Cicd jenkans stage

.gitignore

@@ -0,0 +1,6 @@
+target/
+**/.terraform/*
+*.tfstate.*
+.terraformrc
+terraform.rc
+terraform/.terraform.lock.hcl

Dockerfile

@@ -0,0 +1,8 @@
+FROM tomcat:10.1-jdk17-temurin
+
+RUN rm -rf /usr/local/tomcat/webapps/*
+
+COPY target/vprofile-v2.war /usr/local/tomcat/webapps/ROOT.war
+
+EXPOSE 8080
+CMD ["catalina.sh", "run"]

Jenkinsfile

@@ -1,121 +1,202 @@
+def COLOR_MAP = [
+    'SUCCESS': 'good', 
+    'FAILURE': 'danger',
+]
+
 pipeline {
+    // جعل الـ Agent الافتراضي none لأننا سنحدد لكل Stage الحاوية الخاصة بها
+    agent none 
 
-	agent any
-/*	
-	tools {
-        maven "maven3"
-    }
-*/	
     environment {
-        NEXUS_VERSION = "nexus3"
-        NEXUS_PROTOCOL = "http"
-        NEXUS_URL = "172.31.40.209:8081"
-        NEXUS_REPOSITORY = "vprofile-release"
-	NEXUS_REPO_ID    = "vprofile-release"
-        NEXUS_CREDENTIAL_ID = "nexuslogin"
-        ARTVERSION = "${env.BUILD_ID}"
+        SNAP_REPO = 'vprofile-snapshot'
+        NEXUS_USER = 'admin'
+        NEXUS_PASS = 'admin123'
+        RELEASE_REPO = 'vprofile-release'
+        CENTRAL_REPO = 'vpro-maven-central'
+        NEXUSIP = '172.31.40.75'
+        NEXUSPORT = '8081'
+        NEXUS_GRP_REPO = 'vpro-maven-group'
+        NEXUS_LOGIN = 'nexuslogin'
+        SONARSERVER = 'sonarserver'
+        SONARSCANNER = 'sonarscanner'
+        NEXUSPASS = credentials('nexuspass')
+
+        BASTION_PUBLIC_IP = '54.227.230.251'
     }
-	
-    stages{
+
+    stages {
 
-        stage('BUILD'){
+        // مرحلة الـ Build: تستخدم حاوية مافن الرسمية مع جافا 17
+        stage('Build'){
+            agent {
+                docker { image 'maven:3.9.6-eclipse-temurin-17' }
+            }
             steps {
                 sh 'mvn clean install -DskipTests'
             }
             post {
                 success {
-                    echo 'Now Archiving...'
-                    archiveArtifacts artifacts: '**/target/*.war'
+                    echo "Now Archiving."
+                    archiveArtifacts artifacts: '**/*.war'
                 }
             }
         }
 
-	stage('UNIT TEST'){
+
+
+        stage('Test'){
+            agent {
+                docker { image 'maven:3.9.6-eclipse-temurin-17' }
+            }
             steps {
                 sh 'mvn test'
             }
         }
 
-	stage('INTEGRATION TEST'){
-            steps {
-                sh 'mvn verify -DskipUnitTests'
+        stage('Checkstyle Analysis'){
+            agent {
+                docker { image 'maven:3.9.6-eclipse-temurin-17' }
             }
-        }
-
-        stage ('CODE ANALYSIS WITH CHECKSTYLE'){
             steps {
                 sh 'mvn checkstyle:checkstyle'
             }
-            post {
-                success {
-                    echo 'Generated Analysis Result'
+        }
+
+
+
+
+        stage('SonarCloud Analysis') {
+            agent {
+                docker { 
+                  image 'sonarsource/sonar-scanner-cli:latest' 
+                  args '-u root --entrypoint='
                 }
             }
-        }
+            steps {
+                withCredentials([string(credentialsId: 'sonarcloud', variable: 'SONAR_TOKEN')]) {
+                        sh '''
+                            sonar-scanner \
+                            -Dsonar.organization=jenkans \
+                            -Dsonar.projectKey=jenkans_vprofile-project \
+                            -Dsonar.sources=. \
+                            -Dsonar.host.url=https://sonarcloud.io \
+                            -Dsonar.token=$SONAR_TOKEN \
+                            -Dsonar.java.binaries=target/classes \
+                            -Dsonar.junit.reportsPath=target/surefire-reports/ \
+                            -Dsonar.jacoco.reportsPath=target/jacoco.exec \
+                            -Dsonar.java.checkstyle.reportPaths=target/checkstyle-result.xml \
+                            -Dsonar.exclusions=**/*.js,**/*.ts,**/*.css,**/*.html \
+                            -Dsonar.qualitygate.wait=false
+
+                        '''
+                    }
+                }
+            }
+
+
 
