pipeline {
    agent any

    environment {
        HARBOR_URL      = '192.168.108.200:80'
        HARBOR_PROJECT  = 'vaishnavi-ecommerce'
        IMAGE_TAG       = "${env.BUILD_NUMBER}"
        K8S_CRED_ID     = 'k8s-config'
        K8S_NAMESPACE   = 'ecommerce'
        K8S_OVERLAY     = 'k8s/overlays/on-premise'

        IMAGE           = '192.168.108.200:80/vaishnavi-ecommerce/ecommerce-backend'

        SONAR_HOST_URL  = 'http://sonarqube.example.com:9000'   // ← update this
        SONAR_PROJECT   = 'ecommerce-backend'
    }

    options {
        buildDiscarder(logRotator(numToKeepStr: '10'))
        timeout(time: 30, unit: 'MINUTES')
        disableConcurrentBuilds()
    }

    stages {

        stage('Checkout') {
            steps {
                checkout scm
                echo "Workspace: ${env.WORKSPACE}"
                sh 'ls -la'
            }
        }

        stage('Test') {
            steps {
                sh 'npm ci && npm test -- --reporter=verbose 2>&1 || true'
            }
        }

        stage('SonarQube Analysis') {
            steps {
                withSonarQubeEnv('SonarQube') {
                    sh """
                        npx sonar-scanner \
                            -Dsonar.projectKey=${SONAR_PROJECT} \
                            -Dsonar.projectName='eCommerce Backend' \
                            -Dsonar.sources=src \
                            -Dsonar.host.url=${SONAR_HOST_URL}
                    """
                }
            }
        }

        stage('Quality Gate') {
            steps {
                timeout(time: 5, unit: 'MINUTES') {
                    waitForQualityGate abortPipeline: false
                }
            }
        }

        stage('Build Image') {
            steps {
                sh """
                    docker build \
                        -f Dockerfile \
                        -t ${IMAGE}:${IMAGE_TAG} \
                        -t ${IMAGE}:latest \
                        .
                """
            }
        }

        stage('Push to Harbor') {
            steps {
                withCredentials([usernamePassword(
                    credentialsId: 'harbor-creds',
                    usernameVariable: 'HARBOR_USER',
                    passwordVariable: 'HARBOR_PASS'
                )]) {
                    sh """
                        echo \$HARBOR_PASS | docker login ${HARBOR_URL} -u \$HARBOR_USER --password-stdin
                        docker push ${IMAGE}:${IMAGE_TAG}
                        docker push ${IMAGE}:latest
                    """
                }
            }
        }

        stage('Patch Image Tag') {
            steps {
                // kustomize edit set image patches the 'name: ecommerce-backend'
                // entry in overlays/on-premise/kustomization.yaml
                dir("${K8S_OVERLAY}") {
                    sh """
                        kustomize edit set image \
                            ecommerce-backend=${IMAGE}:${IMAGE_TAG}
                    """
                }
            }
        }

        stage('Deploy to K8s') {
            steps {
                withKubeConfig([credentialsId: "${K8S_CRED_ID}"]) {
                    sh "kubectl apply -k ${K8S_OVERLAY}"

                    // Databases first — they must be Ready before the app starts
                    sh "kubectl rollout status statefulset/postgres -n ${K8S_NAMESPACE} --timeout=300s"
                    sh "kubectl rollout status statefulset/mongodb  -n ${K8S_NAMESPACE} --timeout=300s"

                    // Then the main app (initContainers wait for DBs + run migrations)
                    sh "kubectl rollout status deployment/ecommerce-app -n ${K8S_NAMESPACE} --timeout=300s"

                    echo "✅ Backend deployed successfully."
                }
            }
        }

        stage('Smoke Test') {
            steps {
                withKubeConfig([credentialsId: "${K8S_CRED_ID}"]) {
                    // Health endpoint is /health on port 80 (ClusterIP service maps 80→3000)
                    sh """
                        kubectl run smoke-${BUILD_NUMBER} \
                            --image=curlimages/curl:latest \
                            --restart=Never \
                            --rm \
                            --attach \
                            -n ${K8S_NAMESPACE} \
                            -- curl -sf http://ecommerce-app:80/health \
                        && echo "Health check PASSED" \
                        || echo "Health check FAILED (non-blocking)"
                    """
                }
            }
        }

        stage('Clean Up') {
            steps {
                sh """
                    docker rmi ${IMAGE}:${IMAGE_TAG} || true
                    docker rmi ${IMAGE}:latest       || true
                """
            }
        }
    }

    post {
        success {
            echo "✅  Build #${env.BUILD_NUMBER} — eCommerce Backend deployed → http://api.local"
        }
        failure {
            echo "❌  Pipeline failed. Check stage logs above."
        }
        always {
            sh "docker logout ${HARBOR_URL} || true"
        }
    }
}