Feat: Process orphaned coe clusters for K8S jobs
[releng/global-jjb.git] / jjb / lf-maven-jobs.yaml
1 ---
2 # This file contains job templates for Maven projects.
3
4 ##########
5 # Macros #
6 ##########
7
8 - builder:
9     name: lf-maven-build
10     builders:
11       - inject:
12           properties-content: "MAVEN_GOALS={mvn-goals}"
13       - shell: !include-raw-escape:
14           - ../shell/common-variables.sh
15           - ../shell/maven-build.sh
16
17 - builder:
18     name: lf-maven-deploy
19     builders:
20       - shell: !include-raw:
21           - ../shell/common-variables.sh
22           - ../shell/maven-deploy.sh
23
24 - builder:
25     name: lf-maven-versions-plugin
26     builders:
27       - conditional-step:
28           condition-kind: boolean-expression
29           condition-expression: "{maven-versions-plugin}"
30           steps:
31             - inject:
32                 properties-file: "{version-properties-file}"
33             - maven-target:
34                 maven-version: "{mvn-version}"
35                 pom: "{mvn-pom}"
36                 goals: "versions:set versions:update-child-modules versions:commit -B"
37                 properties:
38                   - "newVersion=${{release_version}}"
39                 settings: "{mvn-settings}"
40                 settings-type: cfp
41                 global-settings: "global-settings"
42                 global-settings-type: cfp
43
44 - builder:
45     name: lf-maven-stage
46     builders:
47       - lf-provide-maven-settings:
48           global-settings-file: "{mvn-global-settings}"
49           settings-file: "{mvn-settings}"
50       - lf-infra-create-netrc:
51           server-id: "{mvn-staging-id}"
52       # include-raw-escape fails due to JJB bug
53       - shell: !include-raw-escape:
54           - ../shell/common-variables.sh
55           - ../shell/maven-stage.sh
56       - lf-provide-maven-settings-cleanup
57
58 - builder:
59     name: lf-update-java-alternatives
60     builders:
61       - inject:
62           # Work around inject plugin overriding our GIT_URL variable incorrectly
63           # https://issues.jenkins-ci.org/browse/JENKINS-49775
64           properties-content: |
65             SET_JDK_VERSION={java-version}
66             GIT_URL="$GIT_URL"
67       - shell: !include-raw-escape: ../shell/update-java-alternatives.sh
68       - inject:
69           properties-file: "/tmp/java.env"
70
71 ####################
72 # COMMON FUNCTIONS #
73 ####################
74
75 - lf_maven_common: &lf_maven_common
76     name: lf-maven-common
77
78     ######################
79     # Default parameters #
80     ######################
81
82     archive-artifacts: >
83       **/*.log
84       **/hs_err_*.log
85       **/target/**/feature.xml
86       **/target/failsafe-reports/failsafe-summary.xml
87       **/target/surefire-reports/*-output.txt
88
89     #####################
90     # Job Configuration #
91     #####################
92
93     project-type: freestyle
94     node: "{build-node}"
95
96     properties:
97       - lf-infra-properties:
98           build-days-to-keep: "{build-days-to-keep}"
99
100     parameters:
101       - lf-infra-parameters:
102           project: "{project}"
103           branch: "{branch}"
104           stream: "{stream}"
105       - lf-infra-maven-parameters:
106           mvn-opts: "{mvn-opts}"
107           mvn-params: "{mvn-params}"
108           mvn-version: "{mvn-version}"
109       - string:
110           name: ARCHIVE_ARTIFACTS
111           default: "{archive-artifacts}"
112           description: Artifacts to archive to the logs server.
113
114     wrappers:
115       - lf-infra-wrappers:
116           build-timeout: "{build-timeout}"
117           jenkins-ssh-credential: "{jenkins-ssh-credential}"
118
119     publishers:
120       # TODO: Make email notification work.
121       # - lf-infra-email-notify:
122       #     email-recipients: '{email-recipients}'
123       #     email-prefix: '[releng]'
124       - lf-infra-publish
125
126 #############
127 # Maven CLM #
128 #############
129
130 - lf_maven_clm: &lf_maven_clm
131     name: lf-maven-clm
132
133     ######################
134     # Default parameters #
135     ######################
136
137     branch: master
138     build-days-to-keep: 30 # 30 days for troubleshooting purposes
139     build-timeout: 60
140     disable-job: false
141     git-url: "$GIT_URL/$PROJECT"
142     github-url: "https://github.com"
143     java-version: openjdk11
144     mvn-global-settings: global-settings
145     mvn-goals: clean install
146     mvn-opts: ""
147     mvn-params: ""
148     mvn-version: mvn35
149     nexus-iq-namespace: "" # Recommend a trailing dash when set. Example: odl-
150     nexus-iq-stage: "build"
151     stream: master
152     submodule-recursive: true
153     submodule-timeout: 10
154     submodule-disable: false
155
156     nexus_iq_scan_patterns:
157       - "**/*.ear"
158       - "**/*.jar"
159       - "**/*.tar.gz"
160       - "**/*.war"
161       - "**/*.zip"
162
163     gerrit_clm_triggers:
164       - comment-added-contains-event:
165           comment-contains-value: '^Patch Set\s+\d+:\s+run-clm\s*$'
166
167     parameters:
168       - lf-infra-parameters:
169           project: "{project}"
170           branch: "{branch}"
171           stream: "{stream}"
172       - lf-infra-maven-parameters:
173           mvn-opts: "{mvn-opts}"
174           mvn-params: "{mvn-params}"
175           mvn-version: "{mvn-version}"
176       - string:
177           name: ARCHIVE_ARTIFACTS
178           default: "{archive-artifacts}"
179           description: Artifacts to archive to the logs server.
180       - lf-clm-parameters:
181           nexus-iq-stage: "{nexus-iq-stage}"
182
183     #####################
184     # Job Configuration #
185     #####################
186
187     disabled: "{disable-job}"
188
189     builders:
190       - lf-infra-pre-build
191       - lf-maven-install:
192           mvn-version: "{mvn-version}"
193       - lf-update-java-alternatives:
194           java-version: "{java-version}"
195       - lf-provide-maven-settings:
196           global-settings-file: "{mvn-global-settings}"
197           settings-file: "{mvn-settings}"
198       - lf-infra-sonatype-clm:
199           mvn-goals: "{mvn-goals}"
200       - lf-provide-maven-settings-cleanup
201       - shell: 'find . -regex ".*karaf/target" | xargs rm -rf'
202       - nexus-iq-policy-evaluator:
203           stage: "{nexus-iq-stage}"
204           application-type: "manual"
205           application-id: "{nexus-iq-namespace}{project-name}"
206           scan-patterns: "{obj:nexus_iq_scan_patterns}"
207           fail-build-network-error: true
208
209 - builder:
210     name: lf-infra-sonatype-clm
211     # Run a CLM scan build with Maven
212     builders:
213       - inject:
214           properties-content: |
215             MAVEN_GOALS={mvn-goals}
216       - shell: !include-raw-escape:
217           - ../shell/common-variables.sh
218           - ../shell/sonatype-clm.sh
219
220 - job-template:
221     name: "{project-name}-maven-clm-{stream}"
222     id: gerrit-maven-clm
223     <<: *lf_maven_common
224     # yamllint disable-line rule:key-duplicates
225     <<: *lf_maven_clm
226
227     scm:
228       - lf-infra-gerrit-scm:
229           jenkins-ssh-credential: "{jenkins-ssh-credential}"
230           git-url: "{git-url}"
231           refspec: "$GERRIT_REFSPEC"
232           branch: "$GERRIT_BRANCH"
233           submodule-recursive: "{submodule-recursive}"
234           submodule-timeout: "{submodule-timeout}"
235           submodule-disable: "{submodule-disable}"
236           choosing-strategy: default
237
238     triggers:
239       # Build weekly on Saturdays
240       - timed: "H H * * 6"
241       - gerrit:
242           server-name: "{gerrit-server-name}"
243           trigger-on: "{obj:gerrit_clm_triggers}"
244           projects:
245             - project-compare-type: ANT
246               project-pattern: "{project}"
247               branches:
248                 - branch-compare-type: ANT
249                   branch-pattern: "**/{branch}"
250           skip-vote:
251             successful: true
252             failed: true
253             unstable: true
254             notbuilt: true
255
256 - job-template:
257     name: "{project-name}-maven-clm-{stream}"
258     id: github-maven-clm
259     <<: *lf_maven_common
260     # yamllint disable-line rule:key-duplicates
261     <<: *lf_maven_clm
262
263     properties:
264       - lf-infra-properties:
265           build-days-to-keep: "{build-days-to-keep}"
266       - github:
267           url: "{github-url}/{github-org}/{project}"
268
269     scm:
270       - lf-infra-github-scm:
271           url: "{git-clone-url}{github-org}/{project}"
272           refspec: ""
273           branch: "refs/heads/{branch}"
274           submodule-recursive: "{submodule-recursive}"
275           submodule-timeout: "{submodule-timeout}"
276           submodule-disable: "{submodule-disable}"
277           choosing-strategy: default
278           jenkins-ssh-credential: "{jenkins-ssh-credential}"
279
280     triggers:
281       # Build weekly on Saturdays
282       - timed: "H H * * 6"
283       - github-pull-request:
284           trigger-phrase: "^run-clm$"
285           only-trigger-phrase: true
286           status-context: "CLM"
287           permit-all: true
288           github-hooks: true
289           org-list:
290             - "{github-org}"
291           white-list: "{obj:github_pr_allowlist}"
292           admin-list: "{obj:github_pr_admin_list}"
293           white-list-target-branches:
294             - "{branch}"
295
296 #########################
297 # Maven Javadoc Publish #
298 #########################
299
300 - lf_maven_javadoc_publish: &lf_maven_javadoc_publish
301     name: lf-maven-javadoc-publish
302
303     ######################
304     # Default parameters #
305     ######################
306
307     branch: master
308     build-days-to-keep: 30 # 30 days in case a release takes long to get approved.
