Jenkinsfile_parameterized

#!groovy

@Library(value="Infrastructure", changelog=false)

def channel = '#bsp-build-notices'

env.TESTCONTAINERS_HUB_IMAGE_NAME_PREFIX = 'hmctspublic.azurecr.io/imported/'

def combinedSecrets = [
  'bulk-scan-${env}': [
    secret('storage-account-primary-key', 'TEST_STORAGE_ACCOUNT_KEY'),
    secret('launch-darkly-sdk-key', 'LAUNCH_DARKLY_SDK_KEY'),
    secret('launch-darkly-offline-mode', 'LAUNCH_DARKLY_OFFLINE_MODE')
  ],
  's2s-${env}': [
    // to be removed later
    secret('microservicekey-bulk-scan-processor-tests', 'TEST_S2S_SECRET'),
    secret('microservicekey-bulk-scan-processor-tests', 'S2S_SECRET')
  ]
]

def commonSecrets = [
  's2s-${env}': [
    // to be removed later
    secret('microservicekey-bulk-scan-processor-tests', 'TEST_S2S_SECRET'),
    secret('microservicekey-bulk-scan-processor-tests', 'S2S_SECRET')
  ]
]

static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
  [ $class: 'AzureKeyVaultSecret',
    secretType: 'Secret',
    name: secretName,
    version: '',
    envVariable: envVar
  ]
}

properties([
  parameters([
    string(name: 'PRODUCT_NAME', defaultValue: 'bulk-scan', description: ''),
    string(name: 'APP', defaultValue: 'processor', description: ''),
    string(name: 'TYPE', defaultValue: 'java', description: ''),
    string(name: 'ENVIRONMENT', defaultValue: 'sandbox', description: 'Environment where code should be built and deployed'),
    choice(name: 'SUBSCRIPTION', choices: 'sandbox\nnonprod\nprod', description: 'Azure subscriptions available to build in')
  ]),
  [$class: 'GithubProjectProperty', projectUrlStr: 'github.com/hmcts/bulk-scan-processor'],
  pipelineTriggers([[$class: 'GitHubPushTrigger']])
])

withParameterizedPipeline(params.TYPE, params.PRODUCT_NAME, params.APP, params.ENVIRONMENT, params.SUBSCRIPTION) {
  enableDbMigration('bulk-scan')
  enableSlackNotifications(channel)

  onPR() {
    loadVaultSecrets(commonSecrets)
  }

  onNonPR() {
    loadVaultSecrets(combinedSecrets)
  }
}