azure-production/Jenkinsfile

pipeline {
  agent any
  environment {
    // Fetch the ACR login server from Terraform outputs
    ACR_LOGIN_SERVER = sh(script: 'terraform output -raw container_registry_url', returnStdout: true).trim()
    RESOURCE_GROUP   = 'Prod-Native-American-Empires'
    CONTAINER_APP    = 'skennen'
  }
  stages {
    stage('Checkout') {
      steps {
        checkout scm
      }
    }
    stage('Build Docker Image') {
      steps {
        script {
          // Build the .NET 8 Minimal API image with a build number tag and latest
          docker.build("skennen:${env.BUILD_NUMBER}", '-f dotnet8-minimal-api/Dockerfile dotnet8-minimal-api')
        }
      }
    }
    stage('Tag & Push to ACR') {
      steps {
        withCredentials([usernamePassword(
          credentialsId: 'acr-creds',
          usernameVariable: 'ACR_USER',
          passwordVariable: 'ACR_PASS')]) {
          sh '''
            docker login $ACR_LOGIN_SERVER -u $ACR_USER -p $ACR_PASS
            docker tag skennen:${BUILD_NUMBER} $ACR_LOGIN_SERVER/skennen:${BUILD_NUMBER}
            docker tag skennen:${BUILD_NUMBER} $ACR_LOGIN_SERVER/skennen:latest
            docker push $ACR_LOGIN_SERVER/skennen:${BUILD_NUMBER}
            docker push $ACR_LOGIN_SERVER/skennen:latest
          '''
        }
      }
    }
    stage('Deploy to Container App') {
      steps {
        withCredentials([azureServicePrincipal(
          credentialsId: 'azure-sp',
          subscriptionIdVariable: 'AZ_SUB',
          clientIdVariable: 'AZ_CLIENT_ID',
          clientSecretVariable: 'AZ_CLIENT_SECRET',
          tenantIdVariable: 'AZ_TENANT_ID')]) {
          sh '''
            az login --service-principal -u $AZ_CLIENT_ID -p $AZ_CLIENT_SECRET --tenant $AZ_TENANT_ID
            az account set --subscription $AZ_SUB
            az containerapp update \
              --name $CONTAINER_APP \
              --resource-group $RESOURCE_GROUP \
              --image $ACR_LOGIN_SERVER/skennen:latest
          '''
        }
      }
    }
  }
  post {
    always {
      cleanWs()
    }
  }
}