.gitlab-ci.yml

stages:
  - build
  - test
  - test-report-aggregate
  - deploy
  - publish
  - cleanup

variables:
  # Variables required by Common CI jobs
  CI_COMMON_JOB_VERSION: 'd4e29410ea168096e1a822f77c7ce741d9cfb57a'
  DOCKER_BUILDER_TAG: '$CI_COMMON_JOB_VERSION'
  DOCKER_DIND_TAG: '$CI_COMMON_JOB_VERSION'
  IMAGE_REMOVER_TAG: '$CI_COMMON_JOB_VERSION'
  BLOG_APP_SRC_DIR: 'apps/blog/'

include:
  - template: Workflows/Branch-Pipelines.gitlab-ci.yml
  - project: 'hive/common-ci-configuration'
    ref: d4e29410ea168096e1a822f77c7ce741d9cfb57a # develop
    file: '/templates/docker_image_jobs.gitlab-ci.yml'

.docker_build_template:
  extends: .docker_image_builder_job_template
  stage: build
  before_script:
    - !reference [.docker_image_builder_job_template, before_script]
    - |
      echo -e "\e[0Ksection_start:$(date +%s):login[collapsed=true]\r\e[0KLogging to Docker registry..."
      docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
      echo -e "\e[0Ksection_end:$(date +%s):login\r\e[0K"
  script:
    - |
      echo -e "\e[0Ksection_start:$(date +%s):tag[collapsed=true]\r\e[0KDetermining tag for the new image..."
      if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
        echo "Running on default branch '$CI_DEFAULT_BRANCH': tag = 'latest'"
        export TAG="latest"
      else
        echo "Running on branch '$CI_COMMIT_BRANCH': tag = $CI_COMMIT_REF_SLUG"
        export TAG="$CI_COMMIT_REF_SLUG"
      fi
      echo -e "\e[0Ksection_end:$(date +%s):tag\r\e[0K"
      echo -e "\e[0Ksection_start:$(date +%s):build[collapsed=true]\r\e[0KBaking image "$CI_REGISTRY_IMAGE/${TURBO_APP_NAME}:${TAG}"..."
      git config --global --add safe.directory "$CI_PROJECT_DIR"
      scripts/build_instance.sh --progress=plain "$CI_PROJECT_DIR"
      echo "IMAGE_NAME=${CI_REGISTRY_IMAGE}/${TURBO_APP_NAME}:${CI_COMMIT_SHORT_SHA}" > docker-build.env
      echo "Unique image tag:"
      cat docker-build.env
      echo -e "\e[0Ksection_end:$(date +%s):build\r\e[0K"
  artifacts:
    paths:
      - docker-build.env
    reports:
      dotenv: docker-build.env
  tags:
    - public-runner-docker

docker-build-auth:
  extends: .docker_build_template
  variables:
    TURBO_APP_SCOPE: '@hive/auth'
    TURBO_APP_PATH: '/apps/auth'
    TURBO_APP_NAME: 'auth'

docker-build-blog:
  extends: .docker_build_template
  variables:
    TURBO_APP_SCOPE: '@hive/blog'
    TURBO_APP_PATH: '/apps/blog'
    TURBO_APP_NAME: 'blog'

docker-build-wallet:
  extends: .docker_build_template
  variables:
    TURBO_APP_SCOPE: '@hive/wallet'
    TURBO_APP_PATH: '/apps/wallet'
    TURBO_APP_NAME: 'wallet'

.node-job:
  extends: .job-defaults
  image:
    name: node:20.11.1-alpine3.18
    entrypoint: []
  stage: test
  before_script:
    - corepack enable
    - corepack prepare pnpm@latest-9 --activate
    - pnpm config set store-dir .pnpm-store
  script:
    - |
      echo -e "\e[0Ksection_start:$(date +%s):deps[collapsed=true]\r\e[0KInstalling dependencies..."
      pnpm install --frozen-lockfile
      echo -e "\e[0Ksection_end:$(date +%s):deps\r\e[0K"
  cache:
    key: '$TURBO_APP_SCOPE-cache-2'
    paths:
      - .npm/
      - .pnpm-store/
      - .next/
  artifacts:
    name: '$CI_JOB_NAME-$CI_COMMIT_REF_NAME'
    when: always
    expire_in: 1 week
  tags:
    - public-runner-docker

