automated terminal push
This commit is contained in:
lenape
113
Jenkinsfile
vendored
113
Jenkinsfile
vendored
@@ -12,6 +12,11 @@ pipeline {
|
||||
defaultValue: false,
|
||||
description: 'Skip SonarQube quality gates (use with caution)'
|
||||
)
|
||||
booleanParam(
|
||||
name: 'DESTROY_INFRASTRUCTURE',
|
||||
defaultValue: false,
|
||||
description: 'Destroy all infrastructure (use with extreme caution)'
|
||||
)
|
||||
}
|
||||
|
||||
environment {
|
||||
@@ -111,6 +116,14 @@ pipeline {
|
||||
steps {
|
||||
checkout scm
|
||||
script {
|
||||
// Check for infrastructure destruction first
|
||||
if (params.DESTROY_INFRASTRUCTURE) {
|
||||
env.DEPLOYMENT_TYPE = "DESTROY"
|
||||
currentBuild.displayName = "DESTROY-${BUILD_NUMBER}"
|
||||
echo "🚨 DESTROY MODE: Infrastructure destruction requested"
|
||||
return
|
||||
}
|
||||
|
||||
def infrastructureFiles = sh(
|
||||
script: '''
|
||||
if git rev-parse HEAD~1 >/dev/null 2>&1; then
|
||||
@@ -130,34 +143,18 @@ pipeline {
|
||||
echo "✅ Deployment type set to: INFRASTRUCTURE (forced)"
|
||||
} else if (infrastructureFiles == "initial") {
|
||||
env.DEPLOYMENT_TYPE = "INFRASTRUCTURE"
|
||||
currentBuild.displayName = "INFRASTRUCTURE-INITIAL-${BUILD_NUMBER}"
|
||||
echo "✅ First run detected. Deploying infrastructure."
|
||||
} else if (infrastructureFiles != "none") {
|
||||
env.DEPLOYMENT_TYPE = "INFRASTRUCTURE"
|
||||
currentBuild.displayName = "INFRASTRUCTURE-CHANGED-${BUILD_NUMBER}"
|
||||
echo "🚨 SECURITY NOTICE: Infrastructure changes detected - elevated permissions required"
|
||||
echo " Changed files: ${infrastructureFiles}"
|
||||
} else {
|
||||
// Check if infrastructure actually exists in AWS
|
||||
def clusterExists = false
|
||||
try {
|
||||
withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: env.AWS_CRED_ID]]) {
|
||||
def clusterCheck = sh(
|
||||
script: "aws ecs describe-clusters --clusters ${TF_VAR_cluster_name} --region ${AWS_REGION} --query 'clusters[0].status' --output text 2>/dev/null || echo 'NOTFOUND'",
|
||||
returnStdout: true
|
||||
).trim()
|
||||
clusterExists = (clusterCheck == "ACTIVE")
|
||||
}
|
||||
} catch (Exception e) {
|
||||
echo "⚠️ Could not check cluster status: ${e.getMessage()}"
|
||||
}
|
||||
|
||||
if (!clusterExists) {
|
||||
env.DEPLOYMENT_TYPE = "INFRASTRUCTURE"
|
||||
echo "🚨 CLEAN AWS DETECTED: No existing infrastructure found - deploying from scratch"
|
||||
} else {
|
||||
env.DEPLOYMENT_TYPE = "APPLICATION"
|
||||
currentBuild.displayName = "APPLICATION-${BUILD_NUMBER}"
|
||||
echo "✅ SECURITY: Application-only deployment - using restricted permissions"
|
||||
}
|
||||
}
|
||||
|
||||
def gitCommit = sh(script: 'git rev-parse HEAD', returnStdout: true).trim()
|
||||
def gitAuthor = sh(script: 'git log -1 --pretty=format:"%an"', returnStdout: true).trim()
|
||||
@@ -239,6 +236,9 @@ pipeline {
|
||||
}
|
||||
|
||||
stage('Secure Container Build & Registry') {
|
||||
when {
|
||||
not { expression { env.DEPLOYMENT_TYPE == "DESTROY" } }
|
||||
}
|
||||
steps {
|
||||
withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: env.AWS_CRED_ID]]) {
|
||||
script {
|
||||
@@ -276,6 +276,9 @@ pipeline {
|
||||
}
|
||||
|
||||
stage('Infrastructure Readiness Check') {
|
||||
when {
|
||||
not { expression { env.DEPLOYMENT_TYPE == "DESTROY" } }
|
||||
}
|
||||
steps {
|
||||
withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: env.AWS_CRED_ID]]) {
|
||||
script {
|
||||
@@ -301,13 +304,14 @@ pipeline {
|
||||
echo "🔍 Container Instances: ${instanceCount}"
|
||||
|
||||
if (serviceExists == "false" || instanceCount == "0" || instanceCount == "null") {
|
||||
echo "🚨 SECURITY NOTICE: Infrastructure not ready - forcing deployment"
|
||||
echo "🚨 SECURITY NOTICE: Infrastructure not ready - forcing infrastructure deployment"
|
||||
env.DEPLOYMENT_TYPE = "INFRASTRUCTURE"
|
||||
currentBuild.displayName = "INFRASTRUCTURE-AUTO-${BUILD_NUMBER}"
|
||||
currentBuild.description = "INFRASTRUCTURE (auto-detected) | ${env.IMAGE_TAG}"
|
||||
echo "✅ Changed deployment type to: ${env.DEPLOYMENT_TYPE}"
|
||||
echo "✅ Changed deployment type to: INFRASTRUCTURE"
|
||||
}
|
||||
} else {
|
||||
echo "✅ Infrastructure deployment already forced - skipping readiness check"
|
||||
echo "✅ Infrastructure deployment already scheduled - skipping readiness check"
|
||||
}
|
||||
|
||||
echo "📋 SECURITY: Infrastructure readiness assessment completed"
|
||||
@@ -317,6 +321,50 @@ pipeline {
|
||||
}
|
||||
}
|
||||
|
||||
stage('Destroy Infrastructure') {
|
||||
when {
|
||||
expression { env.DEPLOYMENT_TYPE == "DESTROY" }
|
||||
}
|
||||
steps {
|
||||
withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: env.AWS_CRED_ID]]) {
|
||||
dir('terraform') {
|
||||
script {
|
||||
echo "🚨 DESTRUCTION: Destroying infrastructure..."
