Skip to content

Commit

Permalink
Create Jenkinsfile
Browse files Browse the repository at this point in the history
  • Loading branch information
@yash509
yash509 authored May 9, 2024
1 parent bd0b7b6 commit 65fbf16
Showing 1 changed file with 302 additions and 0 deletions.
302 changes: 302 additions & 0 deletions Jenkinsfile
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,302 @@
pipeline {
agent any
tools {
jdk 'jdk17'
nodejs 'node16'
}
environment {
SCANNER_HOME = tool 'sonar-scanner'
}
stages {
stage('clean workspace') {
steps {
cleanWs()
}
}
stage('Unit Tests') {
steps {
sh 'jenkins --version'
sh 'aws --version'
sh 'kubectl version --client'
sh 'terraform --version'
sh 'trivy --version'
sh 'docker --version'
}
}
stage('Checkout from Git') {
steps {
git branch: 'main', url: 'https://github.com/yash509/DevSecOps-Uber-Clone-Deployment.git'
}
}
stage('Deployments') {
parallel {
stage('Test deploy to staging') {
steps {
echo 'staging deployment done'
}
}
stage('Test deploy to production') {
steps {
echo 'production deployment done'
}
}
}
}
stage('Test Build') {
steps {
echo 'Building....'
}
post {
always {
jiraSendBuildInfo site: 'clouddevopshunter.atlassian.net'
}
}
}
stage('Deploy to Staging') {
when {
branch 'main'
}
steps {
echo 'Deploying to Staging from main....'
}
post {
always {
jiraSendDeploymentInfo environmentId: 'us-stg-1', environmentName: 'us-stg-1', environmentType: 'staging'
}
}
}
stage('Deploy to Production') {
when {
branch 'main'
}
steps {
echo 'Deploying to Production from main....'
}
post {
always {
jiraSendDeploymentInfo environmentId: 'us-prod-1', environmentName: 'us-prod-1', environmentType: 'production'
}
}
}
stage("Sonarqube Analysis ") {
steps {
//dir('Band Website') {
withSonarQubeEnv('sonar-server') {
sh '''$SCANNER_HOME/bin/sonar-scanner -Dsonar.projectName=ub-application \
-Dsonar.projectKey=ub-application'''
//}
}
}
}
stage("quality gate") {
steps {
//dir('Band Website') {
script {
waitForQualityGate abortPipeline: false, credentialsId: 'Sonar-token'
//}
}
}
}
stage('Install Dependencies') {
steps {
//dir('Band Website') {
sh "npm install"
//}
}
}
stage('OWASP File System SCAN') {
steps {
//dir('Band Website') {
dependencyCheck additionalArguments: '--scan ./ --disableYarnAudit --disableNodeAudit', odcInstallation: 'DP-Check'
dependencyCheckPublisher pattern: '**/dependency-check-report.xml'
//}
}
}
stage('TRIVY File System SCAN') {
steps {
//dir('Band Website') {
sh "trivy fs . > trivyfs.txt"
//}
}
}
stage('Docker Scout Image Overview') {
steps {
script{
withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){
sh 'docker-scout quickview fs://.'
}
}
}
}
stage('Docker Scout CVES File System Scan') {
steps {
script{
withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){
sh 'docker-scout cves fs://.'
}
}
}
}
stage("Docker Image Building"){
steps{
script{
//dir('Band Website') {
withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){
sh "docker build -t uber-application ."

