--- # This file contains job templates for Maven projects. ########## # Macros # ########## - builder: name: lf-maven-build builders: - inject: properties-content: "MAVEN_GOALS={mvn-goals}" - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-build.sh - builder: name: lf-maven-deploy builders: - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-deploy.sh - builder: name: lf-maven-versions-plugin builders: - conditional-step: condition-kind: boolean-expression condition-expression: "{maven-versions-plugin}" steps: - inject: properties-file: "{version-properties-file}" - maven-target: maven-version: "{mvn-version}" pom: "{mvn-pom}" goals: "versions:set versions:update-child-modules versions:commit -B" properties: - "newVersion=${{release_version}}" settings: "{mvn-settings}" settings-type: cfp global-settings: "global-settings" global-settings-type: cfp - builder: name: lf-maven-stage builders: - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-infra-create-netrc: server-id: "{mvn-staging-id}" # include-raw-escape fails due to JJB bug - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-stage.sh - lf-provide-maven-settings-cleanup - builder: name: lf-update-java-alternatives builders: - inject: # Work around inject plugin overriding our GIT_URL variable incorrectly # https://issues.jenkins-ci.org/browse/JENKINS-49775 properties-content: | SET_JDK_VERSION={java-version} GIT_URL="$GIT_URL" - shell: !include-raw-escape: ../shell/update-java-alternatives.sh - inject: properties-file: "/tmp/java.env" #################### # COMMON FUNCTIONS # #################### - _lf_maven_common: &lf_maven_common name: lf-maven-common ###################### # Default parameters # ###################### archive-artifacts: > **/*.log **/hs_err_*.log **/target/**/feature.xml **/target/failsafe-reports/failsafe-summary.xml **/target/surefire-reports/*-output.txt ##################### # Job Configuration # ##################### project-type: freestyle node: "{build-node}" properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" parameters: - lf-infra-parameters: project: "{project}" branch: "{branch}" stream: "{stream}" - lf-infra-maven-parameters: mvn-opts: "{mvn-opts}" mvn-params: "{mvn-params}" mvn-version: "{mvn-version}" - string: name: ARCHIVE_ARTIFACTS default: "{archive-artifacts}" description: Artifacts to archive to the logs server. wrappers: - lf-infra-wrappers: build-timeout: "{build-timeout}" jenkins-ssh-credential: "{jenkins-ssh-credential}" publishers: # TODO: Make email notification work. # - lf-infra-email-notify: # email-recipients: '{email-recipients}' # email-prefix: '[releng]' - lf-infra-publish ############# # Maven CLM # ############# - _lf_maven_clm: &lf_maven_clm name: lf-maven-clm ###################### # Default parameters # ###################### branch: master build-days-to-keep: 30 # 30 days for troubleshooting purposes build-timeout: 60 disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" java-version: openjdk11 mvn-global-settings: global-settings mvn-goals: clean install mvn-opts: "" mvn-params: "" mvn-version: mvn35 nexus-iq-namespace: "" # Recommend a trailing dash when set. Example: odl- nexus-iq-stage: "build" stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false nexus_iq_scan_patterns: - "**/*.ear" - "**/*.jar" - "**/*.tar.gz" - "**/*.war" - "**/*.zip" gerrit_clm_triggers: - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+run-clm\s*$' parameters: - lf-infra-parameters: project: "{project}" branch: "{branch}" stream: "{stream}" - lf-infra-maven-parameters: mvn-opts: "{mvn-opts}" mvn-params: "{mvn-params}" mvn-version: "{mvn-version}" - string: name: ARCHIVE_ARTIFACTS default: "{archive-artifacts}" description: Artifacts to archive to the logs server. - lf-clm-parameters: nexus-iq-stage: "{nexus-iq-stage}" ##################### # Job Configuration # ##################### disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-infra-sonatype-clm: mvn-goals: "{mvn-goals}" - lf-provide-maven-settings-cleanup - shell: 'find . -regex ".*karaf/target" | xargs rm -rf' - nexus-iq-policy-evaluator: stage: "{nexus-iq-stage}" application-type: "manual" application-id: "{nexus-iq-namespace}{project-name}" scan-patterns: "{obj:nexus_iq_scan_patterns}" fail-build-network-error: true - builder: name: lf-infra-sonatype-clm # Run a CLM scan build with Maven builders: - inject: properties-content: | MAVEN_GOALS={mvn-goals} - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/sonatype-clm.sh - job-template: name: "{project-name}-maven-clm-{stream}" id: gerrit-maven-clm <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_clm scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default triggers: # Build weekly on Saturdays - timed: "H H * * 6" - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_clm_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" skip-vote: successful: true failed: true unstable: true notbuilt: true - job-template: name: "{project-name}-maven-clm-{stream}" id: github-maven-clm <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_clm properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "" branch: "refs/heads/{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: # Build