309     build-timeout: 60
310     disable-job: false
311     git-url: "$GIT_URL/$PROJECT"
312     github-url: "https://github.com"
313     java-version: openjdk11
314     mvn-dir: "."
315     mvn-global-settings: global-settings
316     mvn-opts: ""
317     mvn-params: ""
318     mvn-version: mvn35
319     stream: master
320     submodule-recursive: true
321     submodule-timeout: 10
322     submodule-disable: false
323
324     gerrit_merge_triggers:
325       - change-merged-event
326       - comment-added-contains-event:
327           comment-contains-value: '^Patch Set\s+\d+:\s+remerge\s*$'
328
329     #####################
330     # Job Configuration #
331     #####################
332
333     disabled: "{disable-job}"
334
335     builders:
336       - lf-infra-pre-build
337       - lf-maven-install:
338           mvn-version: "{mvn-version}"
339       - lf-update-java-alternatives:
340           java-version: "{java-version}"
341       - lf-provide-maven-settings:
342           global-settings-file: "{mvn-global-settings}"
343           settings-file: "{mvn-settings}"
344       - lf-infra-create-netrc:
345           server-id: "{mvn-site-id}"
346       - inject:
347           properties-content: |
348             DEPLOY_PATH={javadoc-path}
349             MAVEN_DIR={mvn-dir}
350       - shell: !include-raw-escape:
351           - ../shell/common-variables.sh
352           - ../shell/maven-javadoc-generate.sh
353           - ../shell/maven-javadoc-publish.sh
354       - lf-provide-maven-settings-cleanup
355
356 - job-template:
357     name: "{project-name}-maven-javadoc-publish-{stream}-{java-version}"
358     id: gerrit-maven-javadoc-publish
359     <<: *lf_maven_common
360     # yamllint disable-line rule:key-duplicates
361     <<: *lf_maven_javadoc_publish
362
363     git-url: "$GIT_URL/$GERRIT_PROJECT"
364
365     scm:
366       - lf-infra-gerrit-scm:
367           git-url: "{git-url}"
368           refspec: ""
369           branch: "{branch}"
370           submodule-recursive: "{submodule-recursive}"
371           submodule-timeout: "{submodule-timeout}"
372           submodule-disable: "{submodule-disable}"
373           choosing-strategy: default
374           jenkins-ssh-credential: "{jenkins-ssh-credential}"
375
376     triggers:
377       - gerrit:
378           server-name: "{gerrit-server-name}"
379           trigger-on: "{obj:gerrit_merge_triggers}"
380           projects:
381             - project-compare-type: ANT
382               project-pattern: "{project}"
383               branches:
384                 - branch-compare-type: ANT
385                   branch-pattern: "**/{branch}"
386
387 - job-template:
388     name: "{project-name}-maven-javadoc-publish-{stream}-{java-version}"
389     id: github-maven-javadoc-publish
390     <<: *lf_maven_common
391     # yamllint disable-line rule:key-duplicates
392     <<: *lf_maven_javadoc_publish
393
394     properties:
395       - lf-infra-properties:
396           build-days-to-keep: "{build-days-to-keep}"
397       - github:
398           url: "{github-url}/{github-org}/{project}"
399
400     scm:
401       - lf-infra-github-scm:
402           url: "{git-clone-url}{github-org}/{project}"
403           refspec: ""
404           branch: "{branch}"
405           submodule-recursive: "{submodule-recursive}"
406           submodule-timeout: "{submodule-timeout}"
407           submodule-disable: "{submodule-disable}"
408           choosing-strategy: default
409           jenkins-ssh-credential: "{jenkins-ssh-credential}"
410
411     triggers:
412       - github
413       - pollscm:
414           cron: ""
415       - github-pull-request:
416           trigger-phrase: "^remerge$"
417           only-trigger-phrase: true
418           status-context: "Maven Javadoc Publish"
419           permit-all: true
420           github-hooks: true
421           org-list:
422             - "{github-org}"
423           white-list: "{obj:github_pr_allowlist}"
424           admin-list: "{obj:github_pr_admin_list}"
425           white-list-target-branches:
426             - "{branch}"
427
428 ########################
429 # Maven Javadoc Verify #
430 ########################
431
432 - lf_maven_javadoc_verify: &lf_maven_javadoc_verify
433     name: lf-maven-javadoc-verify
434
435     ######################
436     # Default parameters #
437     ######################
438
439     branch: master
440     build-days-to-keep: 30 # 30 days in case a release takes long to get approved.
441     build-timeout: 60
442     disable-job: false
443     git-url: "$GIT_URL/$PROJECT"
444     github-url: "https://github.com"
445     java-version: openjdk11
446     mvn-dir: "."
