.gitlab-ci.yml

stages:
    - build
    - test
    - regenerate
    - review
    - deploy
    - service

.only-default: &only-default
    rules:
        -   if: '$MIRROR_ONLY == "true"'
            when: never
        -   if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
        -   if: '$CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS'
            when: never
        -   if: '$CI_COMMIT_BRANCH && $CI_PIPELINE_SOURCE != "schedule"'

variables:
    TAG: ${CI_REGISTRY_IMAGE}/${CI_COMMIT_REF_SLUG}:${CI_COMMIT_SHA}-${CI_PIPELINE_ID}
    STOREFRONT_TAG: ${CI_REGISTRY_IMAGE}/${CI_COMMIT_REF_SLUG}:${CI_COMMIT_SHA}-${CI_PIPELINE_ID}-storefront
    HOST: ${CI_COMMIT_REF_SLUG}.${CI_PROJECT_NAME}.${REVIEW_URL}
    HOSTS: ${HOST}, cs.${HOST}
    COMPOSE_PROJECT_NAME: ${CI_PROJECT_NAME}__${CI_COMMIT_REF_SLUG}

before_script:
    - echo ${CI_REGISTRY_PASSWORD} | docker login -u ${CI_REGISTRY_USER} ${CI_REGISTRY} --password-stdin

# Can be removed if mirroring is not needed
include: gitlab/mirror-repository/gitlab-stage.yml

build:
    stage: build
    <<: *only-default
    tags:
        - build
    script:
        - cp -R ./docker/nginx/ ./app/docker/nginx/
        - cd ./app/
        - docker build -f ./docker/php-fpm/Dockerfile --target production --compress -t ${TAG} .
        - docker push ${TAG}
    interruptible: true

build-storefront:
    stage: build
    <<: *only-default
    tags:
        - build
    script:
        - cp ./app/schema.graphql ./storefront/schema.graphql
        - docker build -f ./storefront/docker/Dockerfile
            --target production
            --compress
            --build-arg SENTRY_RELEASE=${CI_COMMIT_SHORT_SHA}
            --build-arg SENTRY_URL=${SENTRY_URL}
            --build-arg SENTRY_ORG=shopsys
            --build-arg SENTRY_PROJECT=${SENTRY_PROJECT}
            --build-arg SENTRY_AUTH_TOKEN=${SENTRY_AUTH_TOKEN}
            -t ${STOREFRONT_TAG} ./storefront
        - docker push ${STOREFRONT_TAG}
    interruptible: true

test:standards-with-graphql-schema-check:
    stage: test
    <<: *only-default
    tags:
        - tests
    needs:
        - build
    variables:
        GIT_STRATEGY: none
    script:
        - docker run -i ${TAG} /bin/bash -c "mv PRODUCTION DEVELOPMENT; npm install format-graphql && ./check-schema.sh && php phing composer-dev standards"
    interruptible: true

test:storefront-standards-with-codegen:
    stage: test
    <<: *only-default
    image: node:20-alpine3.17
    tags:
        - tests
    needs:
        - build-storefront
    before_script:
        - corepack enable
        - corepack prepare --activate pnpm@9.0.5
        - pnpm config set store-dir .pnpm-store
        - apk add --no-cache grep
        - cp ./app/schema.graphql ./storefront/schema.graphql
        - cd ./storefront
    script:
        - pnpm install --frozen-lockfile
        - ./check-next-public-variable.sh
        - ./check-code-gen.sh
        - pnpm run check
    interruptible: true

tests:functional-and-acceptance:
    image: tmaier/docker-compose:latest
    stage: test
    <<: *only-default
    tags:
        - tests
    script:
        - cp -f ./gitlab/docker-compose-ci.yml ./docker-compose.yml
        - docker compose up -d
        - docker compose exec -T php-fpm /bin/bash -c "mv PRODUCTION DEVELOPMENT; php phing composer-dev npm-install-dependencies test-db-create frontend-api-generate-new-keys tests tests-acceptance-build tests-acceptance"
    after_script:
        - mkdir -p codeception/
        - docker cp shopsys-framework-php-fpm:/var/www/html/var/log/codeception/ ./
    artifacts:
        paths:
            - codeception/
        when: on_failure
        expire_in: 1 day
    interruptible: true