-        stage('CODE ANALYSIS with SONARQUBE') {
-
-		  environment {
-             scannerHome = tool 'sonarscanner4'
-          }
-
-          steps {
-            withSonarQubeEnv('sonar-pro') {
-               sh '''${scannerHome}/bin/sonar-scanner -Dsonar.projectKey=vprofile \
-                   -Dsonar.projectName=vprofile-repo \
-                   -Dsonar.projectVersion=1.0 \
-                   -Dsonar.sources=src/ \
-                   -Dsonar.java.binaries=target/test-classes/com/visualpathit/account/controllerTest/ \
-                   -Dsonar.junit.reportsPath=target/surefire-reports/ \
-                   -Dsonar.jacoco.reportsPath=target/jacoco.exec \
-                   -Dsonar.java.checkstyle.reportPaths=target/checkstyle-result.xml'''
+
+        stage('Build & Push to ECR') {
+            agent {
+                docker {
+                    image 'docker:stable'
+                    // تمرير الـ Docker Socket الخاص بالـ Host لكي نتمكن من تشغيل أوامر docker داخل حاوية الـ aws-cli
+                    args '-v /var/run/docker.sock:/var/run/docker.sock -u root'
+                }
+            }
+            environment {
+                AWS_REGION     = 'us-east-1'
+                AWS_ACCOUNT_ID = '579275327561'
+                ECR_REPO_NAME  = 'app01'
+                IMAGE_TAG      = "${env.BUILD_ID}"
             }
+            steps {
+                withCredentials([[
+                    $class: 'AmazonWebServicesCredentialsBinding', 
+                    credentialsId: 'awsbeancreds',
+                    accessKeyVariable: 'AWS_ACCESS_KEY_ID', 
+                    secretKeyVariable: 'AWS_SECRET_ACCESS_KEY'
+                ]]) {
+                    sh """
+
+                    apk add --no-cache aws-cli
+
+                    aws ecr get-login-password --region ${AWS_REGION} | docker login --username AWS --password-stdin ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com
+
+                    docker build -t ${ECR_REPO_NAME}:${IMAGE_TAG} .
+
+                    docker tag ${ECR_REPO_NAME}:${IMAGE_TAG} ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}:${IMAGE_TAG}
+                    docker tag ${ECR_REPO_NAME}:${IMAGE_TAG} ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}:latest
+
+                    docker push ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}:${IMAGE_TAG}
+                    docker push ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}:latest
+
+                    docker rmi ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}:${IMAGE_TAG}
+                    docker rmi ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}:latest
 
-            timeout(time: 10, unit: 'MINUTES') {
-               waitForQualityGate abortPipeline: true
+                    docker rmi ${ECR_REPO_NAME}:${IMAGE_TAG}
+                    """
+                }
             }
-          }
         }
+
+
 
