Jenkinsfile

#!groovy

@Library('utils')

import no.evry.Docker
import no.evry.Config

node('jenkins-docker-3') {
  // Make a clean workspace for the new build to prevent multiple concurrent
  // builds from polluting the others working directory.
  ws {

    // Wrap everything in a try/catch block in order to trap exceptions and
    // process them before exiting.
    try {

      // Jenkins pipelines are "dumb" in that regards that it does not do
      // anything unless you explicitly tells it so. Here we checkout the
      // repository in order to the source code into the workspace.
      stage('Checkout')
        {
          checkout scm
        }

      // Configure which branches should get the following configurations. The
      // configurations are stored in the /build directory and controles the
      // Jenkins build and Kubernetes deployment.
      config = new Config(this).defaultProperties()

      def nodeImage = 'node:8-alpine'
      def nodeArgs = [
        '-v /home/jenkins/.cache/yarn:/home/node/.cache/yarn'
      ].join(' ')

      // Install all packge dependencies specificed in package.json. We also
      // need to install development dependencies in order to build and test the
      // application. We will remove these later in the "Prune" stage.
      stage('Install') {
        docker.image(nodeImage).inside(nodeArgs) {
          sh 'cd app && yarn install --development'
        }
      }

      // Speed up builds by running multiple tasks in parallel. Keep in mind
      // that these tasks can not depend on each other and should not modify the
      // sharedstate of the workspace.
      parallel (

        // nsp (Node Security Project) is a security scanner for Node.js
        // packages. It will check against it's database for known
        // vulnerabilities and block any builds containing vulnerable packages.
        "nsp": {
          docker.image(nodeImage).inside(nodeArgs) {
            sh 'cd app && yarn run nsp check'
          }
        },

        // Syntax linting checks the style of the source code to make sure the
        // code follows a common standard. ESLint is the recommended tool for
        // all Node.js and JavaScript projects.
        "lint" : {
          docker.image(nodeImage).inside(nodeArgs) {
            sh 'cd app && yarn run lint'
          }
        },
      )

      // Remove all development packages such that the node_modules directory
      // only contains packages needed for running the application in
      // production. This is to save space and ensure identical packages in
      // Jenkins and in production.
      stage('Prune') {
        docker.image(nodeImage).inside(nodeArgs) {
          sh 'cd app && yarn install --production'
        }
      }

      // Build the Docker Image, image tag should be unique to the build to
      // prevent building over other images. See the Dockerfile for how the
      // Docker Image is otherwise constructed.
      stage('Docker Build') {
        Docker doc = new Docker(this, [nameOnly: true])

        config.DOCKER_TAG = doc.buildTag()
        config.DOCKER_IMAGE = doc.image(config.DOCKER_REGISTRY)

        image = docker.build(doc.image())
      }

      // Push the newly built Docker Image to a Docker Registry of your choosing
      // in order to reach it later in the deployment stage.
      if (env.BRANCH_NAME == 'master') {
        stage('Docker Push') {
          docker.withRegistry("https://${config.DOCKER_REGISTRY}", config.DOCKER_REGISTRY) {
            image.push(config.DOCKER_TAG)
          }
        }
      }

      // Deploy the application to Kubernetes. See the Jenkins Utility repo for
      // more information about the kubernetesDeploy function and it's configs.
      stage("Deploy ${config.K8S_NAMESPACE}@${config.K8S_CLUSTER}") {
        boolean  dryrun = env.BRANCH_NAME != 'master'

        kubernetesDeploy(config, [k8sCluster: config.K8S_CLUSTER, dryrun: dryrun])
      }

    // Catch abort build interrupts and possible handle them differently. They
    // should not be reported as build failures to Slack etc.
    } catch (InterruptedException e) {
      throw e

    // Catch all build failures and report them to Slack etc here.
    } catch (e) {
      throw e

    // Clean up the workspace before exiting. Wait for Jenkins' asynchronous
    // resource disposer to pick up before we close the connection to the worker
    // node.
    } finally {
      step([$class: 'WsCleanup'])
      sleep 10
    }
  }
}