Ansible ci

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "ansible.python.interpreterPath": "/bin/python3"
+}

Jenkinsfile

@@ -1,121 +1,150 @@
 pipeline {
-
-	agent any
-/*	
-	tools {
-        maven "maven3"
+    // Agent we will use any Agent Node in the Jenkins to run this pipeline
+    agent any
+
+    tools {
+        // Mention the Tool configured in the Jenkins Server like Java, Maven, Git 
+        maven 'Maven_Tool'
+        jdk 'Java_Tool'
     }
-*/	
+
+    // Set Environment Variable for the Nexus to interact to download the dependencies and upload artifacts in the Nexus
     environment {
-        NEXUS_VERSION = "nexus3"
-        NEXUS_PROTOCOL = "http"
-        NEXUS_URL = "172.31.40.209:8081"
-        NEXUS_REPOSITORY = "vprofile-release"
-	NEXUS_REPO_ID    = "vprofile-release"
-        NEXUS_CREDENTIAL_ID = "nexuslogin"
-        ARTVERSION = "${env.BUILD_ID}"
+
+        NEXUS_USER = 'admin'
+        NEXUS_PASS = 'admin'
+        RELEASE_REPO = 'vprofile-release'
+        CENTRAL_REPO = 'vprofile-maven-central'
+        SNAP_REPO = 'vprofile-snapshot'
+        NEXUS_GRP_REPO = 'vprofile-maven-group'
+        NEXUSIP = '172.31.32.231'
+        NEXUSPORT = '8081'
+        NEXUS_LOGIN = 'NEXUS_CREDENTIALS'
+        SONAR_SCANNER = 'sonarqubescanner'
+        SONAR_SERVER_LOGIN = 'sonarserver'
+        NEXUS_CRED = credentials('Nexus_Login')
+
     }
-
-    stages{
-
-        stage('BUILD'){
+
+    stages {
+        stage('Build Applications') {
             steps {
-                sh 'mvn clean install -DskipTests'
+                sh 'mvn -s settings.xml -DskipTests install' // Run Install and use setting.xml file and skip unit test
             }
             post {
                 success {
-                    echo 'Now Archiving...'
-                    archiveArtifacts artifacts: '**/target/*.war'
+                    echo 'Now Archiving'
+                    archiveArtifacts artifacts: '**/*.war'
                 }
             }
         }
 
-	stage('UNIT TEST'){
+        // Test Application
+        stage('Test Application') {
             steps {
                 sh 'mvn test'
             }
         }
 
-	stage('INTEGRATION TEST'){
-            steps {
-                sh 'mvn verify -DskipUnitTests'
-            }
-        }
-
-        stage ('CODE ANALYSIS WITH CHECKSTYLE'){
+        // Check Style Application for Vulnerability scan
+        stage('CheckStyle for the Application') {
             steps {
                 sh 'mvn checkstyle:checkstyle'
             }
-            post {
-                success {
-                    echo 'Generated Analysis Result'
-                }
-            }
         }
 
-        stage('CODE ANALYSIS with SONARQUBE') {
-
-		  environment {
-             scannerHome = tool 'sonarscanner4'
-          }
+        // Upload Report to the Sonar Server to check the Vulnerability. Refer Documentation for code
+        stage('Sonar Qube Analysis') {
+            environment {
+                    scannerhome = tool "${SONAR_SCANNER}" // Mention the name used while configuring sonarscanner in the jenkins tools 
+                    // ADD THIS LINE BELOW to fix the Java 17 error
+
+                    SONAR_SCANNER_OPTS = "--add-opens java.base/java.lang=ALL-UNNAMED --add-opens java.base/java.util=ALL-UNNAMED --add-opens java.base/java.lang.reflect=ALL-UNNAMED"
+                }
 
-          steps {
-            withSonarQubeEnv('sonar-pro') {
-               sh '''${scannerHome}/bin/sonar-scanner -Dsonar.projectKey=vprofile \
+
+            steps {
+                withSonarQubeEnv("${SONAR_SERVER_LOGIN}") {
+                    sh '''${scannerhome}/bin/sonar-scanner -Dsonar.projectKey=vprofile \
                    -Dsonar.projectName=vprofile-repo \
                    -Dsonar.projectVersion=1.0 \
                    -Dsonar.sources=src/ \
                    -Dsonar.java.binaries=target/test-classes/com/visualpathit/account/controllerTest/ \
                    -Dsonar.junit.reportsPath=target/surefire-reports/ \
                    -Dsonar.jacoco.reportsPath=target/jacoco.exec \
                    -Dsonar.java.checkstyle.reportPaths=target/checkstyle-result.xml'''
+                } 
             }
-
-            timeout(time: 10, unit: 'MINUTES') {
-               waitForQualityGate abortPipeline: true
+        }
+        stage('Validate Quality Gates') {
+            steps {
+                //timeout is 1 hrs
+                timeout(time: 1, unit: 'HOURS') {
+                    waitForQualityGate abortPipeline: true
+                }
             }
-          }
         }
 
