stages:
  - validate
  - test
  - deploy

validate:
  stage: validate
  variables:
    # TODO: get rid of GIT_SSL_NO_VERIFY as soon as we switch to letsencrypt wildcard certs
    GIT_SSL_NO_VERIFY: 'true'
  before_script:
    - bin/prepare_test_env.sh -g -s
    - bin/get_formulas.py -c -d /srv/formula -s --clone-from 'https://gitlab.infra.opensuse.org/saltstack-formulas' --clone-branch production
  script: bin/test_validate.sh
  tags:
    - docker

validate_show_highstate_against_upstream_formulas:
  stage: validate
  before_script:
    - bin/prepare_test_env.sh -g -s
    - bin/get_formulas.py -c -d /srv/formula -s
  script: bin/test_show_highstate.sh
  allow_failure: true
  except:
    - production@infra/salt
  tags:
    - docker

test_nginx:
  stage: test
  variables:
    # TODO: get rid of GIT_SSL_NO_VERIFY as soon as we switch to letsencrypt wildcard certs
    GIT_SSL_NO_VERIFY: 'true'
  before_script:
    - bin/prepare_test_env.sh -g -p nginx
    - cp -a /etc/nginx /etc/nginx_orig
    - bin/get_formulas.py -c -d /srv/formula -s --clone-from 'https://gitlab.infra.opensuse.org/saltstack-formulas' --clone-branch production -f nginx
  script: bin/test_nginx.sh
  tags:
    - docker

deploy_job:
  stage: deploy
  script: sudo salt-call event.fire_master $CI_DEPLOY_PASSWORD salt/fileserver/gitfs/update
  only:
    - production@infra/salt
  tags:
    - shell