test:storefront-acceptance:
    image: tmaier/docker-compose:latest
    stage: test
    <<: *only-default
    tags:
        - tests
#    parallel:
#        matrix:
#            -   GROUP: "authentication"
#            -   GROUP: "cart"
#            -   GROUP: "order"
#            -   GROUP: "transportAndPayment"
#            -   GROUP: "visits"
#            -   GROUP: "others"

    artifacts:
        paths:
            - ./storefront/cypress/videos/
            - ./storefront/cypress/screenshots/
            - ./storefront/cypress/snapshotDiffs/
            - php-fpm-log.txt
            - webserver-log.txt
            - storefront-log.txt
        when: on_failure
        expire_in: 1 day
    script:
        - cp -f ./gitlab/docker-compose-ci.yml ./docker-compose.yml
        - docker compose up -d
        - docker compose exec -T php-fpm php phing -D production.confirm.action=y composer-prod db-create frontend-api-generate-new-keys build-demo-dev-quick error-pages-generate
        - cd storefront
        - GROUP=$GROUP docker compose run cypress
    after_script:
        - docker compose logs php-fpm > php-fpm-log.txt
        - docker compose logs webserver > webserver-log.txt
        - docker compose logs storefront > storefront-log.txt
    interruptible: true

regenerate-storefront-screenshots:
    image: tmaier/docker-compose:latest
    stage: regenerate
    <<: *only-default
    tags:
        - tests
    needs:
        - build
        - build-storefront
    #    parallel:
    #        matrix:
    #            - GROUP: "authentication"
    #            - GROUP: "cart"
    #            - GROUP: "order"
    #            - GROUP: "transportAndPayment"
    #            - GROUP: "visits"
    #            - GROUP: "others"
    artifacts:
        paths:
            - ./storefront/cypress/snapshots/
            - php-fpm-log.txt
            - webserver-log.txt
            - storefront-log.txt
        when: on_failure
        expire_in: 1 day
    script:
        - apk add --no-cache git
        - git config --global user.name "Shopsys Bot"
        - git config --global user.email "bot@shopsys.com"
        - git clean -fdx
        - git checkout "$CI_COMMIT_REF_NAME"
        - cp -f ./gitlab/docker-compose-ci.yml ./docker-compose.yml
        - docker compose up -d
        - docker compose exec -T php-fpm php phing -D production.confirm.action=y composer-prod db-create frontend-api-generate-new-keys build-demo-dev-quick error-pages-generate
        - GROUP=$GROUP docker compose run cypress-regenerate-screenshots
        - git add ./storefront/cypress/snapshots/e2e
        - git status
        - |
            if ! git diff --staged --quiet; then
                if [ -z "$GROUP" ]; then
                    git commit -m "Regenerated Cypress screenshots"
                else
                    git commit -m "Regenerated Cypress screenshots for ${GROUP} group"
                fi
                git fetch origin "$CI_COMMIT_REF_NAME"
                git pull --rebase origin "$CI_COMMIT_REF_NAME"
                git push https://shopsys_bot:$API_TOKEN@gitlab.shopsys.cz/ss6-projects/${CI_PROJECT_NAME}.git "$CI_COMMIT_REF_NAME" --force -v || (echo "Failed to push changes" && git log -n 5 && exit 1)
            else
                echo "No changes in snapshots, skipping commit."
            fi
    after_script:
        - docker compose logs php-fpm > php-fpm-log.txt
        - docker compose logs webserver > webserver-log.txt
        - docker compose logs storefront > storefront-log.txt
    interruptible: true
    when: manual

