image: registry.opensuse.org/opensuse/infrastructure/containers/heroes-salt-testing:latest

stages:
  - test
  - deploy

.test_mr:
  rules:
    - if: $CI_PIPELINE_SOURCE == 'merge_request_event' || $CI_COMMIT_BRANCH == 'production'

.test_common:
  extends:
    - .test_mr
  stage: test
  tags:
    - docker

.test_artifacts:
  artifacts:
    when: always
    paths:
      - '*.txt'

lint:
  extends:
    - .test_common
  image: registry.opensuse.org/opensuse/infrastructure/containers_tumbleweed/heroes-salt-validation:latest
  script:
    - bin/set_gitlab_ci_safe_directory.sh
    - bin/lint.sh

validate:
  extends:
    - .test_common
  image: registry.opensuse.org/opensuse/infrastructure/containers_tumbleweed/heroes-salt-validation:latest
  script:
    - bin/set_gitlab_ci_safe_directory.sh
    - bin/test_validate.sh

show_highstate:
  extends:
    - .test_common
    - .test_artifacts
  before_script:
    - bin/prepare_test_env.sh -g -o Leap,15,5 -s
  script: bin/test_show_highstate.sh

test_haproxy:
  extends:
    - .test_common
    - .test_artifacts
  image: registry.opensuse.org/opensuse/infrastructure/containers/heroes-salt-testing-haproxy:latest
  before_script:
    - bin/prepare_test_env.sh -g -s -n
    - bin/replace_secrets.sh
  script: bin/test_haproxy.sh
#     changes:
#       - bin/test_haproxy.sh
#       - pillar/cluster/*/*
#       - pillar/common/haproxy/*
#       - salt/profile/proxy/*
#       - salt/role/proxy*

test_nftables:
  extends:
    - .test_common
  image: registry.opensuse.org/opensuse/infrastructure/containers/heroes-salt-testing-nftables:latest
  script: bin/test_nftables.pl

test_prometheus:
  extends:
    - .test_common
  image: registry.opensuse.org/opensuse/infrastructure/containers/heroes-salt-testing-prometheus:latest
  before_script: bin/prepare_test_env.sh -g -s -n
  script: bin/test_prometheus.sh
  artifacts:
    when: always
    paths:
      - '*.txt'
      - rules/*.txt

# Dynamically generated jobs
prepare_includes:
  extends:
    - .test_mr
  script: bin/render_gitlab_ci_includes.py -w
  artifacts:
    paths:
      - .gitlab-ci.includes/*.yml

test_highstate:
  extends:
    - .test_mr
  needs:
    - prepare_includes
  trigger:
    include:
      - artifact: .gitlab-ci.includes/test_highstate.yml
        job: prepare_includes
    strategy: depend

test_nginx:
  extends:
    - .test_mr
  needs:
    - prepare_includes
  trigger:
    include:
      - artifact: .gitlab-ci.includes/test_nginx.yml
        job: prepare_includes
    strategy: depend

.deploy:
  rules:
    - if: $CI_COMMIT_BRANCH == 'production'
  stage: deploy
  tags:
    - docker

sync:
  extends: .deploy
  script:
    - "rsync -a --delete --super --owner --group --chown=477:479 --chmod='u=rwX,g=rX,o=' $PWD/ rsync://saltpush@witch1.infra.opensuse.org:873/salt-push/"

deploy:
  extends: .deploy
  image: registry.opensuse.org/opensuse/infrastructure/containers_tumbleweed/heroes-salt-deployment:latest
  needs:
    - sync
  script:
    - bin/set_gitlab_ci_safe_directory.sh
    - bin/deploy.py --mode test --no-mine-update --state-verbose=False