baiyue-firstleg/Jenkinsfile

def serviceModules = [
    'gateway', 'auth', 'iam', 'firstleg', 'order', 'warehouse', 'file', 'print',
    'integration-service', 'event-bridge-service', 'audit-service'
]

def serviceJars = [
    'gateway': 'gateway/target/gateway-1.0.0-SNAPSHOT.jar',
    'auth': 'auth/target/auth-service-1.0.0-SNAPSHOT.jar',
    'iam': 'iam/target/iam-service-1.0.0-SNAPSHOT.jar',
    'firstleg': 'firstleg/target/firstleg-service-1.0.0-SNAPSHOT.jar',
    'order': 'order/target/order-service-1.0.0-SNAPSHOT.jar',
    'warehouse': 'warehouse/target/warehouse-service-1.0.0-SNAPSHOT.jar',
    'file': 'file/target/file-service-1.0.0-SNAPSHOT.jar',
    'print': 'print/target/print-service-1.0.0-SNAPSHOT.jar',
    'integration-service': 'integration-service/target/integration-service-1.0.0-SNAPSHOT.jar',
    'event-bridge-service': 'event-bridge-service/target/event-bridge-service-1.0.0-SNAPSHOT.jar',
    'audit-service': 'audit-service/target/audit-service-1.0.0-SNAPSHOT.jar'
]

def serviceCheckboxes = [
    'gateway': 'SERVICE_GATEWAY',
    'auth': 'SERVICE_AUTH',
    'iam': 'SERVICE_IAM',
    'firstleg': 'SERVICE_FIRSTLEG',
    'order': 'SERVICE_ORDER',
    'warehouse': 'SERVICE_WAREHOUSE',
    'file': 'SERVICE_FILE',
    'print': 'SERVICE_PRINT',
    'integration-service': 'SERVICE_INTEGRATION',
    'event-bridge-service': 'SERVICE_EVENT_BRIDGE',
    'audit-service': 'SERVICE_AUDIT'
]

def commonPaths = [
    'pom.xml', 'platform-bom/', 'common-core/', 'common-web/', 'common-security/',
    'common-openapi/', 'common-audit/', 'common-event-contract/', 'Jenkinsfile', 'deploy/'
]

pipeline {
    // 测试阶段使用当前任意可用节点，避免因节点未配置 docker-java17 标签而一直排队。
    // 正式环境配置好专用构建节点后，可恢复为：agent { label 'docker-java17' }
    agent any

    tools {
        maven 'maven-3.8.8'
    }

    options {
        disableConcurrentBuilds()
        timestamps()
        buildDiscarder(logRotator(numToKeepStr: '30'))
    }

    parameters {
        choice(name: 'BUILD_MODE', choices: ['AUTO', 'SELECT', 'ALL'], description: 'AUTO 按 Git 变更识别；SELECT 勾选服务；ALL 构建全部服务')
        booleanParam(name: 'SERVICE_GATEWAY', defaultValue: false, description: 'Gateway 网关服务（gateway）')
        booleanParam(name: 'SERVICE_AUTH', defaultValue: false, description: '统一认证服务（auth）')
        booleanParam(name: 'SERVICE_IAM', defaultValue: false, description: '租户与权限服务（iam）')
        booleanParam(name: 'SERVICE_FIRSTLEG', defaultValue: false, description: '头程履约服务（firstleg）')
        booleanParam(name: 'SERVICE_ORDER', defaultValue: false, description: '订单服务（order）')
        booleanParam(name: 'SERVICE_WAREHOUSE', defaultValue: false, description: '仓库与往来单位服务（warehouse）')
        booleanParam(name: 'SERVICE_FILE', defaultValue: false, description: '文件中心（file）')
        booleanParam(name: 'SERVICE_PRINT', defaultValue: false, description: '打印服务（print）')
        booleanParam(name: 'SERVICE_INTEGRATION', defaultValue: false, description: '第三方集成服务（integration-service）')
        booleanParam(name: 'SERVICE_EVENT_BRIDGE', defaultValue: false, description: '跨区域事件桥（event-bridge-service）')
        booleanParam(name: 'SERVICE_AUDIT', defaultValue: false, description: '审计服务（audit-service）')
        choice(name: 'ENVIRONMENT', choices: ['test', 'staging', 'production'], description: '部署环境')
        booleanParam(name: 'DEPLOY', defaultValue: false, description: '构建成功后是否部署')
        booleanParam(name: 'INITIALIZE_TEST_DATABASE', defaultValue: false, description: '仅 test：幂等初始化 IAM、订单、仓库与往来单位表结构及仓库样例数据')
        booleanParam(name: 'SKIP_TESTS', defaultValue: false, description: '是否跳过测试；生产构建不建议勾选')
        string(name: 'IMAGE_REPOSITORY', defaultValue: '8.163.30.128:10082/java-project/baiyue-firstleg', description: '预发布/生产镜像仓库地址；test 环境自动使用本机镜像，无需修改')
        string(name: 'DOCKER_BASE_IMAGE', defaultValue: 'docker.m.daocloud.io/library/eclipse-temurin:17-jre-alpine', description: 'Java 17 基础镜像；默认使用国内镜像代理')
    }

