instead of develoment image
    DEVELOPMENT_IMAGE: ${CI_REGISTRY_IMAGE}:${CI_COMMIT_SHA}-production

sonarqube:
  extends: .sonarqube
  needs: ["test","test-sast"]
  dependencies:
    - test
    - test-sast

pages:
  stage: release
  image: ${DEVELOPMENT_IMAGE}
  script:
    - make docs
    - mv -vi docs/_build/html public/
  only:
    - v3
  artifacts:
    paths:
      - public

release-local:
  stage: release
  extends: .build
  only:
    - v3

release-dockerhub:
  stage: release
  extends: .build
  variables:
    CONTAINER_REGISTRY: index.docker.io
    CONTAINER_REGISTRY_USER: ${DOCKERHUB_REGISTRY_USER}
    CONTAINER_REGISTRY_PASSWORD: ${DOCKERHUB_REGISTRY_PASSWORD}
    CONTAINER_REGISTRY_REPO: andersinnovations/devops
  only:
    - v2

test-helm:
  extends: .test
  script:
    - make helm-tests

test-style:
  extends: .code-tests
  script:
    - make style-tests

test-typing:
  extends: .code-tests
  script:
    - make typing-tests

test-packages:
  extends: .code-tests
  script:
    - make package-tests
  allow_failure: true

test-docs:
  extends: .code-tests
  script:
    - make docs
  artifacts:
    paths:
      - docs/_build
    expire_in: 1 week

test-sast:
  extends: .code-tests
  script:
    - make sast-tests
  artifacts:
    when: always
    paths:
      - bandit_report.json
    expire_in: 1 week
  allow_failure: true

test:
  extends: .test
  image: ${BOOTSTRAP_IMAGE}
  parallel:
    matrix:
      - PROVIDER: gke
        K3S_VERSION:
          - 1.24.9
          - 1.27.7
          - 1.28.3
  artifacts:
    expire_in: 1 week
    paths:
      - pytest.xml
      - coverage.xml
    when: always
  only:
    - merge_requests
    - v3

before_script:
  - git config --global url."https://gitlab-ci-token:${CI_JOB_TOKEN}@git.anders.fi/".insteadOf "git@git.anders.fi:"
  - export PATH="$PATH:/app"
  - source utils/shell_utils.sh
  - set_docker_host
  - echo 127.0.0.1 docker-registry >> /etc/hosts