Jenkinsfile

#!/usr/bin/env groovy
/*
Copyright 2018 Google LLC

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    https://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

// Reference: https://github.com/jenkinsci/kubernetes-plugin
// set up pod label and GOOGLE_APPLICATION_CREDENTIALS (for Terraform)
def label = "k8s-infra"
def containerName = "k8s-node"
def GOOGLE_APPLICATION_CREDENTIALS = '/home/jenkins/dev/jenkins-deploy-dev-infra.json'
def jenkins_container_version = env.JENKINS_CONTAINER_VERSION

podTemplate(label: label,
    containers: [
        containerTemplate(name: "${containerName}",
            image: "gcr.io/pso-helmsman-cicd/jenkins-k8s-node:${jenkins_container_version}",
            command: 'tail -f /dev/null',
            resourceRequestCpu: '1000m',
            resourceLimitCpu: '2000m',
            resourceRequestMemory: '1Gi',
            resourceLimitMemory: '2Gi'
        )
    ],
    volumes: [secretVolume(mountPath: '/home/jenkins/dev',
        secretName: 'jenkins-deploy-dev-infra'
    )]
) {
    node(label) {
        try {
            // set env variable GOOGLE_APPLICATION_CREDENTIALS for Terraform
            env.GOOGLE_APPLICATION_CREDENTIALS = GOOGLE_APPLICATION_CREDENTIALS

            stage('Setup') {
                container(containerName) {
                    // checkout code from scm i.e. commits related to the PR
                    checkout scm

                    // Setup gcloud service account access
                    sh "gcloud auth activate-service-account --key-file=${GOOGLE_APPLICATION_CREDENTIALS}"
                    sh "gcloud config set compute/zone ${env.CLUSTER_ZONE}"
                    sh "gcloud config set core/project ${env.PROJECT_ID}"
                    sh "gcloud config set compute/region ${env.REGION}"
                }
            }
            stage('Lint') {
                container(containerName) {
                    sh "make lint"
                }
            }
            stage('Create') {
                container(containerName) {
                    sh 'make setup-project'
                    sh 'make tf-apply'
                    sh 'gcloud compute scp  --recurse terraform/modules/instance/manifests jenkins-deploy-dev-infra@gke-application-security-bastion:'
                    sh 'gcloud compute scp  --recurse terraform/modules/instance/scripts jenkins-deploy-dev-infra@gke-application-security-bastion:'
                    sh 'gcloud compute ssh jenkins-deploy-dev-infra@gke-application-security-bastion --command \'source /etc/profile\''
                    sh 'gcloud compute ssh jenkins-deploy-dev-infra@gke-application-security-bastion --command \'scripts/deploy.sh\''
                }
            }
            stage('Validate') {
                container(containerName) {
                    sh 'gcloud compute ssh jenkins-deploy-dev-infra@gke-application-security-bastion --command \'scripts/validate.sh\''
                }
            }
        } catch (err) {
            // if any exception occurs, mark the build as failed
            // and display a detailed message on the Jenkins console output
            currentBuild.result = 'FAILURE'
            echo "FAILURE caught echo ${err}"
            throw err
        } finally {
            stage('Teardown') {
                container(containerName) {
                    sh 'gcloud compute ssh jenkins-deploy-dev-infra@gke-application-security-bastion --command \'scripts/teardown.sh\''
                    sh "make tf-destroy"
                }
            }
        }
    }
}