    environment {
        REGISTRY_CREDENTIALS = 'gitea-test-token'
        MAVEN_SETTINGS = 'deploy/maven/settings-cn.xml'
        MAVEN_OPTS = '-Dfile.encoding=UTF-8 -Dmaven.wagon.http.retryHandler.count=3'
    }

    stages {
        stage('确定构建范围') {
            steps {
                script {
                    String requestedRepository
                    if (params.ENVIRONMENT == 'test') {
                        requestedRepository = 'baiyue-firstleg-test'
                        echo '测试环境使用 Jenkins 节点本机镜像，不登录、不推送远程 Registry'
                    } else {
                        requestedRepository = params.IMAGE_REPOSITORY?.trim()
                        if (!requestedRepository || requestedRepository == 'registry.example.com/your-group/baiyue-firstleg') {
                            error('预发布/生产环境必须填写真实的 HTTPS 镜像仓库地址')
                        }
                        if (requestedRepository.contains('://') || !requestedRepository.contains('/')) {
                            error('IMAGE_REPOSITORY 格式错误：请填写 host[:port]/owner/image，不要包含 http:// 或 https://')
                        }
                    }
                    env.RESOLVED_IMAGE_REPOSITORY = requestedRepository

                    List selected = []
                    if (params.BUILD_MODE == 'ALL') {
                        selected = serviceModules
                    } else if (params.BUILD_MODE == 'SELECT') {
                        selected = serviceModules.findAll { service ->
                            params[serviceCheckboxes[service]] == true
                        }
                        if (!selected) {
                            error('SELECT 模式至少需要勾选一个服务')
                        }
                    } else {
                        String base = env.GIT_PREVIOUS_SUCCESSFUL_COMMIT?.trim()
                        if (!base || sh(script: "git cat-file -e ${base}^{commit} 2>/dev/null", returnStatus: true) != 0) {
                            selected = serviceModules
                        } else {
                            List changed = sh(script: "git diff --name-only ${base} HEAD", returnStdout: true)
                                .trim().split('\\n').collect { it.trim() }.findAll { it }
                            boolean commonChanged = changed.any { path -> commonPaths.any { prefix -> path == prefix || path.startsWith(prefix) } }
                            selected = commonChanged ? serviceModules : serviceModules.findAll { module ->
                                changed.any { it == module || it.startsWith("${module}/") }
                            }
                        }
                    }

                    List invalid = selected.findAll { !serviceModules.contains(it) }
                    if (invalid) {
                        error("未知服务: ${invalid.join(', ')}；允许值: ${serviceModules.join(', ')}")
                    }
                    selected = selected.unique()
                    if (!selected) {
                        currentBuild.description = '没有需要构建的业务服务'
                        env.NO_SERVICE_CHANGE = 'true'
                        env.SELECTED_SERVICES = ''
                    } else {
                        env.NO_SERVICE_CHANGE = 'false'
                        env.SELECTED_SERVICES = selected.join(',')
                        env.IMAGE_TAG = sh(script: 'git rev-parse --short=12 HEAD', returnStdout: true).trim()
                        currentBuild.description = "${env.SELECTED_SERVICES} | ${env.IMAGE_TAG}"
                        echo "本次构建服务: ${env.SELECTED_SERVICES}"
                    }
                }
            }
        }