.e2e_tests_template:
  extends: .node-job
  image: mcr.microsoft.com/playwright:v1.49.1-jammy
  variables:
    CI_DEBUG_SERVICES: true
    FF_NETWORK_PER_BUILD: 1
    REACT_APP_API_ENDPOINT: https://api.hive.blog
    REACT_APP_IMAGES_ENDPOINT: https://images.hive.blog/
    DENSER_URL: https://caddy
  parallel:
    matrix:
      - PROJECT: ['chromium', 'firefox', 'webkit']
        SHARD_INDEX: [1, 2, 3, 4, 5]
        SHARD_TOTAL: 5
  script:
    - !reference [.node-job, script]
    - |
      echo -e "\e[0Ksection_start:$(date +%s):tests[collapsed=false]\r\e[0KRunning tests..."
      cd .$TURBO_APP_PATH
      npx playwright test --project=$PROJECT --shard=$SHARD_INDEX/$SHARD_TOTAL --update-snapshots
      echo -e "\e[0Ksection_end:$(date +%s):tests\r\e[0K"
  artifacts:
    paths:
      - .${TURBO_APP_PATH}/playwright-report/
      - .${TURBO_APP_PATH}/test-results/
      - .${TURBO_APP_PATH}/junit/
    reports:
      junit: .${TURBO_APP_PATH}/junit/**/**/results.xml

e2e-tests-blog:
  extends: .e2e_tests_template
  needs:
    - docker-build-blog
  services:
    - name: $IMAGE_NAME
      alias: denser
      variables:
        HEALTHCHECK_TCP_PORT: '3000'
    - name: caddy:2.7.6
      command:
        - caddy
        - reverse-proxy
        - --from=https://caddy
        - --to=denser:3000
        - --internal-certs
  variables:
    TURBO_APP_SCOPE: '@hive/blog'
    TURBO_APP_PATH: '/apps/blog'
    PORT: 3000

e2e-tests-wallet:
  extends: .e2e_tests_template
  needs:
    - docker-build-wallet
  services:
    - name: $IMAGE_NAME
      alias: denser
      variables:
        HEALTHCHECK_TCP_PORT: '4000'
    - name: caddy:2.7.6
      command:
        - caddy
        - reverse-proxy
        - --from=https://caddy
        - --to=denser:4000
        - --internal-certs
  variables:
    TURBO_APP_SCOPE: '@hive/wallet'
    TURBO_APP_PATH: '/apps/wallet'
    PORT: 4000

.e2e_report_aggregate_template:
  extends: .node-job
  stage: test-report-aggregate
  when: always
  image: mcr.microsoft.com/playwright:v1.49.1-jammy
  script:
    - cd .$TURBO_APP_PATH
    - pnpm install -D playwright-merge-html-reports
    - ./node_modules/.bin/playwright test tests/merge-reports --config playwright.merge.config.ts
  artifacts:
    paths:
      - .${TURBO_APP_PATH}/merged-html-report/
      - .${TURBO_APP_PATH}/junit/

e2e-report-aggregate-blog:
  extends: .e2e_report_aggregate_template
  needs:
    - e2e-tests-blog
  variables:
    TURBO_APP_SCOPE: '@hive/blog'
    TURBO_APP_PATH: '/apps/blog'
    PROJECTS: '["chromium", "firefox", "webkit"]'
    SHARD_TOTAL: 5

e2e-report-aggregate-wallet:
  extends: .e2e_report_aggregate_template
  needs:
    - e2e-tests-wallet
  variables:
    TURBO_APP_SCOPE: '@hive/wallet'
    TURBO_APP_PATH: '/apps/wallet'
    PROJECTS: '["chromium", "firefox", "webkit"]'
    SHARD_TOTAL: 5

publish:
  image:
    name: node:20.11.1-alpine3.18
    entrypoint: []
  extends: .job-defaults
  stage: deploy
  script:
    # Extract a few values from package.json
    - NPM_PACKAGE_NAME=$(node -p "require('./package.json').name")
    - NPM_PACKAGE_VERSION=$(node -p "require('./package.json').version")

    # Validate that the package name is properly scoped to the project's root namespace.
    # For more information, see https://docs.gitlab.com/ee/user/packages/npm_registry/#package-naming-convention
    - |
      if [[ ! $NPM_PACKAGE_NAME =~ ^@$CI_PROJECT_ROOT_NAMESPACE/ ]]; then
        echo "Invalid package scope! Packages must be scoped in the root namespace of the project, e.g. \"@${CI_PROJECT_ROOT_NAMESPACE}/${CI_PROJECT_NAME}\""
        echo 'For more information, see https://docs.gitlab.com/ee/user/packages/npm_registry/#package-naming-convention'
        exit 1
      fi