|
||||
sh """
|
||||
echo "🔄 Initializing Terraform with remote backend..."
|
||||
terraform init \\
|
||||
-backend-config="bucket=${TF_BACKEND_BUCKET}" \\
|
||||
-backend-config="key=${TF_BACKEND_PREFIX}" \\
|
||||
-backend-config="region=${AWS_REGION}" \\
|
||||
-backend-config="dynamodb_table=${TF_DDB_TABLE}"
|
||||
|
||||
echo "🔄 Planning infrastructure destruction..."
|
||||
terraform plan -destroy \\
|
||||
-var="cluster_name=${TF_VAR_cluster_name}" \\
|
||||
-var="vpc_cidr=${TF_VAR_vpc_cidr}" \\
|
||||
-var="public_subnets=${TF_VAR_public_subnets}" \\
|
||||
-var="instance_type=${TF_VAR_instance_type}" \\
|
||||
-var="key_pair_name=${TF_VAR_key_pair_name}" \\
|
||||
-var="jenkins_ip_cidr=${TF_VAR_jenkins_ip_cidr}" \\
|
||||
-var="aws_region=${TF_VAR_aws_region}"
|
||||
|
||||
echo "🔄 Destroying infrastructure..."
|
||||
terraform destroy -auto-approve \\
|
||||
-var="cluster_name=${TF_VAR_cluster_name}" \\
|
||||
-var="vpc_cidr=${TF_VAR_vpc_cidr}" \\
|
||||
-var="public_subnets=${TF_VAR_public_subnets}" \\
|
||||
-var="instance_type=${TF_VAR_instance_type}" \\
|
||||
-var="key_pair_name=${TF_VAR_key_pair_name}" \\
|
||||
-var="jenkins_ip_cidr=${TF_VAR_jenkins_ip_cidr}" \\
|
||||
-var="aws_region=${TF_VAR_aws_region}"
|
||||
"""
|
||||
echo "✅ Infrastructure destruction completed"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('Deploy Infrastructure') {
|
||||
when {
|
||||
anyOf {
|
||||
@@ -334,6 +382,9 @@ pipeline {
|
||||
echo "🏗️ ARCHITECTURE: Deploying ECS Cluster with SSM access (secure, keyless)"
|
||||
echo "🔐 In production: This would require infrastructure-admin role"
|
||||
echo "🚀 Attempting infrastructure deployment..."
|
||||
|
||||
// Add error handling for Terraform operations
|
||||
try {
|
||||
sh """
|
||||
echo "🔄 Initializing Terraform with remote backend..."
|
||||
terraform init \\
|
||||
@@ -362,7 +413,13 @@ pipeline {
|
||||
-var="jenkins_ip_cidr=${TF_VAR_jenkins_ip_cidr}" \\
|
||||
-var="aws_region=${TF_VAR_aws_region}"
|
||||
"""
|
||||
echo "✅ SECURITY: Infrastructure deployment completed with compliance verification"
|
||||
echo "✅ SECURITY: Infrastructure deployment completed successfully"
|
||||
} catch (Exception e) {
|
||||
echo "❌ Infrastructure deployment failed: ${e.getMessage()}"
|
||||
echo "📋 Checking current Terraform state..."
|
||||
sh "terraform show || echo 'No state found'"
|
||||
throw e
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -417,6 +474,9 @@ pipeline {
|
||||
}
|
||||
|
||||
stage('Configure & Deploy Application') {
|
||||
when {
|
||||
not { expression { env.DEPLOYMENT_TYPE == "DESTROY" } }
|
||||
}
|
||||
parallel {
|
||||
stage('Configure EC2 Instance via SSM') {
|
||||
when {
|
||||
@@ -609,6 +669,9 @@ pipeline {
|
||||
}
|
||||
|
||||
stage('Verify Deployment') {
|
||||
when {
|
||||
not { expression { env.DEPLOYMENT_TYPE == "DESTROY" } }
|
||||
}
|
||||
steps {
|
||||
withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', credentialsId: env.AWS_CRED_ID]]) {
|
||||
script {
|
||||
@@ -706,6 +769,9 @@ pipeline {
|
||||
|
||||
success {
|
||||
script {
|
||||
if (env.DEPLOYMENT_TYPE == "DESTROY") {
|
||||
echo "🎉 SUCCESS: Infrastructure destroyed successfully!"
|
||||
} else {
|
||||
echo "🎉 SUCCESS: Deployment completed successfully!"
|
||||
echo " Version ${IMAGE_TAG} deployed to ECS cluster ${TF_VAR_cluster_name}"
|
||||
|
||||
@@ -725,6 +791,7 @@ pipeline {
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
failure {
|
||||
script {
|
||||
|
||||
Reference in New Issue
Block a user