//}
}
}
}
}
stage("Docker Image Tagging"){
steps{
script{
//dir('Band Website') {
withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){
sh "docker tag uber-application yash5090/uber-application:latest "
//}
}
}
}
}
stage('Docker Image Scanning') {
steps {
sh "trivy image --format table -o trivy-image-report.html yash5090/uber-application:latest"
}
}
stage("Image Push to DockerHub") {
steps{
script{
//dir('Band Website') {
withDockerRegistry(credentialsId: 'docker', toolName: 'docker') {
sh "docker push yash5090/uber-application:latest "
//}
}
}
}
}
stage('Docker Scout Image Scanning') {
steps {
script{
withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){
sh 'docker-scout quickview yash5090/uber-application:latest'
sh 'docker-scout cves yash5090/uber-application:latest'
sh 'docker-scout recommendations yash5090/uber-application:latest'
sh 'docker-scout attestation yash5090/uber-application:latest'
}
}
}
}
stage("TRIVY"){
steps{
//dir('Band Website') {
sh "trivy image yash5090/uber-application:latest > trivyimage.txt"
//}
}
}
stage ('Manual Approval'){
steps {
script {
timeout(time: 10, unit: 'MINUTES') {
approvalMailContent = """
Project: ${env.JOB_NAME}
Build Number: ${env.BUILD_NUMBER}
Go to build URL and approve the deployment request.
URL de build: ${env.BUILD_URL}
"""
mail(
to: '[email protected]',
subject: "${currentBuild.result} CI: Project name -> ${env.JOB_NAME}",
body: approvalMailContent,
mimeType: 'text/plain'
)
input(
id: "DeployGate",
message: "Deploy ${params.project_name}?",
submitter: "approver",
parameters: [choice(name: 'action', choices: ['Deploy'], description: 'Approve deployment')])
}
}
}
}
stage('Deploy to Docker Container'){
steps{
//dir('BMI Calculator (JS)') {
sh 'docker run -d --name uber-application -p 5000:80 yash5090/uber-application:latest'
//}
}
}
stage('Deploy to Kubernetes'){
steps{
script{
//dir('K8S') {
withKubeConfig(caCertificate: '', clusterName: '', contextName: '', credentialsId: 'k8s', namespace: '', restrictKubeConfigAccess: false, serverUrl: '') {
sh 'kubectl apply -f deployment.yaml'
sh 'kubectl apply -f service.yaml'
//}
}
}
}
}
stage('Verify the Kubernetes Deployments') {
steps {
withKubeConfig(caCertificate: '', clusterName: '', contextName: '', credentialsId: 'k8s', namespace: '', restrictKubeConfigAccess: false, serverUrl: '') {
sh "kubectl get all "
sh "kubectl get pods "
sh "kubectl get svc "
sh "kubectl get ns"
}
}
}
stage('Deployment Done') {
steps {
echo 'Deployed Succcessfully...'
}
}
}
post {
always {
script {
def jobName = env.JOB_NAME
def buildNumber = env.BUILD_NUMBER
def pipelineStatus = currentBuild.result ?: 'UNKNOWN'
def bannerColor = pipelineStatus.toUpperCase() == 'SUCCESS' ? 'green' : 'red'
def body = """
<html>
<body>
<div style="border: 4px solid ${bannerColor}; padding: 10px;">
<h2>${jobName} - Build ${buildNumber}</h2>
<div style="background-color: ${bannerColor}; padding: 10px;">
<h3 style="color: white;">Pipeline Status: ${pipelineStatus.toUpperCase()}</h3>
</div>
<p>Check the <a href="${BUILD_URL}">console output</a>.</p>
</div>
</body>
</html>
"""

emailext (
attachLog: true,
subject: "${jobName} - Build ${buildNumber} - ${pipelineStatus.toUpperCase()}",
body: body,
to: '[email protected]',
from: '[email protected]',
replyTo: '[email protected]',
mimeType: 'text/html',
attachmentsPattern: 'trivy-image-report.html, trivyfs.txt, trivyimage.txt')
}
}
}
}
stage('Result') {
timeout(time: 10, unit: 'MINUTES') {
mail to: '[email protected]',
subject: "${currentBuild.result} CI: ${env.JOB_NAME}",
body: "Project: ${env.JOB_NAME}\nBuild Number: ${env.BUILD_NUMBER}\nGo to ${env.BUILD_URL} and approve deployment"
input message: "Deploy ${params.project_name}?",
id: "DeployGate",
submitter: "approver",
parameters: [choice(name: 'action', choices: ['Success'], description: 'Approve deployment')]
}
}

0 comments on commit 65fbf16

Please sign in to comment.