447     mvn-global-settings: global-settings
448     mvn-opts: ""
449     mvn-params: ""
450     mvn-version: mvn35
451     stream: master
452     submodule-recursive: true
453     submodule-timeout: 10
454     submodule-disable: false
455
456     gerrit_verify_triggers:
457       - patchset-created-event:
458           exclude-drafts: true
459           exclude-trivial-rebase: false
460           exclude-no-code-change: false
461       - draft-published-event
462       - comment-added-contains-event:
463           comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$'
464
465     #####################
466     # Job Configuration #
467     #####################
468
469     concurrent: true
470     disabled: "{disable-job}"
471
472     builders:
473       - lf-infra-pre-build
474       - lf-maven-install:
475           mvn-version: "{mvn-version}"
476       - lf-update-java-alternatives:
477           java-version: "{java-version}"
478       - lf-provide-maven-settings:
479           global-settings-file: "{mvn-global-settings}"
480           settings-file: "{mvn-settings}"
481       - inject:
482           properties-content: |
483             MAVEN_DIR={mvn-dir}
484       - shell: !include-raw-escape:
485           - ../shell/common-variables.sh
486           - ../shell/maven-javadoc-generate.sh
487       - lf-provide-maven-settings-cleanup
488
489 - job-template:
490     name: "{project-name}-maven-javadoc-verify-{stream}-{java-version}"
491     id: gerrit-maven-javadoc-verify
492     <<: *lf_maven_common
493     # yamllint disable-line rule:key-duplicates
494     <<: *lf_maven_javadoc_verify
495
496     scm:
497       - lf-infra-gerrit-scm:
498           jenkins-ssh-credential: "{jenkins-ssh-credential}"
499           git-url: "{git-url}"
500           refspec: "$GERRIT_REFSPEC"
501           branch: "$GERRIT_BRANCH"
502           submodule-recursive: "{submodule-recursive}"
503           submodule-timeout: "{submodule-timeout}"
504           submodule-disable: "{submodule-disable}"
505           choosing-strategy: gerrit
506
507     triggers:
508       - gerrit:
509           server-name: "{gerrit-server-name}"
510           trigger-on: "{obj:gerrit_verify_triggers}"
511           projects:
512             - project-compare-type: ANT
513               project-pattern: "{project}"
514               branches:
515                 - branch-compare-type: ANT
516                   branch-pattern: "**/{branch}"
517
518 - job-template:
519     name: "{project-name}-maven-javadoc-verify-{stream}-{java-version}"
520     id: github-maven-javadoc-verify
521     <<: *lf_maven_common
522     # yamllint disable-line rule:key-duplicates
523     <<: *lf_maven_javadoc_verify
524
525     properties:
526       - lf-infra-properties:
527           build-days-to-keep: "{build-days-to-keep}"
528       - github:
529           url: "{github-url}/{github-org}/{project}"
530
531     scm:
532       - lf-infra-github-scm:
533           url: "{git-clone-url}{github-org}/{project}"
534           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
535           branch: "$sha1"
536           submodule-recursive: "{submodule-recursive}"
537           submodule-timeout: "{submodule-timeout}"
538           submodule-disable: "{submodule-disable}"
539           choosing-strategy: default
540           jenkins-ssh-credential: "{jenkins-ssh-credential}"
541
542     triggers:
543       - github-pull-request:
544           trigger-phrase: ^(recheck|reverify)$
545           only-trigger-phrase: false
546           status-context: "Maven Javadoc Verify"
547           permit-all: true
548           github-hooks: true
549           white-list-target-branches:
550             - "{branch}"
551
552 ###############
553 # Maven Merge #
554 ###############
555
556 - lf_maven_merge: &lf_maven_merge
557     name: lf-maven-merge
558
559     ######################
560     # Default parameters #
561     ######################
562
563     branch: master
564     build-days-to-keep: 30 # 30 days in case we need to troubleshoot
565     build-timeout: 60
566     cron: "@daily"
567     disable-job: false
568     git-url: "$GIT_URL/$PROJECT"
569     github-url: "https://github.com"
570     java-version: openjdk11
571     mvn-global-settings: global-settings
572     mvn-goals: clean deploy
573     mvn-opts: ""
574     mvn-params: "-Dmerge"
575     mvn-version: mvn35
576     nexus-cut-dirs: 6 # Number of dirs in the Nexus path to remove for wget -r.
577     stream: master
578     submodule-recursive: true
579     submodule-timeout: 10
580     submodule-disable: false
581
582     gerrit_merge_triggers:
583       - change-merged-event
584       - comment-added-contains-event:
585           comment-contains-value: '^Patch Set\s+\d+:\s+remerge\s*$'
586
587     gerrit_trigger_file_paths:
588       - compare-type: REG_EXP
589         pattern: ".*"
590
591     # github_included_regions MUST match gerrit_trigger_file_paths
592     github_included_regions:
593       - ".*"
594
595     post_build_trigger: ""
596
597     #####################
598     # Job Configuration #
599     #####################
600
601     disabled: "{disable-job}"
602
603     builders:
604       - lf-infra-pre-build
605       - lf-jacoco-nojava-workaround
606       - lf-maven-install:
607           mvn-version: "{mvn-version}"
608       - lf-update-java-alternatives:
609           java-version: "{java-version}"
610       - lf-provide-maven-settings:
611           global-settings-file: "{mvn-global-settings}"
612           settings-file: "{mvn-settings}"
613       - lf-infra-create-netrc:
614           server-id: "{mvn-snapshot-id}"
615       - inject:
616           properties-content: |
617             NEXUS_CUT_DIRS={nexus-cut-dirs}
618             NEXUS_REPO={nexus-snapshot-repo}
619       - shell: !include-raw-escape: ../shell/maven-fetch-metadata.sh
620       - lf-maven-build:
621           mvn-goals: "{mvn-goals}"
622       - lf-maven-deploy
623       - lf-provide-maven-settings-cleanup
624
625     publishers:
626       - findbugs
627       - lf-jacoco-report
628       - lf-infra-publish
629       - trigger-parameterized-builds: "{obj:post_build_trigger}"
630
631 - job-template:
632     name: "{project-name}-maven-merge-{stream}"
633     id: gerrit-maven-merge
634     <<: *lf_maven_common
635     # yamllint disable-line rule:key-duplicates
636     <<: *lf_maven_merge
637
638     scm:
639       - lf-infra-gerrit-scm:
640           jenkins-ssh-credential: "{jenkins-ssh-credential}"
641           git-url: "{git-url}"
642           refspec: "$GERRIT_REFSPEC"
643           branch: "$GERRIT_BRANCH"
644           submodule-recursive: "{submodule-recursive}"
645           submodule-timeout: "{submodule-timeout}"
646           submodule-disable: "{submodule-disable}"
647           choosing-strategy: default
648
649     triggers:
650       - timed: "{obj:cron}"
651       - gerrit:
652           server-name: "{gerrit-server-name}"
653           trigger-on: "{obj:gerrit_merge_triggers}"
654           projects:
655             - project-compare-type: ANT
656               project-pattern: "{project}"
657               branches:
658                 - branch-compare-type: ANT
659                   branch-pattern: "**/{branch}"
660               file-paths: "{obj:gerrit_trigger_file_paths}"
661
662 - job-template:
663     name: "{project-name}-maven-merge-{stream}"
664     id: github-maven-merge
665     <<: *lf_maven_common
666     # yamllint disable-line rule:key-duplicates
667     <<: *lf_maven_merge
668
669     properties:
670       - lf-infra-properties:
671           build-days-to-keep: "{build-days-to-keep}"
672       - github:
673           url: "{github-url}/{github-org}/{project}"
674
675     scm:
676       - lf-infra-github-scm:
677           url: "{git-clone-url}{github-org}/{project}"
678           refspec: ""
679           branch: "refs/heads/{branch}"
680           submodule-recursive: "{submodule-recursive}"
681           submodule-timeout: "{submodule-timeout}"
682           submodule-disable: "{submodule-disable}"
683           choosing-strategy: default
684           jenkins-ssh-credential: "{jenkins-ssh-credential}"
685
686     triggers:
687       - timed: "{obj:cron}"
688       - github
689       - pollscm:
690           cron: ""
691       - github-pull-request:
692           trigger-phrase: "^remerge$"
693           only-trigger-phrase: true
694           status-context: "Maven Merge"
695           permit-all: true
696           github-hooks: true
697           org-list:
698             - "{github-org}"
699           white-list: "{obj:github_pr_allowlist}"
700           admin-list: "{obj:github_pr_admin_list}"