review:
    stage: review
    environment:
        name: "review/${CI_COMMIT_REF_SLUG}"
        url: https://${CI_COMMIT_REF_SLUG}.${CI_PROJECT_NAME}.${REVIEW_URL}
        on_stop: review:stop
        auto_stop_in: 1 week
    needs:
        - build
        - build-storefront
    <<: *only-default
    artifacts:
        paths:
            - schema.graphql
    script:
        - cp -f ./gitlab/docker-compose-ci-review.yml ./docker-compose.yml
        - chmod +x ./gitlab/scripts/set-urls-for-review.sh && source ./gitlab/scripts/set-urls-for-review.sh
        - convertToTraefikHosts "$HOSTS"
        - setDomainsToDockerCompose
        - docker compose down --rmi all -v --remove-orphans
        - chmod +x ./gitlab/scripts/rabbitmq-vhost.sh && ./gitlab/scripts/rabbitmq-vhost.sh create ${COMPOSE_PROJECT_NAME}
        - docker compose up -d
        - setUrlsToDomainsUrls
        - docker compose exec -T php-fpm php phing -D production.confirm.action=y clean db-create build-review-ci
        - docker compose exec -T php-consumer php phing -D production.confirm.action=y frontend-api-generate-new-keys
        - printDomains
    tags:
        - review
    interruptible: true

review:stop:
    stage: review
    variables:
        GIT_STRATEGY: none
    needs:
        - build
    <<: *only-default
    tags:
        - review
    script:
        - cp -f ./gitlab/docker-compose-ci-review.yml ./docker-compose.yml
        - docker compose exec -T php-fpm php phing -D production.confirm.action=y elasticsearch-index-delete
        - docker compose down --rmi all -v --remove-orphans
        - chmod +x ./gitlab/scripts/rabbitmq-vhost.sh && ./gitlab/scripts/rabbitmq-vhost.sh remove ${COMPOSE_PROJECT_NAME}
        - /home/ci/clean.sh ${COMPOSE_PROJECT_NAME}
    rules:
        -   if: '$MIRROR_ONLY == "true"'
            when: never
        -   if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
            when: manual
            allow_failure: true
        -   if: '$CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS'
            when: never
        -   if: '$CI_COMMIT_BRANCH && $CI_PIPELINE_SOURCE != "schedule"'
            when: manual
            allow_failure: true
    environment:
        name: review/${CI_COMMIT_REF_SLUG}
        action: stop

repository:clean:
    stage: service
    image: dwdraju/alpine-curl-jq
    tags:
        - service
    rules:
        -   if: '$CI_PIPELINE_SOURCE == "schedule"'
    before_script:
        - chmod +x ./gitlab/scripts/repository-clean.sh
    script:
        - ./gitlab/scripts/repository-clean.sh

security:check:
    stage: service
    tags:
        - service
    needs:
        - build
    rules:
        -   if: '$CI_COMMIT_BRANCH == "master" && $CI_PIPELINE_SOURCE != "schedule"'
    script:
        - docker run -i ${TAG} composer security-check
        - docker run -i ${STOREFRONT_TAG} pnpm audit --audit-level=high --ignore-registry-errors

service:merge_request:
    stage: service
    image: dwdraju/alpine-curl-jq
    tags:
        - service
    needs: []
    rules:
        -   if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
    before_script:
        - chmod +x ./gitlab/scripts/cancel-previous-pipelines.sh
        - chmod +x ./gitlab/scripts/set-review-url-to-jira.sh
    script:
        - ./gitlab/scripts/cancel-previous-pipelines.sh
        - ./gitlab/scripts/set-review-url-to-jira.sh

