-
Notifications
You must be signed in to change notification settings - Fork 15
/
Jenkinsfile_nightly
62 lines (52 loc) · 2.27 KB
/
Jenkinsfile_nightly
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
#!groovy
properties([
pipelineTriggers([cron('H 8 * * 1-5')]),
parameters([
string(name: 'URL_TO_TEST', defaultValue: 'http://cmc-claim-store-aat.service.core-compute-aat.internal/', description: 'The URL you want to run these tests against'),
string(name: 'SecurityRules',
defaultValue: 'https://raw.githubusercontent.com/hmcts/security-test-rules/master/conf/security-rules.conf',
description: 'The URL you want to run these tests against'),
])
])
@Library("Infrastructure")
def type = "java"
def product = "cmc"
def component = "claim-store"
def channel = '#cmc-tech-notification'
def secrets = [
// these are required for our integration tests container (initialised in Jenkins)
'cmc-${env}': [
secret('citizen-oauth-client-secret', 'OAUTH2_CLIENT_SECRET'),
secret('smoke-test-citizen-username', 'SMOKE_TEST_CITIZEN_USERNAME'),
secret('smoke-test-solicitor-username', 'SMOKE_TEST_SOLICITOR_USERNAME'),
secret('smoke-test-user-password', 'SMOKE_TEST_USER_PASSWORD'),
secret('generated-user-email-pattern', 'GENERATED_USER_EMAIL_PATTERN')
]
]
static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
[$class : 'AzureKeyVaultSecret',
secretType : 'Secret',
name : secretName,
version : '',
envVariable: envVar
]
}
// Vars needed for AKS testing
env.FRONTEND_BASE_URL = 'https://moneyclaims.aat.platform.hmcts.net'
env.IDAM_API_URL = 'https://idam-api.aat.platform.hmcts.net'
env.S2S_URL = 'http://rpe-service-auth-provider-aat.service.core-compute-aat.internal'
env.PDF_SERVICE_URL = 'http://cmc-pdf-service-aat.service.core-compute-aat.internal'
env.OIDC_ISSUER = 'https://forgerock-am.service.core-compute-idam-aat2.internal:8443/openam/oauth2/hmcts'
env.IDAM_WEB_URL = 'https://idam-web-public.aat.platform.hmcts.net'
withNightlyPipeline(type, product, component) {
env.TEST_URL = params.URL_TO_TEST
env.Rules = params.SecurityRules
loadVaultSecrets(secrets)
enableSlackNotifications(channel)
enableFortifyScan()
enableSecurityScan()
enableFullFunctionalTest(200)
afterAlways('fortify-scan') {
steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/Fortify Scan/**/*'
}
}