weekly on Saturdays - timed: "H H * * 6" - github-pull-request: trigger-phrase: "^run-clm$" only-trigger-phrase: true status-context: "CLM" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" ################## # Maven Snyk CLI # ################## - _lf_maven_snyk_cli: &lf_maven_snyk_cli name: lf-maven-snyk_cli ###################### # Default parameters # ###################### branch: master build-days-to-keep: 30 # 30 days for troubleshooting purposes build-timeout: 60 disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" java-version: openjdk11 mvn-global-settings: global-settings mvn-goals: clean install mvn-opts: "" mvn-params: "" mvn-version: mvn35 snyk-cli-options: "" snyk-token-credential-id: snyk-token snyk-org-credential-id: snyk-org stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_snyk_triggers: - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+run-snyk\s*$' parameters: - lf-infra-parameters: project: "{project}" branch: "{branch}" stream: "{stream}" - lf-infra-maven-parameters: mvn-opts: "{mvn-opts}" mvn-params: "{mvn-params}" mvn-version: "{mvn-version}" - string: name: SNYK_CLI_OPTIONS default: "{snyk-cli-options}" description: Additional Snyk CLI commands and options - string: name: ARCHIVE_ARTIFACTS default: "{archive-artifacts}" description: Artifacts to archive to the logs server. wrappers: - credentials-binding: - text: credential-id: "{snyk-token-credential-id}" variable: SNYK_TOKEN - text: credential-id: "{snyk-org-credential-id}" variable: SNYK_ORG ##################### # Job Configuration # ##################### disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-maven-build: mvn-goals: "{mvn-goals}" - lf-infra-snyk-cli-scanner - lf-provide-maven-settings-cleanup - shell: 'find . -regex ".*karaf/target" | xargs rm -rf' - builder: name: lf-infra-snyk-cli-scanner # Download and run the Snyk CLI scanner builders: - shell: !include-raw-escape: - ../shell/snyk-cli-scanner-run.sh - job-template: name: "{project-name}-maven-snyk-cli-{stream}" id: gerrit-maven-snyk-cli <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_snyk_cli scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default triggers: # Build weekly on Saturdays - timed: "H H * * 6" - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_snyk_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" skip-vote: successful: true failed: true unstable: true notbuilt: true - job-template: name: "{project-name}-maven-snyk-cli-{stream}" id: github-maven-snyk-cli <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_snyk_cli properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "" branch: "refs/heads/{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: # Build weekly on Saturdays - timed: "H H * * 6" - github-pull-request: trigger-phrase: "^run-snyk$" only-trigger-phrase: true status-context: "SNYK scan" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" ######################### # Maven Javadoc Publish # ######################### - _lf_maven_javadoc_publish: &lf_maven_javadoc_publish name: lf-maven-javadoc-publish ###################### # Default parameters # ###################### branch: master build-days-to-keep: 30 # 30 days in case a release takes long to get approved. build-timeout: 60 disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" java-version: openjdk11 mvn-dir: "." mvn-global-settings: global-settings mvn-opts: "" mvn-params: "" mvn-version: mvn35 stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_merge_triggers: - change-merged-event - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+remerge\s*$' ##################### # Job Configuration # ##################### disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-infra-create-netrc: server-id: "{mvn-site-id}" - inject: properties-content: | DEPLOY_PATH={javadoc-path} MAVEN_DIR={mvn-dir} - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-javadoc-generate.sh - ../shell/maven-javadoc-publish.sh - lf-provide-maven-settings-cleanup - job-template: name: "{project-name}-maven-javadoc-publish-{stream}-{java-version}" id: gerrit-maven-javadoc-publish <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_javadoc_publish git-url: "$GIT_URL/$GERRIT_PROJECT" scm: - lf-infra-gerrit-scm: git-url: "{git-url}" refspec: "" branch: "{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_merge_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" - job-template: name: "{project-name}-maven-javadoc-publish-{stream}-{java-version}" id: github-maven-javadoc-publish <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_javadoc_publish properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "" branch: "{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - github - pollscm: cron: "" - github-pull-request: trigger-phrase: "^remerge$" only-trigger-phrase: true status-context: "Maven Javadoc Publish" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" ######################## # Maven Javadoc Verify # ######################## - _lf_maven_javadoc_verify: &lf_maven_javadoc_verify name: lf-maven-javadoc-verify ###################### # Default parameters # ###################### branch: master build-days-to-keep: 30 # 30 days in case a release takes long to get