.gitlab-ci.yml

include:
  - project: "infrastructure-engineering-shared/gitlab-ci-templates"
    file:
      - "lint_docker.yaml"
      - "build_and_scan_docker.yaml"
      - "kubectl_commands.yaml"
      - "sast_scanning.yaml"

variables:
  IMAGE: "tulibraries/padigital"
  HARBOR: "harbor.k8s.temple.edu"
  HELM_EXPERIMENTAL_OCI: "1"

.export_variables: &export_variables
  - source .env.prod
  - export VERSION="${DOCKER_IMAGE_VERSION}-${CI_COMMIT_SHORT_SHA}"

before_script:
  - *export_variables

stages:
  - lint
  - build
  - tag
  - deploy

lint:
  extends: .lint_docker
  variables:
    DF: ".docker/app/Dockerfile"
  except:
    - tags
    
build:
  stage: build
  extends: .build_and_scan_image
  variables:
    DF: ".docker/app/Dockerfile --build-arg SECRET_KEY_BASE=$SECRET_KEY_BASE --no-cache"
  except:
    - tags
    
tag:
  stage: tag
  extends: .tag_image
  except:
    - tags

qa_deploy:
  variables:
    IMAGE: $HARBOR/tulibraries/padigital
    RANCHER: rancher-np
    CLUSTER: $DEV_CLUSTER
  stage: deploy
  extends: .helm_setup
  only:
    - main
  script:
    - *export_variables
    - helm pull oci://$HARBOR/tulibraries/charts/padigital --untar
    - helm upgrade padigital oci://$HARBOR/tulibraries/charts/padigital --history-max=5 --namespace=padigital-qa --values padigital/values.yaml --set image.repository=$IMAGE:$VERSION

tag_prod:
  stage: tag
  extends: .tag_image
  variables:
    TAG: prod
  only:
    - tags

tag_release:
  stage: tag
  extends: .tag_image
  variables:
    TAG: $CI_COMMIT_TAG
  only:
    - tags

prod_deploy:
  variables:
    IMAGE: harbor.k8s.temple.edu/tulibraries/padigital
    RANCHER: rancher
    CLUSTER: $PROD_CLUSTER
  stage: deploy
  extends: .helm_setup
  only:
    - tags
  script:
    - helm pull oci://$HARBOR/tulibraries/charts/padigital --version $HELM_VERSION_PROD --untar
    - helm upgrade padigital oci://$HARBOR/tulibraries/charts/padigital --version $HELM_VERSION_PROD --history-max=5 --namespace=padigital-prod --values padigital/values-prod.yaml --set image.repository=$IMAGE:$CI_COMMIT_TAG