701           white-list-target-branches:
702             - "{branch}"
703           included-regions: "{obj:github_included_regions}"
704
705 ##########################
706 # Maven Merge for Docker #
707 ##########################
708
709 - lf_maven_docker_merge: &lf_maven_docker_merge
710     name: lf-maven-docker-merge
711
712     builders:
713       - lf-infra-pre-build
714       - lf-jacoco-nojava-workaround
715       - lf-maven-install:
716           mvn-version: "{mvn-version}"
717       - lf-infra-docker-login:
718           global-settings-file: "{mvn-global-settings}"
719           settings-file: "{mvn-settings}"
720       - lf-update-java-alternatives:
721           java-version: "{java-version}"
722       # must provide maven settings AFTER docker due to its cleanup
723       - lf-provide-maven-settings:
724           global-settings-file: "{mvn-global-settings}"
725           settings-file: "{mvn-settings}"
726       - lf-infra-create-netrc:
727           server-id: "{mvn-snapshot-id}"
728       - inject:
729           properties-content: |
730             NEXUS_CUT_DIRS={nexus-cut-dirs}
731             NEXUS_REPO={nexus-snapshot-repo}
732             CONTAINER_PULL_REGISTRY={container-public-registry}
733             CONTAINER_PUSH_REGISTRY={container-snapshot-registry}
734       - shell: !include-raw-escape: ../shell/maven-fetch-metadata.sh
735       - lf-maven-build:
736           mvn-goals: "{mvn-goals}"
737       # NO lf-maven-deploy
738       - lf-provide-maven-settings-cleanup
739
740 - job-template:
741     name: "{project-name}-maven-docker-merge-{stream}"
742     id: gerrit-maven-docker-merge
743     <<: *lf_maven_common
744     # yamllint disable-line rule:key-duplicates
745     <<: *lf_maven_merge
746     # yamllint disable-line rule:key-duplicates
747     <<: *lf_maven_docker_merge
748
749     scm:
750       - lf-infra-gerrit-scm:
751           jenkins-ssh-credential: "{jenkins-ssh-credential}"
752           git-url: "{git-url}"
753           refspec: "$GERRIT_REFSPEC"
754           branch: "$GERRIT_BRANCH"
755           submodule-recursive: "{submodule-recursive}"
756           submodule-timeout: "{submodule-timeout}"
757           submodule-disable: "{submodule-disable}"
758           choosing-strategy: default
759
760     triggers:
761       - gerrit:
762           server-name: "{gerrit-server-name}"
763           trigger-on: "{obj:gerrit_merge_triggers}"
764           projects:
765             - project-compare-type: ANT
766               project-pattern: "{project}"
767               branches:
768                 - branch-compare-type: ANT
769                   branch-pattern: "**/{branch}"
770               file-paths: "{obj:gerrit_trigger_file_paths}"
771
772 - job-template:
773     name: "{project-name}-maven-docker-merge-{stream}"
774     id: github-maven-docker-merge
775     <<: *lf_maven_common
776     # yamllint disable-line rule:key-duplicates
777     <<: *lf_maven_merge
778     # yamllint disable-line rule:key-duplicates
779     <<: *lf_maven_docker_merge
780
781     properties:
782       - lf-infra-properties:
783           build-days-to-keep: "{build-days-to-keep}"
784       - github:
785           url: "{github-url}/{github-org}/{project}"
786
787     scm:
788       - lf-infra-github-scm:
789           url: "{git-clone-url}{github-org}/{project}"
790           refspec: ""
791           branch: "refs/heads/{branch}"
792           submodule-recursive: "{submodule-recursive}"
793           submodule-timeout: "{submodule-timeout}"
794           submodule-disable: "{submodule-disable}"
795           choosing-strategy: default
796           jenkins-ssh-credential: "{jenkins-ssh-credential}"
797
798     triggers:
799       - github
800       - pollscm:
801           cron: ""
802       - github-pull-request:
803           trigger-phrase: "^remerge$"
804           only-trigger-phrase: true
805           status-context: "Maven Docker Merge"
806           permit-all: true
807           github-hooks: true
808           org-list:
809             - "{github-org}"
810           white-list: "{obj:github_pr_allowlist}"
811           admin-list: "{obj:github_pr_admin_list}"
812           white-list-target-branches:
813             - "{branch}"
814           included-regions: "{obj:github_included_regions}"
815
816 ###############
817 # Maven Stage #
818 ###############
819
820 - lf_maven_stage: &lf_maven_stage
821     name: lf-maven-stage
822
823     ######################
824     # Default parameters #
825     ######################
826
827     branch: master
828     build-days-to-keep: 30 # 30 days in case a release takes long to get approved.
829     build-timeout: 60
830     cron: "@daily"
831     disable-job: false
832     git-url: "$GIT_URL/$PROJECT"
833     github-url: "https://github.com"
834     java-version: openjdk11
835     maven-versions-plugin: false
836     version-properties-file: version.properties
837     mvn-central: false
838     mvn-global-settings: global-settings
839     mvn-goals: clean deploy
840     mvn-opts: ""
841     mvn-params: ""
842     mvn-version: mvn35
843     ossrh-profile-id: ""
844     mvn-pom: ""
845     sign-artifacts: false
846     sign-mode: serial
847     stream: master
848     submodule-recursive: true
849     submodule-timeout: 10
850     submodule-disable: false
851
852     gerrit_release_triggers:
853       - comment-added-contains-event:
854           comment-contains-value: '^Patch Set\s+\d+:\s+stage-(maven-)?release\s*$'
855
856     gerrit_trigger_file_paths:
857       - compare-type: ANT
858         pattern: "**"
859
860     # github_included_regions MUST match gerrit_trigger_file_paths
861     github_included_regions:
862       - ".*"
863
864     #####################
865     # Job Configuration #
866     #####################
867
868     disabled: "{disable-job}"
869
870     parameters:
871       - lf-infra-parameters:
872           project: "{project}"
873           branch: "{branch}"
874           stream: "{stream}"
875       - lf-infra-maven-parameters:
876           mvn-opts: "{mvn-opts}"
877           mvn-params: "{mvn-params}"
878           mvn-version: "{mvn-version}"
879           staging-profile-id: "{staging-profile-id}"
880       - bool:
881           name: MAVEN_VERSIONS_PLUGIN
882           default: "{maven-versions-plugin}"
883           description: Use maven-versions-plugin to update pom versions.
884       - string:
885           name: ARCHIVE_ARTIFACTS
886           default: "{archive-artifacts}"
887           description: Artifacts to archive to the logs server.
888       - string:
889           name: STAGING_PROFILE_ID
890           default: "{staging-profile-id}"
891           description: Nexus staging profile ID.
892
893     builders:
894       - lf-infra-pre-build
895       - lf-jacoco-nojava-workaround
896       - lf-maven-install:
897           mvn-version: "{mvn-version}"
898       - lf-update-java-alternatives:
899           java-version: "{java-version}"
900       - lf-provide-maven-settings:
901           global-settings-file: "{mvn-global-settings}"
902           settings-file: "{mvn-settings}"
903       - lf-maven-versions-plugin:
904           maven-versions-plugin: "{maven-versions-plugin}"
905           version-properties-file: "{version-properties-file}"
906           mvn-version: "{mvn-version}"
907           mvn-pom: "{mvn-pom}"
908           mvn-settings: "{mvn-settings}"
909       - shell: !include-raw-escape: ../shell/maven-patch-release.sh
910       - lf-maven-build:
911           mvn-goals: "{mvn-goals}"
912       - lf-sigul-sign-dir:
913           sign-artifacts: "{sign-artifacts}"
914           sign-dir: "$WORKSPACE/m2repo"
915           sign-mode: "{sign-mode}"
916       - lf-maven-stage:
917           mvn-global-settings: "{mvn-global-settings}"
918           mvn-settings: "{mvn-settings}"
919           mvn-staging-id: "{mvn-staging-id}"
920       - lf-maven-central:
921           mvn-central: "{mvn-central}"
922           mvn-global-settings: "{mvn-global-settings}"
923           mvn-settings: "{mvn-settings}"
924           ossrh-profile-id: "{ossrh-profile-id}"
925       - lf-provide-maven-settings-cleanup
926
927 - job-template:
928     name: "{project-name}-maven-stage-{stream}"
929     id: gerrit-maven-stage
930     <<: *lf_maven_common
931     # yamllint disable-line rule:key-duplicates
932     <<: *lf_maven_stage
933
934     scm:
935       - lf-infra-gerrit-scm:
936           jenkins-ssh-credential: "{jenkins-ssh-credential}"
937           git-url: "{git-url}"
938           refspec: "$GERRIT_REFSPEC"
939           branch: "$GERRIT_BRANCH"
940           submodule-recursive: "{submodule-recursive}"