        stage('Maven 测试与打包') {
            when { expression { env.NO_SERVICE_CHANGE != 'true' } }
            steps {
                script {
                    String testOption = params.SKIP_TESTS ? '-DskipTests' : ''
                    sh "mvn --settings ${env.MAVEN_SETTINGS} --batch-mode --errors --fail-at-end -pl ${env.SELECTED_SERVICES} -am clean package ${testOption}"
                }
            }
            post {
                always {
                    junit allowEmptyResults: true, testResults: '**/target/surefire-reports/TEST-*.xml'
                }
            }
        }

        stage('构建镜像并按环境发布') {
            when { expression { env.NO_SERVICE_CHANGE != 'true' } }
            steps {
                script {
                    env.SELECTED_SERVICES.split(',').each { service ->
                        String image = "${env.RESOLVED_IMAGE_REPOSITORY}/${service}:${env.IMAGE_TAG}"
                        String contextDir = ".docker-context/${service}"
                        sh "mkdir -p '${contextDir}' && cp -f '${serviceJars[service]}' '${contextDir}/app.jar'"
                        sh "docker build -f deploy/docker/Dockerfile --build-arg BASE_IMAGE=${params.DOCKER_BASE_IMAGE} --build-arg JAR_FILE=app.jar -t ${image} '${contextDir}'"
                    }

                    if (params.ENVIRONMENT == 'test') {
                        echo "测试镜像已保存在当前 Docker 节点：${env.RESOLVED_IMAGE_REPOSITORY}/*:${env.IMAGE_TAG}"
                    } else {
                        String registryHost = env.RESOLVED_IMAGE_REPOSITORY.tokenize('/')[0]
                        withCredentials([usernamePassword(credentialsId: env.REGISTRY_CREDENTIALS, usernameVariable: 'REGISTRY_USER', passwordVariable: 'REGISTRY_PASSWORD')]) {
                            sh 'printf %s "$REGISTRY_PASSWORD" | docker login -u "$REGISTRY_USER" --password-stdin "' + registryHost + '"'
                            env.SELECTED_SERVICES.split(',').each { service ->
                                String image = "${env.RESOLVED_IMAGE_REPOSITORY}/${service}:${env.IMAGE_TAG}"
                                sh "docker push ${image}"
                            }
                            sh "docker logout ${registryHost} || true"
                        }
                    }
                }
            }
        }

        stage('生产环境部署确认（仅 production 执行）') {
            when {
                allOf {
                    expression { params.DEPLOY && params.ENVIRONMENT == 'production' && env.NO_SERVICE_CHANGE != 'true' }
                }
            }
            steps {
                input message: "确认将 ${env.SELECTED_SERVICES} 的镜像 ${env.IMAGE_TAG} 部署到生产环境？", ok: '确认部署'
            }
        }

        stage('测试数据库初始化（可选）') {
            when {
                allOf {
                    expression { params.ENVIRONMENT == 'test' && params.INITIALIZE_TEST_DATABASE }
                }
            }
            steps {
                sh 'sh deploy/scripts/initialize-test-databases.sh'
            }
        }

        stage('部署') {
            when {
                allOf {
                    expression { params.DEPLOY && env.NO_SERVICE_CHANGE != 'true' }
                }
            }
            steps {
                script {
                    String credentialId = "firstleg-${params.ENVIRONMENT}-env"
                    withCredentials([file(credentialsId: credentialId, variable: 'DEPLOY_ENV_FILE')]) {
                        sh "sh deploy/scripts/deploy-services.sh '${params.ENVIRONMENT}' '${env.RESOLVED_IMAGE_REPOSITORY}' '${env.IMAGE_TAG}' '${env.SELECTED_SERVICES}' \"\$DEPLOY_ENV_FILE\""
                    }
                }
            }
        }
    }

    post {
        always { cleanWs(deleteDirs: true, notFailBuild: true) }
    }
}