    # Compare the version in package.json to all published versions.
    # If the package.json version has not yet been published, run `npm publish`.
    - |
      if [[ "$(npm view ${NPM_PACKAGE_NAME} versions)" != *"'${NPM_PACKAGE_VERSION}'"* ]]; then
        npm publish
        echo "Successfully published version ${NPM_PACKAGE_VERSION} of ${NPM_PACKAGE_NAME} to GitLab's NPM registry: ${CI_PROJECT_URL}/-/packages"
      else
        echo "Version ${NPM_PACKAGE_VERSION} of ${NPM_PACKAGE_NAME} has already been published, so no new version has been published."
      fi
  rules:
    - if: '$CI_COMMIT_TAG && $CI_COMMIT_REF_PROTECTED == "true"'
      when: manual
      allow_failure: true
  tags:
    - public-runner-docker

.deploy_template_for_staging:
  extends: .job-defaults
  stage: deploy
  before_script:
    - |
      echo -e "\e[0Ksection_start:$(date +%s):login[collapsed=true]\r\e[0KLogging to Docker registry..."
      docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
      echo -e "\e[0Ksection_end:$(date +%s):login\r\e[0K"
  script:
    - |
      scripts/run_instance.sh \
        --image="$IMAGE_NAME" \
        --app-scope="$TURBO_APP_SCOPE" \
        --app-path="$TURBO_APP_PATH" \
        --api-endpoint="$API_ENDPOINT" \
        --chain-id="$CHAIN_ID" \
        --images-endpoint="$IMAGES_ENDPOINT" \
        --name="$CONTAINER_NAME" \
        --port=$PORT \
        --detach
  rules:
    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
      when: manual
      allow_failure: true
  tags:
    - hs-denser

staging:deploy-auth:
  extends: .deploy_template_for_staging
  needs:
    - docker-build-auth
  variables:
    PORT: 7000
    API_ENDPOINT: https://api.hive.blog
    IMAGES_ENDPOINT: https://images.hive.blog/
    CONTAINER_NAME: denser-auth
    TURBO_APP_SCOPE: '@hive/auth'
    TURBO_APP_PATH: '/apps/auth'
  environment:
    name: staging-auth
    action: start
    on_stop: staging:stop-auth

staging:deploy-blog:
  extends: .deploy_template_for_staging
  needs:
    - docker-build-blog
  variables:
    PORT: 3000
    API_ENDPOINT: https://api.hive.blog
    IMAGES_ENDPOINT: https://images.hive.blog/
    WALLET_ENDPOINT: https://wallet.openhive.network
    CONTAINER_NAME: denser-blog
    TURBO_APP_SCOPE: '@hive/blog'
    TURBO_APP_PATH: '/apps/blog'
  environment:
    name: staging-blog
    action: start
    on_stop: staging:stop-blog

staging:deploy-wallet:
  extends: .deploy_template_for_staging
  needs:
    - docker-build-wallet
  variables:
    PORT: 4000
    API_ENDPOINT: https://api.hive.blog
    IMAGES_ENDPOINT: https://images.hive.blog/
    CONTAINER_NAME: denser-wallet
    TURBO_APP_SCOPE: '@hive/wallet'
    TURBO_APP_PATH: '/apps/wallet'
  environment:
    name: staging-wallet
    action: start
    on_stop: staging:stop-wallet

.stop_template_for_staging:
  extends: .job-defaults
  stage: deploy
  script:
    - docker ps -q --filter "name=$CONTAINER_NAME" | grep -q . && docker stop $CONTAINER_NAME
  rules:
    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
      when: manual
      allow_failure: true
  tags:
    - hs-denser

staging:stop-auth:
  extends: .stop_template_for_staging
  needs:
    - staging:deploy-auth
  environment:
    name: staging-auth
    action: stop
  variables:
    CONTAINER_NAME: denser-auth
    GIT_STRATEGY: none

staging:stop-blog:
  extends: .stop_template_for_staging
  needs:
    - staging:deploy-blog
  environment:
    name: staging-blog
    action: stop
  variables:
    CONTAINER_NAME: denser-blog
    GIT_STRATEGY: none