941           submodule-timeout: "{submodule-timeout}"
942           submodule-disable: "{submodule-disable}"
943           choosing-strategy: default
944
945     triggers:
946       - timed: "{obj:cron}"
947       - gerrit:
948           server-name: "{gerrit-server-name}"
949           trigger-on: "{obj:gerrit_release_triggers}"
950           projects:
951             - project-compare-type: ANT
952               project-pattern: "{project}"
953               branches:
954                 - branch-compare-type: ANT
955                   branch-pattern: "**/{branch}"
956               file-paths: "{obj:gerrit_trigger_file_paths}"
957
958 - job-template:
959     name: "{project-name}-maven-stage-{stream}"
960     id: github-maven-stage
961     <<: *lf_maven_common
962     # yamllint disable-line rule:key-duplicates
963     <<: *lf_maven_stage
964
965     properties:
966       - lf-infra-properties:
967           build-days-to-keep: "{build-days-to-keep}"
968       - github:
969           url: "{github-url}/{github-org}/{project}"
970
971     scm:
972       - lf-infra-github-scm:
973           url: "{git-clone-url}{github-org}/{project}"
974           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
975           branch: "{branch}"
976           submodule-recursive: "{submodule-recursive}"
977           submodule-timeout: "{submodule-timeout}"
978           submodule-disable: "{submodule-disable}"
979           choosing-strategy: default
980           jenkins-ssh-credential: "{jenkins-ssh-credential}"
981
982     triggers:
983       - timed: "{obj:cron}"
984       - github-pull-request:
985           trigger-phrase: "^stage-(maven-)?release$"
986           only-trigger-phrase: true
987           status-context: "Maven Release"
988           permit-all: true
989           github-hooks: true
990           white-list-target-branches:
991             - "{branch}"
992           included-regions: "{obj:github_included_regions}"
993
994 ##########################
995 # Maven Stage for Docker #
996 ##########################
997
998 - lf_maven_docker_stage: &lf_maven_docker_stage
999     name: lf-maven-docker-stage
1000
1001     builders:
1002       - lf-infra-pre-build
1003       - lf-jacoco-nojava-workaround
1004       - lf-maven-install:
1005           mvn-version: "{mvn-version}"
1006       - lf-update-java-alternatives:
1007           java-version: "{java-version}"
1008       - lf-infra-docker-login:
1009           global-settings-file: "{mvn-global-settings}"
1010           settings-file: "{mvn-settings}"
1011       # must provide maven settings AFTER docker-login due to its cleanup
1012       - lf-provide-maven-settings:
1013           global-settings-file: "{mvn-global-settings}"
1014           settings-file: "{mvn-settings}"
1015       - lf-maven-versions-plugin:
1016           maven-versions-plugin: "{maven-versions-plugin}"
1017           version-properties-file: "{version-properties-file}"
1018           mvn-version: "{mvn-version}"
1019           mvn-pom: "{mvn-pom}"
1020           mvn-settings: "{mvn-settings}"
1021       - shell: !include-raw-escape: ../shell/maven-patch-release.sh
1022       - inject:
1023           properties-content: |
1024             CONTAINER_PULL_REGISTRY={container-public-registry}
1025             CONTAINER_PUSH_REGISTRY={container-staging-registry}
1026       - lf-maven-build:
1027           mvn-goals: "{mvn-goals}"
1028       - lf-sigul-sign-dir:
1029           sign-artifacts: "{sign-artifacts}"
1030           sign-dir: "$WORKSPACE/m2repo"
1031           sign-mode: "{sign-mode}"
1032       # NO lf-maven-stage
1033       # NO lf-maven-central
1034       - lf-provide-maven-settings-cleanup
1035
1036     gerrit_release_docker_triggers:
1037       - comment-added-contains-event:
1038           comment-contains-value: '^Patch Set\s+\d+:\s+stage-(docker-)?release\s*$'
1039
1040 - job-template:
1041     name: "{project-name}-maven-docker-stage-{stream}"
1042     id: gerrit-maven-docker-stage
1043     <<: *lf_maven_common
1044     # yamllint disable-line rule:key-duplicates
1045     <<: *lf_maven_stage
1046     # yamllint disable-line rule:key-duplicates
1047     <<: *lf_maven_docker_stage
1048
1049     scm:
1050       - lf-infra-gerrit-scm:
1051           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1052           git-url: "{git-url}"
1053           refspec: "$GERRIT_REFSPEC"
1054           branch: "$GERRIT_BRANCH"
1055           submodule-recursive: "{submodule-recursive}"
1056           submodule-timeout: "{submodule-timeout}"
1057           submodule-disable: "{submodule-disable}"
1058           choosing-strategy: default
1059
1060     triggers:
1061       - timed: "{obj:cron}"
1062       - gerrit:
1063           server-name: "{gerrit-server-name}"
1064           trigger-on: "{obj:gerrit_release_docker_triggers}"
1065           projects:
1066             - project-compare-type: ANT
1067               project-pattern: "{project}"
1068               branches:
1069                 - branch-compare-type: ANT
1070                   branch-pattern: "**/{branch}"
1071               file-paths: "{obj:gerrit_trigger_file_paths}"
1072
1073 - job-template:
1074     name: "{project-name}-maven-docker-stage-{stream}"
1075     id: github-maven-docker-stage
1076     <<: *lf_maven_common
1077     # yamllint disable-line rule:key-duplicates
1078     <<: *lf_maven_stage
1079     # yamllint disable-line rule:key-duplicates
1080     <<: *lf_maven_docker_stage
1081
1082     properties:
1083       - lf-infra-properties:
1084           build-days-to-keep: "{build-days-to-keep}"
1085       - github:
1086           url: "{github-url}/{github-org}/{project}"
1087
1088     scm:
1089       - lf-infra-github-scm:
1090           url: "{git-clone-url}{github-org}/{project}"
1091           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1092           branch: "{branch}"
1093           submodule-recursive: "{submodule-recursive}"
1094           submodule-timeout: "{submodule-timeout}"
1095           submodule-disable: "{submodule-disable}"
1096           choosing-strategy: default
1097           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1098
1099     triggers:
1100       - timed: "{obj:cron}"
1101       - github-pull-request:
1102           trigger-phrase: "^stage-(docker-)?release$"
1103           only-trigger-phrase: true
1104           status-context: "Maven Release"
1105           permit-all: true
1106           github-hooks: true
1107           white-list-target-branches:
1108             - "{branch}"
1109           included-regions: "{obj:github_included_regions}"
1110
1111 ###############
1112 # Maven Sonar #
1113 ###############
1114
1115 - lf_maven_sonar: &lf_maven_sonar
1116     name: lf-maven-sonar
1117
1118     ######################
1119     # Default parameters #
1120     ######################
1121
1122     branch: master # Sonar should always be run on master branch
1123     build-days-to-keep: 7
1124     build-timeout: 60
1125     cron: "H H * * 6" # run weekly
1126     disable-job: false
1127     git-url: "$GIT_URL/$PROJECT"
1128     github-url: "https://github.com"
1129     java-version: openjdk11
1130     java-opts: ""
1131     mvn-global-settings: global-settings
1132     mvn-goals: clean install
1133     mvn-opts: ""
1134     mvn-params: ""
1135     mvn-version: mvn35
1136     sonar-mvn-goal: "sonar:sonar"
1137     sonarcloud: false
1138     sonarcloud-project-key: ""
1139     sonarcloud-project-organization: ""
1140     sonarcloud-api-token: ""
1141     sonarcloud-qualitygate-wait: false
1142     # SonarCloud scan using jdk8 will become deprecated by Oct, 2020
1143     # Projects not compatible with jdk11 can set java-version to something else
1144     sonarcloud-java-version: openjdk11
1145     stream: master
1146     submodule-recursive: true
1147     submodule-timeout: 10
1148     submodule-disable: false
1149     scan-dev-branch: false
1150
1151     gerrit_sonar_triggers:
1152       - comment-added-contains-event:
1153           comment-contains-value: '^Patch Set\s+\d+:\s+run-sonar\s*$'
1154
1155     #####################
1156     # Job Configuration #
1157     #####################
1158
1159     disabled: "{disable-job}"
1160
1161     parameters:
1162       - lf-infra-parameters:
1163           project: "{project}"
1164           branch: "{branch}"
1165           stream: "{stream}"
1166       - lf-infra-maven-parameters:
1167           mvn-opts: "{mvn-opts}"
1168           mvn-params: "{mvn-params}"
1169           mvn-version: "{mvn-version}"
1170       - string:
1171           name: ARCHIVE_ARTIFACTS
1172           default: "{archive-artifacts}"
1173           description: Artifacts to archive to the logs server.