-        stage("Publish to Nexus Repository Manager") {
+        // Upload Artifacts to the Nexus Repos
+        stage('Upload Artifacts') {
             steps {
-                script {
-                    pom = readMavenPom file: "pom.xml";
-                    filesByGlob = findFiles(glob: "target/*.${pom.packaging}");
-                    echo "${filesByGlob[0].name} ${filesByGlob[0].path} ${filesByGlob[0].directory} ${filesByGlob[0].length} ${filesByGlob[0].lastModified}"
-                    artifactPath = filesByGlob[0].path;
-                    artifactExists = fileExists artifactPath;
-                    if(artifactExists) {
-                        echo "*** File: ${artifactPath}, group: ${pom.groupId}, packaging: ${pom.packaging}, version ${pom.version} ARTVERSION";
-                        nexusArtifactUploader(
-                            nexusVersion: NEXUS_VERSION,
-                            protocol: NEXUS_PROTOCOL,
-                            nexusUrl: NEXUS_URL,
-                            groupId: pom.groupId,
-                            version: ARTVERSION,
-                            repository: NEXUS_REPOSITORY,
-                            credentialsId: NEXUS_CREDENTIAL_ID,
-                            artifacts: [
-                                [artifactId: pom.artifactId,
-                                classifier: '',
-                                file: artifactPath,
-                                type: pom.packaging],
-                                [artifactId: pom.artifactId,
-                                classifier: '',
-                                file: "pom.xml",
-                                type: "pom"]
-                            ]
-                        );
-                    } 
-		    else {
-                        error "*** File: ${artifactPath}, could not be found";
-                    }
-                }
+                nexusArtifactUploader(
+                    nexusVersion: 'nexus3',
+                    protocol: 'http',
+                    nexusUrl: "${NEXUSIP}:${NEXUSPORT}",
+                    groupId: 'QA',
+                    version: "${env.BUILD_ID}-${env.BUILD_TIMESTAMP}",
+                    repository: "${RELEASE_REPO}",
+                    credentialsId: "${NEXUS_LOGIN}",
+                    artifacts: [
+                        [artifactId: 'vproapp',
+                        classifier: '',
+                        file: 'target/vprofile-v2.war',
+                        type: 'war']
+                    ]
+                )
             }
         }
 
+        stage('Ansible Deployment in App Stagging Server') {
+            steps {
+                ansiblePlaybook(
+                playbook: 'ansible/site.yml', // In this File we have used Import command to import the other playbooks 
+                inventory: 'ansible/inventory',
+                credentialsId: 'SSHKEY_APP_STAG', // Cred ID of the SSH Key used to connect to the app stagging server
+                colorized: true,
+                installation: 'ansible',
+                disableHostKeyChecking: true, // Means Jenkins will not check for the host key verification while connecting to the server
+                extraVars: 
+                [
+                    USER: 'admin',
+                    PASS: "${NEXUS_CRED}",
+                    nexusip: "${NEXUSIP}",
+                    reponame: 'vprofile-release',
+                    groupid: 'QA',
+                    time: "${env.BUILD_TIMESTAMP}",
+                    build: "${env.BUILD_ID}",
+                    vprofile_version: "${env.BUILD_ID}-${env.BUILD_TIMESTAMP}",
+                    artifactId: 'vproapp'
 
+                ]
+                )               
+            }  
+        }
     }
 
-
-}
+    // Email Notification Of the Status of Pipeline 
+    post {
+        always {
+            echo 'Pipeline has been completed Sending Pipeline Status through Email...'
+            emailext (
+                body: """<p>Jenkins Build Status: <b>${currentBuild.currentResult}</b></p>
+                         <p>Job Name: ${env.JOB_NAME}</p>
+                         <p>Build Number: ${env.BUILD_NUMBER}</p>
+                         <p>Check console output at: <a href='${env.BUILD_URL}'>${env.BUILD_URL}</a></p>""",
+                subject: "Jenkins Build ${currentBuild.currentResult}: Job ${env.JOB_NAME} | ${env.BUILD_NUMBER}", 
+                to: 'puneethkumar482000@gmail.com'
+            )
+        }
+    }
+}