staging:stop-wallet:
  extends: .stop_template_for_staging
  needs:
    - staging:deploy-wallet
  environment:
    name: staging-wallet
    action: stop
  variables:
    CONTAINER_NAME: denser-wallet
    GIT_STRATEGY: none

review:deploy-auth:
  extends: staging:deploy-auth
  variables:
    CONTAINER_NAME: denser-review-auth
    PORT: 7001
    AUTH_PORT: 7001
    API_ENDPOINT: https://api.fake.openhive.network/
    CHAIN_ID: '42'
    IMAGES_ENDPOINT: https://images.hive.blog/
    SITE_DOMAIN: https://auth.fake.openhive.network
    LOGGING_BROWSER_ENABLED: false
    LOGGING_LOG_LEVEL: info
  environment:
    name: review-auth
    action: start
    on_stop: review:stop-auth

review:deploy-blog:
  extends: staging:deploy-blog
  variables:
    CONTAINER_NAME: denser-review-blog
    PORT: 3001
    BLOG_PORT: 3001
    API_ENDPOINT: https://api.fake.openhive.network/
    CHAIN_ID: '42'
    IMAGES_ENDPOINT: https://images.hive.blog/
    WALLET_ENDPOINT: https://wallet.fake.openhive.network
    SITE_DOMAIN: https://blog.fake.openhive.network
    LOGGING_BROWSER_ENABLED: false
    LOGGING_LOG_LEVEL: info
  environment:
    name: review-blog
    action: start
    on_stop: review:stop-blog

review:deploy-wallet:
  extends: staging:deploy-wallet
  variables:
    CONTAINER_NAME: denser-review-wallet
    PORT: 4001
    WALLET_PORT: 4001
    API_ENDPOINT: https://api.fake.openhive.network/
    CHAIN_ID: '42'
    IMAGES_ENDPOINT: https://images.hive.blog/
    SITE_DOMAIN: https://wallet.fake.openhive.network
    BLOG_DOMAIN: https://blog.fake.openhive.network
    LOGGING_BROWSER_ENABLED: false
    LOGGING_LOG_LEVEL: info
  environment:
    name: review-wallet
    action: start
    on_stop: review:stop-wallet

review:stop-auth:
  extends: staging:stop-auth
  needs:
    - review:deploy-auth
  variables:
    CONTAINER_NAME: denser-review-auth
  environment:
    name: review-auth
    action: stop

review:stop-blog:
  extends: staging:stop-blog
  needs:
    - review:deploy-blog
  variables:
    CONTAINER_NAME: denser-review-blog
  environment:
    name: review-blog
    action: stop

review:stop-wallet:
  extends: staging:stop-wallet
  needs:
    - review:deploy-wallet
  variables:
    CONTAINER_NAME: denser-review-wallet
  environment:
    name: review-wallet
    action: stop

build_and_publish_auth_image:
  stage: publish
  extends: .publish_docker_image_template
  variables:
    TURBO_APP_SCOPE: '@hive/auth'
    TURBO_APP_PATH: '/apps/auth'
    TURBO_APP_NAME: 'auth'
  before_script:
    - !reference [.publish_docker_image_template, before_script]
  script:
    - scripts/ci-helpers/build_and_publish_instance.sh
  tags:
    - public-runner-docker
    - hived-for-tests

build_and_publish_blog_image:
  stage: publish
  extends: .publish_docker_image_template
  variables:
    TURBO_APP_SCOPE: '@hive/blog'
    TURBO_APP_PATH: '/apps/blog'
    TURBO_APP_NAME: 'blog'
  before_script:
    - !reference [.publish_docker_image_template, before_script]
  script:
    - scripts/ci-helpers/build_and_publish_instance.sh
  tags:
    - public-runner-docker
    - hived-for-tests

build_and_publish_wallet_image:
  stage: publish
  extends: .publish_docker_image_template
  variables:
    TURBO_APP_SCOPE: '@hive/wallet'
    TURBO_APP_PATH: '/apps/wallet'
    TURBO_APP_NAME: 'wallet'
  before_script:
    - !reference [.publish_docker_image_template, before_script]
  script:
    - scripts/ci-helpers/build_and_publish_instance.sh
  tags:
    - public-runner-docker
    - hived-for-tests

buildkit_cache_cleanup:
  stage: cleanup
  extends: .buildkit_cleanup_job_template
  needs: []
  variables:
    CACHE_REPOSITORIES: 'auth/cache,blog/cache,wallet/cache'