1174       - string:
1175           name: JAVA_OPTS
1176           default: "{java-opts}"
1177           description: |
1178             Java options. Example: -Xmx1024m
1179       - string:
1180           name: SONAR_MAVEN_GOAL
1181           default: "{sonar-mvn-goal}"
1182           description: |
1183             Maven goals to pass to the Sonar call. Typically sonar:sonar
1184             however to use a specific version of the sonar-maven-plugin we
1185             can call "org.codehaus.mojo:sonar-maven-plugin:3.3.0.603:sonar".
1186
1187     triggers:
1188       - timed: "{obj:cron}"
1189       - gerrit:
1190           server-name: "{gerrit-server-name}"
1191           trigger-on: "{obj:gerrit_sonar_triggers}"
1192           projects:
1193             - project-compare-type: "ANT"
1194               project-pattern: "{project}"
1195               branches:
1196                 - branch-compare-type: "ANT"
1197                   branch-pattern: "**/master"
1198           skip-vote:
1199             successful: true
1200             failed: true
1201             unstable: true
1202             notbuilt: true
1203
1204     publishers:
1205       - lf-jacoco-report
1206       - findbugs
1207       - lf-infra-publish
1208
1209 - mvn_sonar_builders: &mvn_sonar_builders
1210     name: mvn-sonar-builders
1211     builders:
1212       - lf-infra-pre-build
1213       # With SonarCloud
1214       - conditional-step:
1215           condition-kind: boolean-expression
1216           condition-expression: "{sonarcloud}"
1217           steps:
1218             - shell: echo 'Using SonarCloud'
1219             - lf-infra-maven-sonarcloud:
1220                 java-version: "{java-version}"
1221                 mvn-goals: "{mvn-goals}"
1222                 mvn-settings: "{mvn-settings}"
1223                 mvn-version: "{mvn-version}"
1224                 sonarcloud-project-key: "{sonarcloud-project-key}"
1225                 sonarcloud-project-organization: "{sonarcloud-project-organization}"
1226                 sonarcloud-api-token: "{sonarcloud-api-token}"
1227                 sonarcloud-java-version: "{sonarcloud-java-version}"
1228                 sonarcloud-qualitygate-wait: "{sonarcloud-qualitygate-wait}"
1229                 scan-dev-branch: "{scan-dev-branch}"
1230       # With SonarQube
1231       - conditional-step:
1232           condition-kind: not
1233           condition-operand:
1234             condition-kind: boolean-expression
1235             condition-expression: "{sonarcloud}"
1236           steps:
1237             - shell: echo 'Using SonarQube'
1238             - lf-infra-maven-sonar:
1239                 java-version: "{java-version}"
1240                 mvn-goals: "{mvn-goals}"
1241                 mvn-settings: "{mvn-settings}"
1242                 mvn-version: "{mvn-version}"
1243
1244 - mvn_sonar_builders_prescan_script: &mvn_sonar_builders_prescan_script
1245     name: mvn-sonar-builders-prescan-script
1246     builders:
1247       - shell: "{sonar-prescan-script}"
1248       - lf-infra-pre-build
1249       # With SonarCloud
1250       - conditional-step:
1251           condition-kind: boolean-expression
1252           condition-expression: "{sonarcloud}"
1253           steps:
1254             - shell: echo 'Using SonarCloud'
1255             - lf-infra-maven-sonarcloud:
1256                 java-version: "{java-version}"
1257                 mvn-goals: "{mvn-goals}"
1258                 mvn-settings: "{mvn-settings}"
1259                 mvn-version: "{mvn-version}"
1260                 sonarcloud-project-key: "{sonarcloud-project-key}"
1261                 sonarcloud-project-organization: "{sonarcloud-project-organization}"
1262                 sonarcloud-api-token: "{sonarcloud-api-token}"
1263                 sonarcloud-java-version: "{sonarcloud-java-version}"
1264                 sonarcloud-qualitygate-wait: "{sonarcloud-qualitygate-wait}"
1265                 scan-dev-branch: "{scan-dev-branch}"
1266       # With SonarQube
1267       - conditional-step:
1268           condition-kind: not
1269           condition-operand:
1270             condition-kind: boolean-expression
1271             condition-expression: "{sonarcloud}"
1272           steps:
1273             - shell: echo 'Using SonarQube'
1274             - lf-infra-maven-sonar:
1275                 java-version: "{java-version}"
1276                 mvn-goals: "{mvn-goals}"
1277                 mvn-settings: "{mvn-settings}"
1278                 mvn-version: "{mvn-version}"
1279
1280 - builder:
1281     name: lf-infra-maven-sonar
1282     # Run a Sonar build with Maven
1283     builders:
1284       - lf-maven-install:
1285           mvn-version: "{mvn-version}"
1286       - lf-update-java-alternatives:
1287           java-version: "{java-version}"
1288       - inject:
1289           # Switch this to the sonar wrapper when JJB 2.0 is available
1290           properties-content: |
1291             SONAR_HOST_URL=$SONAR_URL
1292             MAVEN_GOALS={mvn-goals}
1293       - lf-provide-maven-settings:
1294           global-settings-file: global-settings
1295           settings-file: "{mvn-settings}"
1296       - shell: !include-raw-escape:
1297           - ../shell/common-variables.sh
1298           - ../shell/maven-sonar.sh
1299       - lf-provide-maven-settings-cleanup
1300
1301 - builder:
1302     name: lf-infra-maven-sonarcloud
1303     # Run a Sonar build with Maven
1304     builders:
1305       - lf-maven-install:
1306           mvn-version: "{mvn-version}"
1307       - lf-update-java-alternatives:
1308           java-version: "{java-version}"
1309       - inject:
1310           # Switch this to the sonar wrapper when JJB 2.0 is available
1311           properties-content: |
1312             SONAR_HOST_URL=https://sonarcloud.io
1313             PROJECT_KEY={sonarcloud-project-key}
1314             PROJECT_ORGANIZATION={sonarcloud-project-organization}
1315             MAVEN_GOALS={mvn-goals}
1316             API_TOKEN={sonarcloud-api-token}
1317             SONARCLOUD_JAVA_VERSION={sonarcloud-java-version}
1318             SCAN_DEV_BRANCH={scan-dev-branch}
1319             SONARCLOUD_QUALITYGATE_WAIT={sonarcloud-qualitygate-wait}
1320       - lf-provide-maven-settings:
1321           global-settings-file: global-settings
1322           settings-file: "{mvn-settings}"
1323       - shell: !include-raw-escape:
1324           - ../shell/common-variables.sh
1325           - ../shell/maven-sonar.sh
1326       - lf-provide-maven-settings-cleanup
1327
1328 - job-template:
1329     name: "{project-name}-sonar"
1330     id: gerrit-maven-sonar
1331     <<: *lf_maven_common
1332     # yamllint disable-line rule:key-duplicates
1333     <<: *lf_maven_sonar
1334     <<: *mvn_sonar_builders
1335
1336     scm:
1337       - lf-infra-gerrit-scm:
1338           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1339           git-url: "{git-url}"
1340           refspec: $GERRIT_REFSPEC
1341           branch: $GERRIT_BRANCH
1342           submodule-recursive: "{submodule-recursive}"
1343           submodule-timeout: "{submodule-timeout}"
1344           submodule-disable: "{submodule-disable}"
1345           choosing-strategy: default
1346
1347 - job-template:
1348     name: "{project-name}-sonar-verify"
1349     id: gerrit-maven-sonar-verify
1350     <<: *lf_maven_common
1351     # yamllint disable-line rule:key-duplicates
1352     <<: *lf_maven_sonar
1353     <<: *mvn_sonar_builders
1354
1355     sonarcloud: true
1356     scan-dev-branch: true
1357     sonarcloud-qualitygate-wait: false
1358
1359     gerrit_sonar_triggers:
1360       - patchset-created-event:
1361           exclude-drafts: true
1362           exclude-trivial-rebase: false
1363           exclude-no-code-change: false
1364       - draft-published-event
1365       - comment-added-contains-event:
1366           comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$'
1367
1368     gerrit_trigger_file_paths:
1369       - compare-type: REG_EXP
1370         pattern: ".*"
1371
1372     triggers:
1373       - gerrit:
1374           server-name: "{gerrit-server-name}"
1375           trigger-on: "{obj:gerrit_sonar_triggers}"
