Jenkinsfile

pipeline {
    agent any

    tools {
        jdk 'JDK 17'
        maven 'maven 3.9.8'
    }

    environment {
        GIT_REPO = 'https://github.com/SubbuTechOps/spring-petclinic.git'
        GIT_BRANCH = 'develop'
        GIT_CREDENTIALS_ID = 'github-pat'

        SONARQUBE_HOST_URL = 'http://13.201.52.196:9000/'
        SONARQUBE_PROJECT_KEY = 'PetClinic'
        SONARQUBE_TOKEN = credentials('sonar-credentials')

        AWS_ACCOUNT_ID = '017820683847'
        ECR_REPO_URL = '017820683847.dkr.ecr.us-east-1.amazonaws.com/petclinic-dev'
        AWS_REGION = 'ap-south-1'

        EKS_CLUSTER_NAME = 'demo-cluster'
        HELM_RELEASE_NAME = 'petclinic'
        MYSQL_RELEASE_NAME = 'mysql'
        HELM_NAMESPACE = 'petclinic-dev'
        MYSQL_NAMESPACE = 'mysql-dev'
        HELM_RELEASE_NAME_DB = 'mysql-release'

        TRIVY_DB_CACHE = "/var/lib/jenkins/trivy-db"
    }

    stages {
        stage('Checkout Code') {
            steps {
                git branch: "${GIT_BRANCH}", url: "${GIT_REPO}", credentialsId: "${GIT_CREDENTIALS_ID}"
                stash name: 'source-code', includes: '**/*'
            }
        }

        stage('Trivy Scan Repository') {
            steps {
                sh """
                mkdir -p ${TRIVY_DB_CACHE}
                trivy fs --cache-dir ${TRIVY_DB_CACHE} --exit-code 1 --severity HIGH,CRITICAL .
                """
            }
        }

        stage('Run Unit Tests') {
            steps {
                sh 'mvn test -DskipTests=false'
            }
        }

        stage('Generate JaCoCo Coverage Report') {
            steps {
                sh 'mvn jacoco:report'
            }
        }

        stage('SonarQube Analysis') {
            steps {
                withSonarQubeEnv('sonar-server') {
                    sh """
                    mvn sonar:sonar \
                    -Dsonar.projectKey=${SONARQUBE_PROJECT_KEY} \
                    -Dsonar.host.url=${SONARQUBE_HOST_URL} \
                    -Dsonar.login=${SONARQUBE_TOKEN}
                    """
                }
            }
        }

        stage('Build and Push Docker Image') {
            steps {
                script {
                    def COMMIT_HASH = sh(script: 'git rev-parse --short HEAD', returnStdout: true).trim()
                    env.IMAGE_TAG = "${COMMIT_HASH}-${BUILD_NUMBER}"
                    env.DOCKER_IMAGE = "${ECR_REPO_URL}:${IMAGE_TAG}"

                    sh """
                    docker build -t ${DOCKER_IMAGE} .
                    aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin ${ECR_REPO_URL}
                    docker push ${DOCKER_IMAGE}
                    """
                }
            }
        }

        stage('Trivy Scan Docker Image') {
            steps {
                sh """
                trivy image --exit-code 1 --severity HIGH,CRITICAL ${DOCKER_IMAGE}
                """
            }
        }
        
    stage('Install/Upgrade MySQL') {
    steps {
        script {
            withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: 'aws-access']]) {
                sh """
                    aws eks update-kubeconfig --region ${AWS_REGION} --name ${EKS_CLUSTER_NAME}
                    
                    # Check if MySQL deployment exists and is running
                    if ! kubectl get deployment mysql-db -n ${HELM_NAMESPACE} > /dev/null 2>&1; then
                        echo "MySQL deployment not found. Installing..."
                        helm upgrade --install mysql-release ./petclinic-chart \
                            --namespace ${HELM_NAMESPACE} \
                            --create-namespace \
                            -f ./petclinic-chart/values.yaml \
                            --set app.enabled=false \
                            --set mysql.enabled=true
                    else
                        echo "MySQL deployment already exists and running. Skipping deployment."
                    fi
                """
            }
        }
    }
}

stage('Check MySQL Health') {
    steps {
        script {
            withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: 'aws-access']]) {
                sh """
                    aws eks update-kubeconfig --region ${AWS_REGION} --name ${EKS_CLUSTER_NAME}
                    kubectl wait --namespace ${HELM_NAMESPACE} --for=condition=ready pod -l app=mysql --timeout=300s
                """
            }
        }
    }
}

stage('Deploy PetClinic Application') {
    steps {
        script {
            withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: 'aws-access']]) {
                sh """
                    aws eks update-kubeconfig --region ${AWS_REGION} --name ${EKS_CLUSTER_NAME}
                    
                    # Get current image tag from deployment if it exists
                    CURRENT_TAG=\$(kubectl get deployment petclinic -n ${HELM_NAMESPACE} -o jsonpath='{.spec.template.spec.containers[0].image}' 2>/dev/null | cut -d ':' -f2 || echo "")
                    
                    if [ "\$CURRENT_TAG" != "${IMAGE_TAG}" ]; then
                        echo "New version detected (Current: \$CURRENT_TAG, New: ${IMAGE_TAG}). Deploying updates..."
                        helm upgrade --install petclinic ./petclinic-chart \
                            --namespace ${HELM_NAMESPACE} \
                            -f ./petclinic-chart/values.yaml \
                            --set app.image.tag=${IMAGE_TAG} \
                            --set mysql.enabled=false
                    else
                        echo "Application is already running with the latest version (${IMAGE_TAG}). Skipping deployment."
                    fi
                """
            }
        }
    }
}

stage('Check PetClinic Health') {
    steps {
        script {
            withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: 'aws-access']]) {
                sh """
                    aws eks update-kubeconfig --region ${AWS_REGION} --name ${EKS_CLUSTER_NAME}
                    kubectl wait --namespace ${HELM_NAMESPACE} --for=condition=ready pod -l app=petclinic --timeout=300s
                """
            }
        }
    }
}
       
    }

    post {
        always {
            cleanWs()
            sh """
            docker image prune -f
            docker container prune -f
            """
        }
    }
}