News-Dashboard-Develop-Full-Jenkinsfile

node('master') {
    stage('Code Quality') {
        echo "Running SonarQube static code analysis."
        openshiftBuild bldCfg: 'frontend-sonar', showBuildLogs: 'true'
    }

  stage('Dependency Security Check') {
        echo "Running Snyk analysis of dependencies"
        openshiftBuild bldCfg: 'frontend-snyk', showBuildLogs: 'true'
    }

    stage('Build Image') {
        echo "Building..."
        openshiftBuild bldCfg: 'news-dashboard-static', showBuildLogs: 'true'
        openshiftTag destStream: 'news-dashboard-static', verbose: 'true', destTag: 'DEVELOP-$BUILD_ID', srcStream: 'news-dashboard-static', srcTag: 'latest'
    }

    stage('Deploy on Dev') {
        echo "Deploying to dev..."
        openshiftTag destStream: 'news-dashboard-static', verbose: 'true', destTag: 'dev', srcStream: 'news-dashboard-static', srcTag: 'DEVELOP-$BUILD_ID'
        // Sleeping for a while to wait deployment completes
	    sh 'sleep 1m'
    }
}

//See https://github.com/jenkinsci/kubernetes-plugin
podTemplate(label: 'owasp-zap', name: 'owasp-zap', serviceAccount: 'jenkins', cloud: 'openshift', containers: [
  containerTemplate(
    name: 'jnlp',
    image: '172.50.0.2:5000/openshift/jenkins-slave-zap',
    resourceRequestCpu: '500m',
    resourceLimitCpu: '1000m',
    resourceRequestMemory: '3Gi',
    resourceLimitMemory: '4Gi',
    workingDir: '/tmp',
    command: '',
    args: '${computer.jnlpmac} ${computer.name}'
  )
]) {
     node('owasp-zap') {
       stage('ZAP Security Scan') {
         dir('/zap') {
                def retVal = sh returnStatus: true, script: '/zap/zap-baseline.py -r baseline.html -t https://dev.dashboard.news.gov.bc.ca/'
                publishHTML(target: [allowMissing: false, alwaysLinkToLastBuild: false, keepAll: true, reportDir: '/zap/wrk', reportFiles: 'baseline.html', reportName: 'ZAP Baseline Scan', reportTitles: 'ZAP Baseline Scan'])
                echo "Return value is: ${retVal}"
         }
       }
     }
}

stage('Deploy on Test') {
  input "Deploying to test?"
  node('master') {
    openshiftTag destStream: 'news-dashboard-static', verbose: 'true', destTag: 'test', srcStream: 'news-dashboard-static', srcTag: 'dev'
  }
}