1376           projects:
1377             - project-compare-type: "ANT"
1378               project-pattern: "{project}"
1379               branches:
1380                 - branch-compare-type: "ANT"
1381                   branch-pattern: "**/{branch}"
1382               file-paths: "{obj:gerrit_trigger_file_paths}"
1383
1384     scm:
1385       - lf-infra-gerrit-scm:
1386           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1387           git-url: "{git-url}"
1388           refspec: $GERRIT_REFSPEC
1389           branch: $GERRIT_BRANCH
1390           submodule-recursive: "{submodule-recursive}"
1391           submodule-timeout: "{submodule-timeout}"
1392           submodule-disable: "{submodule-disable}"
1393           choosing-strategy: gerrit
1394
1395 - job-template:
1396     name: "{project-name}-sonar-prescan-script"
1397     id: gerrit-maven-sonar-prescan-script
1398     <<: *lf_maven_common
1399     # yamllint disable-line rule:key-duplicates
1400     <<: *lf_maven_sonar
1401     <<: *mvn_sonar_builders_prescan_script
1402
1403     scm:
1404       - lf-infra-gerrit-scm:
1405           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1406           git-url: "{git-url}"
1407           refspec: $GERRIT_REFSPEC
1408           branch: $GERRIT_BRANCH
1409           submodule-recursive: "{submodule-recursive}"
1410           submodule-timeout: "{submodule-timeout}"
1411           submodule-disable: "{submodule-disable}"
1412           choosing-strategy: default
1413
1414 - job-template:
1415     name: "{project-name}-sonar"
1416     id: github-maven-sonar
1417     <<: *lf_maven_common
1418     # yamllint disable-line rule:key-duplicates
1419     <<: *lf_maven_sonar
1420
1421     properties:
1422       - lf-infra-properties:
1423           build-days-to-keep: "{build-days-to-keep}"
1424       - github:
1425           url: "{github-url}/{github-org}/{project}"
1426
1427     scm:
1428       - lf-infra-github-scm:
1429           url: "{git-clone-url}{github-org}/{project}"
1430           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1431           branch: "$sha1"
1432           submodule-recursive: "{submodule-recursive}"
1433           submodule-timeout: "{submodule-timeout}"
1434           submodule-disable: "{submodule-disable}"
1435           choosing-strategy: default
1436           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1437
1438     triggers:
1439       - timed: "{obj:cron}"
1440       - github-pull-request:
1441           trigger-phrase: "^run-sonar$"
1442           only-trigger-phrase: true
1443           status-context: "Maven Sonar"
1444           permit-all: true
1445           github-hooks: true
1446           org-list:
1447             - "{github-org}"
1448           white-list: "{obj:github_pr_allowlist}"
1449           admin-list: "{obj:github_pr_admin_list}"
1450           white-list-target-branches:
1451             - "{branch}"
1452
1453 - job-template:
1454     name: "{project-name}-sonar-prescan-script"
1455     id: github-maven-sonar-prescan-script
1456     <<: *lf_maven_common
1457     # yamllint disable-line rule:key-duplicates
1458     <<: *lf_maven_sonar
1459     <<: *mvn_sonar_builders_prescan_script
1460
1461     properties:
1462       - lf-infra-properties:
1463           build-days-to-keep: "{build-days-to-keep}"
1464       - github:
1465           url: "{github-url}/{github-org}/{project}"
1466
1467     scm:
1468       - lf-infra-github-scm:
1469           url: "{git-clone-url}{github-org}/{project}"
1470           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1471           branch: "$sha1"
1472           submodule-recursive: "{submodule-recursive}"
1473           submodule-timeout: "{submodule-timeout}"
1474           submodule-disable: "{submodule-disable}"
1475           choosing-strategy: default
1476           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1477
1478     triggers:
1479       - timed: "{obj:cron}"
1480       - github-pull-request:
1481           trigger-phrase: "^run-sonar$"
1482           only-trigger-phrase: true
1483           status-context: "Maven Sonar"
1484           permit-all: true
1485           github-hooks: true
1486           org-list:
1487             - "{github-org}"
1488           white-list: "{obj:github_pr_allowlist}"
1489           admin-list: "{obj:github_pr_admin_list}"
1490           white-list-target-branches:
1491             - "{branch}"
1492
1493 ################
1494 # Maven Verify #
1495 ################
1496
1497 - lf_maven_verify: &lf_maven_verify
1498     name: lf-maven-verify
1499
1500     ######################
1501     # Default parameters #
1502     ######################
1503
1504     branch: master
1505     build-days-to-keep: 7
1506     build-timeout: 60
1507     disable-job: false
1508     git-url: "$GIT_URL/$PROJECT"
1509     github-url: "https://github.com"
1510     java-version: openjdk11
1511     mvn-global-settings: global-settings
1512     mvn-goals: clean deploy
1513     mvn-opts: ""
1514     mvn-params: "-Dstream=$STREAM -Dmaven.source.skip=true"
1515     mvn-version: mvn35
1516     stream: master
1517     submodule-recursive: true
1518     submodule-timeout: 10
1519     submodule-disable: false
1520
1521     gerrit_verify_triggers:
1522       - patchset-created-event:
1523           exclude-drafts: true
1524           exclude-trivial-rebase: false
1525           exclude-no-code-change: false
1526       - draft-published-event
1527       - comment-added-contains-event:
1528           comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$'
1529
1530     gerrit_trigger_file_paths:
1531       - compare-type: REG_EXP
1532         pattern: ".*"
1533
1534     # github_included_regions MUST match gerrit_trigger_file_paths
1535     github_included_regions:
1536       - ".*"
1537
1538     #####################
1539     # Job Configuration #
1540     #####################
1541
1542     concurrent: true
1543     disabled: "{disable-job}"
1544
1545     builders:
1546       - lf-infra-pre-build
1547       - lf-jacoco-nojava-workaround
1548       - lf-maven-install:
1549           mvn-version: "{mvn-version}"
1550       - lf-update-java-alternatives:
1551           java-version: "{java-version}"
1552       - lf-provide-maven-settings:
1553           global-settings-file: "{mvn-global-settings}"
1554           settings-file: "{mvn-settings}"
1555       - lf-maven-build:
1556           mvn-goals: "{mvn-goals}"
1557       - lf-provide-maven-settings-cleanup
1558
1559     publishers:
1560       - findbugs
1561       - lf-jacoco-report
1562       - lf-infra-publish
1563
1564 - job-template:
1565     name: "{project-name}-maven-verify-{stream}-{mvn-version}-{java-version}"
1566     id: gerrit-maven-verify
1567     <<: *lf_maven_common
1568     # yamllint disable-line rule:key-duplicates
1569     <<: *lf_maven_verify
1570
1571     scm:
1572       - lf-infra-gerrit-scm:
1573           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1574           git-url: "{git-url}"
1575           refspec: "$GERRIT_REFSPEC"
1576           branch: "$GERRIT_BRANCH"
1577           submodule-recursive: "{submodule-recursive}"
1578           submodule-timeout: "{submodule-timeout}"
1579           submodule-disable: "{submodule-disable}"
1580           choosing-strategy: gerrit
1581
1582     triggers:
1583       - gerrit:
1584           server-name: "{gerrit-server-name}"
1585           trigger-on: "{obj:gerrit_verify_triggers}"
1586           projects:
1587             - project-compare-type: ANT
1588               project-pattern: "{project}"
1589               branches:
1590                 - branch-compare-type: ANT
1591                   branch-pattern: "**/{branch}"
1592               file-paths: "{obj:gerrit_trigger_file_paths}"
1593
1594 - job-template:
1595     name: "{project-name}-maven-verify-{stream}-{mvn-version}-{java-version}"
1596     id: github-maven-verify
1597     <<: *lf_maven_common
1598     # yamllint disable-line rule:key-duplicates
1599     <<: *lf_maven_verify
1600
1601     properties:
1602       - lf-infra-properties:
1603           build-days-to-keep: "{build-days-to-keep}"
1604       - github:
