JenkinsfileKubernetes

@Library('Shared') _

pipeline {
    agent { label 'gcp' }

    environment {
        scannerHome = tool 'sonar'
    }

    stages {

        stage('Clean Workspace') {
            steps {
                cleanWs()
            }
        }

        stage('Clone from GitHub') {
            steps {
                script {
                    git_checkout("https://github.com/visheshvishu/docker-springboot-microservices.git", "main")
                    sh 'rm -rf frontend'
                }
            }
        }

        stage('Maven Build') {
            steps {
                sh 'mvn clean install'
            }
        }

        stage('SonarQube Scan') {
            steps {
                script {
                    sonar_scan("$ScannerHome", "sonar", "springboot-app", "springboot-app", "v1", ".")
                }
            }
        }

      

        stage('Quality Gate') {
            steps {
                script {
                    waitForQualityGate abortPipeline: false, credentialsId: 'sonar'
                }
            }
        }    
        
        stage('OWASP Dependency Check') {
            steps {
                dependencyCheck additionalArguments: ''' 
                    -o './owasp-report'
                    -s './'
                    -f 'ALL' 
                    --prettyPrint''', odcInstallation: 'owasp'
        
        dependencyCheckPublisher pattern: 'owasp-report/dependency-check-report.xml'
            }
        }
        
        stage('Build Docker Image') {
            steps {
                script {
                  def services = [
                'admin-server',
                'config-server',
                'eureka-server',
                'oauth2-server',
                'customer-service',
                'order-service',
                'zuul-server'
            ]

            for (service in services) {
                def imageName = "${service}"
                def contextDir = "${service}"
                
                docker_build(imageName, 'latest', contextDir)
                 }
            }
        }
      }

        stage('Trivy Scan Docker Images') {
    steps {
        script {
            def services = [
                'admin-server',
                'config-server',
                'eureka-server',
                'oauth2-server',
                'customer-service',
                'order-service',
                'zuul-server'
            ]

            sh 'mkdir -p trivy-reports' // Create folder if not exists

            for (service in services) {
                def imageName = "${service}:latest"

                echo "Scanning image ${imageName} with Trivy..."
                sh """
                    trivy image --exit-code 1 --severity CRITICAL,HIGH --format table -o trivy-reports/trivy-${service}.txt ${imageName} || true
                """
            }

            archiveArtifacts artifacts: 'trivy-reports/*.txt', fingerprint: true
        }
    }
}

        
         stage('push to dockerhub') {
            steps {
                script{
                      
                    def services = [
                'admin-server',
                'config-server',
                'eureka-server',
                'oauth2-server',
                'customer-service',
                'order-service',
                'zuul-server'
            ]

            for (service in services) {
                def imageName = "${service}"
                     docker_push(imageName, 'visheshvishu', 'dockerhub', 'latest')
                }
            }        
        }
    }


       stage('Deploy with Kubernetes') {
    steps {
        script {
            // Optional: Cleanup previous deployment if needed
            sh 'kubectl delete -f k8s/ --ignore-not-found=true'

            // Apply all Kubernetes manifests in the k8s folder
            sh 'kubectl apply -f k8s/'

            // Optionally wait for pods to be ready
            sh '''
                kubectl rollout status deployment/admin-server -n default
                kubectl rollout status deployment/config-server -n default
                kubectl rollout status deployment/eureka-server -n default
                kubectl rollout status deployment/oauth2-server -n default
                kubectl rollout status deployment/customer-service -n default
                kubectl rollout status deployment/order-service -n default
                kubectl rollout status deployment/zuul-server -n default
            '''
        }
    }
}

    post {
        success {
            emailext(
                subject: "SUCCESS: Job '${env.JOB_NAME} [${env.BUILD_NUMBER}]'",
                body: "Job Succeeded: ${env.BUILD_URL}",
                to: 'vishesh.gupta@oodles.io'
            )
        }
        failure {
            emailext(
                subject: "FAILURE: Job '${env.JOB_NAME} [${env.BUILD_NUMBER}]'",
                body: "Job Failed: ${env.BUILD_URL}",
                to: 'vishesh.gupta@oodles.io'
            )
        }
    }
}