-        stage("Publish to Nexus Repository Manager") {
+        stage('Ansible Deploy to staging'){
+            agent {
+                docker { 
+                    image 'alpine/ansible:latest'
+                    args '-u root -v /etc/hosts:/etc/hosts'
+                }
+            }
+            environment {
+                NEXUS_SEC_PASS = credentials('nexuspass')
+            }
             steps {
-                script {
-                    pom = readMavenPom file: "pom.xml";
-                    filesByGlob = findFiles(glob: "target/*.${pom.packaging}");
-                    echo "${filesByGlob[0].name} ${filesByGlob[0].path} ${filesByGlob[0].directory} ${filesByGlob[0].length} ${filesByGlob[0].lastModified}"
-                    artifactPath = filesByGlob[0].path;
-                    artifactExists = fileExists artifactPath;
-                    if(artifactExists) {
-                        echo "*** File: ${artifactPath}, group: ${pom.groupId}, packaging: ${pom.packaging}, version ${pom.version} ARTVERSION";
-                        nexusArtifactUploader(
-                            nexusVersion: NEXUS_VERSION,
-                            protocol: NEXUS_PROTOCOL,
-                            nexusUrl: NEXUS_URL,
-                            groupId: pom.groupId,
-                            version: ARTVERSION,
-                            repository: NEXUS_REPOSITORY,
-                            credentialsId: NEXUS_CREDENTIAL_ID,
-                            artifacts: [
-                                [artifactId: pom.artifactId,
-                                classifier: '',
-                                file: artifactPath,
-                                type: pom.packaging],
-                                [artifactId: pom.artifactId,
-                                classifier: '',
-                                file: "pom.xml",
-                                type: "pom"]
-                            ]
-                        );
-                    } 
-		    else {
-                        error "*** File: ${artifactPath}, could not be found";
-                    }
+                withCredentials([sshUserPrivateKey(credentialsId: 'bastion_login', keyFileVariable: 'SSH_KEY', usernameVariable: 'SSH_USER')]) {
+                    sh """
+                    export HOME=${WORKSPACE}
+                    export ANSIBLE_LOCAL_TEMP=${WORKSPACE}/.ansible/tmp
+                    export ANSIBLE_REMOTE_TEMP=/tmp/.ansible/tmp
+                    export ANSIBLE_HOST_KEY_CHECKING=False
+
+                    chmod 400 \${SSH_KEY}
+
+                    apk add --no-cache python3 py3-pip py3-boto3 py3-botocore
+
+                    ansible-galaxy collection install -r ansible/requirements.yml --collections-path \${WORKSPACE}/.ansible/collections --force
+
+                    echo "[defaults]" > ansible.cfg
+                    echo "collections_paths = \${WORKSPACE}/.ansible/collections" >> ansible.cfg
+
+                    cat ansible.cfg
+
+                    echo "===== Available SSM Lookup Plugins ====="
+                    ansible-doc -t lookup -l | grep ssm
+
+                    echo "===== Available AWS Plugins ====="
+                    ansible-doc -t lookup -l | grep amazon
+
+                    ansible-playbook -i ansible/stage.inventory ansible/site.yml \
+                    --user=\${SSH_USER} \
+                    --private-key=\${SSH_KEY} \
+                    --extra-vars "image_tag_env=${env.BUILD_ID} ssh_key_path=\${SSH_KEY}"
+                    """
                 }
             }
         }
+    }
 
-
+    post {
+        always {
+            echo 'Slack Notifications.'
+            slackSend channel: '#jenkins-cicd',
+                color: COLOR_MAP[currentBuild.currentResult],
+                message: "*${currentBuild.currentResult}:* Job ${env.JOB_NAME} build ${env.BUILD_NUMBER} \n More info at: ${env.BUILD_URL}"
+        }
     }
+}
 
 
-}
+// --extra-vars "USER=admin PASS=\${NEXUS_SEC_PASS} nexusip=172.31.40.75 reponame=vprofile-release groupid=QA time=${env.BUILD_TIMESTAMP} build=${env.BUILD_ID} artifactid=vproapp vprofile_version=vproapp-${env.BUILD_ID}-${env.BUILD_TIMESTAMP}.war"
+// -Dsonar.java.binaries=target/test-classes/com/visualpathit/account/controllerTest/