1605           url: "{github-url}/{github-org}/{project}"
1606
1607     scm:
1608       - lf-infra-github-scm:
1609           url: "{git-clone-url}{github-org}/{project}"
1610           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1611           branch: "$sha1"
1612           submodule-recursive: "{submodule-recursive}"
1613           submodule-timeout: "{submodule-timeout}"
1614           submodule-disable: "{submodule-disable}"
1615           choosing-strategy: default
1616           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1617
1618     triggers:
1619       - github-pull-request:
1620           trigger-phrase: "^(recheck|reverify)$"
1621           only-trigger-phrase: false
1622           status-context: "Maven Verify {mvn-version}-{java-version}"
1623           permit-all: true
1624           github-hooks: true
1625           white-list-target-branches:
1626             - "{branch}"
1627           included-regions: "{obj:github_included_regions}"
1628
1629 ###########################
1630 # Maven Verify for Docker #
1631 ###########################
1632
1633 - lf_maven_docker_verify: &lf_maven_docker_verify
1634     name: lf-maven-docker-verify
1635
1636     # image push not allowed during verification
1637     mvn-goals: clean install
1638
1639     builders:
1640       - lf-infra-pre-build
1641       - lf-jacoco-nojava-workaround
1642       - lf-maven-install:
1643           mvn-version: "{mvn-version}"
1644       - lf-update-java-alternatives:
1645           java-version: "{java-version}"
1646       - lf-infra-docker-login:
1647           global-settings-file: "{mvn-global-settings}"
1648           settings-file: "{mvn-settings}"
1649       # must provide maven settings AFTER docker due to its cleanup
1650       - lf-provide-maven-settings:
1651           global-settings-file: "{mvn-global-settings}"
1652           settings-file: "{mvn-settings}"
1653       - inject:
1654           properties-content: |
1655             CONTAINER_PULL_REGISTRY={container-public-registry}
1656       - lf-maven-build:
1657           mvn-goals: "{mvn-goals}"
1658       - lf-provide-maven-settings-cleanup
1659
1660 - job-template:
1661     name: "{project-name}-maven-docker-verify-{stream}-{mvn-version}-{java-version}"
1662     id: gerrit-maven-docker-verify
1663     <<: *lf_maven_common
1664     # yamllint disable-line rule:key-duplicates
1665     <<: *lf_maven_verify
1666     # yamllint disable-line rule:key-duplicates
1667     <<: *lf_maven_docker_verify
1668
1669     scm:
1670       - lf-infra-gerrit-scm:
1671           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1672           git-url: "{git-url}"
1673           refspec: "$GERRIT_REFSPEC"
1674           branch: "$GERRIT_BRANCH"
1675           submodule-recursive: "{submodule-recursive}"
1676           submodule-timeout: "{submodule-timeout}"
1677           submodule-disable: "{submodule-disable}"
1678           choosing-strategy: gerrit
1679
1680     triggers:
1681       - gerrit:
1682           server-name: "{gerrit-server-name}"
1683           trigger-on: "{obj:gerrit_verify_triggers}"
1684           projects:
1685             - project-compare-type: ANT
1686               project-pattern: "{project}"
1687               branches:
1688                 - branch-compare-type: ANT
1689                   branch-pattern: "**/{branch}"
1690               file-paths: "{obj:gerrit_trigger_file_paths}"
1691
1692 - job-template:
1693     name: "{project-name}-maven-docker-verify-{stream}-{mvn-version}-{java-version}"
1694     id: github-maven-docker-verify
1695     <<: *lf_maven_common
1696     # yamllint disable-line rule:key-duplicates
1697     <<: *lf_maven_verify
1698     # yamllint disable-line rule:key-duplicates
1699     <<: *lf_maven_docker_verify
1700
1701     properties:
1702       - lf-infra-properties:
1703           build-days-to-keep: "{build-days-to-keep}"
1704       - github:
1705           url: "{github-url}/{github-org}/{project}"
1706
1707     scm:
1708       - lf-infra-github-scm:
1709           url: "{git-clone-url}{github-org}/{project}"
1710           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1711           branch: "$sha1"
1712           submodule-recursive: "{submodule-recursive}"
1713           submodule-timeout: "{submodule-timeout}"
1714           submodule-disable: "{submodule-disable}"
1715           choosing-strategy: default
1716           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1717
1718     triggers:
1719       - github-pull-request:
1720           trigger-phrase: "^(recheck|reverify)$"
1721           only-trigger-phrase: false
1722           status-context: "Maven Docker Verify {mvn-version}-{java-version}"
1723           permit-all: true
1724           github-hooks: true
1725           white-list-target-branches:
1726             - "{branch}"
1727           included-regions: "{obj:github_included_regions}"
1728
1729 #############################
1730 # Maven Verify Dependencies #
1731 #############################
1732
1733 - lf_maven_verify_dependencies: &lf_maven_verify_dependencies
1734     name: lf-maven-verify-dependencies
1735
1736     ######################
1737     # Default parameters #
1738     ######################
1739
1740     branch: master
1741     build-days-to-keep: 7
1742     build-timeout: 60
1743     disable-job: false
1744     git-url: "$GIT_URL/$PROJECT"
1745     github-url: "https://github.com"
1746     java-version: openjdk11
1747     mvn-global-settings: global-settings
1748     mvn-goals: clean deploy
1749     mvn-opts: ""
1750     mvn-params: "-Dstream=$STREAM"
1751     mvn-version: mvn35
1752     stream: master
1753     submodule-recursive: true
1754     submodule-timeout: 10
1755     submodule-disable: false
1756
1757     gerrit_verify_triggers:
1758       - comment-added-contains-event:
1759           comment-contains-value: "recheck: [0-9 ]+"
1760     gerrit_trigger_file_paths:
1761       - compare-type: ANT
1762         pattern: "**"
1763
1764     #####################
1765     # Job Configuration #
1766     #####################
1767
1768     concurrent: true
1769     disabled: "{disable-job}"
1770
1771     builders:
1772       - lf-infra-pre-build
1773       - lf-jacoco-nojava-workaround
1774       - lf-maven-install:
1775           mvn-version: "{mvn-version}"
1776       - lf-update-java-alternatives:
1777           java-version: "{java-version}"
1778       - lf-provide-maven-settings:
1779           global-settings-file: "{mvn-global-settings}"
1780           settings-file: "{mvn-settings}"
1781       - lf-fetch-dependent-patches
1782       - shell: !include-raw-escape:
1783           - ../shell/common-variables.sh
1784           - ../shell/maven-build-deps.sh
1785       - lf-maven-build:
1786           mvn-goals: "{mvn-goals}"
1787       - lf-provide-maven-settings-cleanup
1788
1789     publishers:
1790       - findbugs
1791       - lf-jacoco-report
1792       - lf-infra-publish
1793
1794 - job-template:
1795     name: "{project-name}-maven-verify-deps-{stream}-{mvn-version}-{java-version}"
1796     id: gerrit-maven-verify-dependencies
1797     <<: *lf_maven_common
1798     # yamllint disable-line rule:key-duplicates
1799     <<: *lf_maven_verify_dependencies
1800
1801     scm:
1802       - lf-infra-gerrit-scm:
1803           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1804           git-url: "{git-url}"
1805           refspec: "$GERRIT_REFSPEC"
1806           branch: "$GERRIT_BRANCH"
1807           submodule-recursive: "{submodule-recursive}"
1808           submodule-timeout: "{submodule-timeout}"
1809           submodule-disable: "{submodule-disable}"
1810           choosing-strategy: gerrit
1811
1812     triggers:
1813       - gerrit:
1814           server-name: "{gerrit-server-name}"
1815           trigger-on: "{obj:gerrit_verify_triggers}"
1816           projects:
1817             - project-compare-type: ANT
1818               project-pattern: "{project}"
1819               branches:
1820                 - branch-compare-type: ANT
1821                   branch-pattern: "**/{branch}"
1822               file-paths: "{obj:gerrit_trigger_file_paths}"
1823           comment-text-parameter-mode: PLAIN