.deploy: &deploy
    image:
        name: shopsys/kubernetes-buildpack:1.2
    stage: deploy
    needs:
        - build
        - build-storefront
    tags:
        - deploy
    rules:
        -   if: '$MIRROR_ONLY == "true"'
            when: never
        -   if: '$CI_PIPELINE_SOURCE == "schedule"'
            when: never
    script:
        - cd ./app/
        - docker create -ti --name image ${TAG} bash
        - docker cp image:/var/www/html/var/ ./
        - echo "${KUBE_CONFIG}" > /root/.kube/config
        - chmod +x ./deploy/deploy-project.sh && ./deploy/deploy-project.sh deploy

deploy:production:
    <<: *deploy
    resource_group: deploy_production
    variables:
        KUBE_CONFIG: ${KUBE_CONFIG_PROD}
    rules:
        -   if: '$MIRROR_ONLY == "true"'
            when: never
        -   if: '$CI_PIPELINE_SOURCE == "schedule"'
            when: never
        -   if: '$CI_COMMIT_BRANCH == "master"'
            allow_failure: false
        -   if: '$CI_COMMIT_BRANCH =~ /^master-.*$/'
            when: manual
            allow_failure: false
    environment:
        name: production
        url: https://${DOMAIN_HOSTNAME_1}
        kubernetes:
            namespace: ${PROJECT_NAME}

deploy:devel:
    <<: *deploy
    resource_group: deploy_devel
    variables:
        KUBE_CONFIG: ${KUBE_CONFIG_DEVEL}
    rules:
        -   if: '$MIRROR_ONLY == "true"'
            when: never
        -   if: '$CI_PIPELINE_SOURCE == "schedule"'
            when: never
        -   if: '$CI_COMMIT_BRANCH == "devel" || $CI_COMMIT_BRANCH =~ /^devel-.*$/'
    environment:
        name: devel
        url: https://${DOMAIN_HOSTNAME_1}
        kubernetes:
            namespace: ${PROJECT_NAME}

deploy:alpha:
    <<: *deploy
    resource_group: deploy_alpha
    variables:
        KUBE_CONFIG: ${KUBE_CONFIG_DEVEL}
    rules:
        -   if: '$CI_PIPELINE_SOURCE == "schedule"'
            when: never
        -   if: '$CI_COMMIT_BRANCH == "alpha" || $CI_COMMIT_BRANCH =~ /^alpha-.*$/'
    environment:
        name: devel-alpha
        url: https://${DOMAIN_HOSTNAME_1}
        kubernetes:
            namespace: ${PROJECT_NAME}
    after_script:
        -   sleep 20
        -   RUNNING_WEBSERVER_PHP_FPM_POD=$(kubectl get pods --namespace=${PROJECT_NAME} --field-selector=status.phase=Running -l app=webserver-php-fpm -o=jsonpath='{.items[0].metadata.name}')
        -   kubectl exec ${RUNNING_WEBSERVER_PHP_FPM_POD} --namespace=${PROJECT_NAME} -- php ./bin/console doctrine:query:sql "UPDATE setting_values SET value='Db4tLxuck2' WHERE name='feedHash'"

test:gatling:
    stage: test
    image:
        name: shopsys/kubernetes-buildpack:1.2
    tags:
        - tests
    variables:
        GATLING_BASE_URL: ${GATLING_BASE_URL}
        GATLING_PAGE_TEST_DURATION: '10'
        GATLING_API_TEST_DURATION: '10'
        GATLING_PAGE_USERS_COUNTS_LVL1: '2'
        GATLING_PAGE_USERS_COUNTS_LVL2: '10'
        GATLING_PAGE_USERS_COUNTS_LVL3: '15'
        GATLING_RESULTS: ''
        GATLING_STRESS_TEST_DURATION: '60'
        GATLING_STRESS_TEST_USERS_COUNTS: '100'
    needs: []
    rules:
        - if: '$CI_PIPELINE_SOURCE == "schedule"'
          when: never
        - if: '$CI_COMMIT_BRANCH == "master" || $CI_COMMIT_BRANCH == "devel"'
          when: manual
    allow_failure: true
    before_script:
        - chmod +x ./gatling/run.sh
    script:
        - cd ./gatling
        - ./run.sh
    artifacts:
        paths:
            - gatling/results
        when: always
        expire_in: 1 day