bundlewrap/Jenkinsfile

pipeline {
    agent any
    stages {
        stage('install_requirements') {
            steps {
                sh """
                    [ -d venv ] && rm -rf venv
                    virtualenv -p python3 venv
                    . venv/bin/activate
                    pip install --upgrade pip
                    pip install -r requirements.txt
                """
            }
        }
        stage('bw test') {
            parallel {
                stage('ignore missing vaults') {
                    steps {
                        sh """
                            . venv/bin/activate
                            bw test --ignore-missing-faults
                        """
                    }
                }
                stage('dummy mode') {
                    when {
                        branch 'master'
                    }
                    steps {
                        sh """
                            . venv/bin/activate
                            export BW_VAULT_DUMMY_MODE=1
                            bw test
                        """
                    }
                }
                stage('secret rotation') {
                    steps {
                        sh """
                            . venv/bin/activate
                            export BW_VAULT_DUMMY_MODE=1
                            bw test -s 'root on,registration_shared_secret'
                        """
                    }
                }
                stage('determinism') {
                    steps {
                        sh """
                            . venv/bin/activate
                            export BW_VAULT_DUMMY_MODE=1
                            bw test --metadata-determinism 3 --config-determinism 3
                        """
                    }
                }
            }
        }
    }
    post {
        always {
            sh 'rm -rf venv'
        }
    }
}