approved. build-timeout: 60 disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" java-version: openjdk11 mvn-dir: "." mvn-global-settings: global-settings mvn-opts: "" mvn-params: "" mvn-version: mvn35 stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_verify_triggers: - patchset-created-event: exclude-drafts: true exclude-trivial-rebase: false exclude-no-code-change: false - draft-published-event - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$' ##################### # Job Configuration # ##################### concurrent: true disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - inject: properties-content: | MAVEN_DIR={mvn-dir} - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-javadoc-generate.sh - lf-provide-maven-settings-cleanup - job-template: name: "{project-name}-maven-javadoc-verify-{stream}-{java-version}" id: gerrit-maven-javadoc-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_javadoc_verify scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: gerrit triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_verify_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" - job-template: name: "{project-name}-maven-javadoc-verify-{stream}-{java-version}" id: github-maven-javadoc-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_javadoc_verify properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "$sha1" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - github-pull-request: trigger-phrase: ^(recheck|reverify)$ only-trigger-phrase: false status-context: "Maven Javadoc Verify" permit-all: true github-hooks: true white-list-target-branches: - "{branch}" ############### # Maven Merge # ############### - _lf_maven_merge: &lf_maven_merge name: lf-maven-merge ###################### # Default parameters # ###################### branch: master build-days-to-keep: 30 # 30 days in case we need to troubleshoot build-timeout: 60 cron: "@daily" disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" jacoco-exclude-pattern: >- **/gen/**, **/generated-sources/**, **/yang-gen**, **/pax/**, java-version: openjdk11 mvn-global-settings: global-settings mvn-goals: clean deploy mvn-opts: "" mvn-params: "-Dmerge" mvn-version: mvn35 nexus-cut-dirs: 6 # Number of dirs in the Nexus path to remove for wget -r. pre-build-script: "# pre-build script goes here" post-build-script: "# post-build script goes here" stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_merge_triggers: - change-merged-event - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+remerge\s*$' gerrit_trigger_file_paths: - compare-type: REG_EXP pattern: ".*" # github_included_regions MUST match gerrit_trigger_file_paths github_included_regions: - ".*" post_build_trigger: "" ##################### # Job Configuration # ##################### disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-infra-create-netrc: server-id: "{mvn-snapshot-id}" - inject: properties-content: | NEXUS_CUT_DIRS={nexus-cut-dirs} NEXUS_REPO={nexus-snapshot-repo} - shell: !include-raw-escape: ../shell/maven-fetch-metadata.sh - shell: "{pre-build-script}" - lf-maven-build: mvn-goals: "{mvn-goals}" - shell: "{post-build-script}" - lf-maven-deploy - lf-provide-maven-settings-cleanup publishers: - findbugs - lf-jacoco-report: exclude-pattern: "{jacoco-exclude-pattern}" - lf-infra-publish - trigger-parameterized-builds: "{obj:post_build_trigger}" - job-template: name: "{project-name}-maven-merge-{stream}" id: gerrit-maven-merge <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_merge scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default triggers: - timed: "{obj:cron}" - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_merge_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" - job-template: name: "{project-name}-maven-merge-{stream}" id: github-maven-merge <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_merge properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "" branch: "refs/heads/{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - timed: "{obj:cron}" - github - pollscm: cron: "" - github-pull-request: trigger-phrase: "^remerge$" only-trigger-phrase: true status-context: "Maven Merge" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" included-regions: "{obj:github_included_regions}" ########################## # Maven Merge for Docker # ########################## - _lf_maven_docker_merge: &lf_maven_docker_merge name: lf-maven-docker-merge builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-infra-docker-login: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-update-java-alternatives: java-version: "{java-version}" # must provide maven settings AFTER docker due to its cleanup - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-infra-create-netrc: server-id: "{mvn-snapshot-id}" - inject: properties-content: | NEXUS_CUT_DIRS={nexus-cut-dirs} NEXUS_REPO={nexus-snapshot-repo} CONTAINER_PULL_REGISTRY={container-public-registry} CONTAINER_PUSH_REGISTRY={container-snapshot-registry} - shell: !include-raw-escape: ../shell/maven-fetch-metadata.sh - lf-maven-build: mvn-goals: "{mvn-goals}" # NO lf-maven-deploy - lf-provide-maven-settings-cleanup - job-template: name: "{project-name}-maven-docker-merge-{stream}" id: gerrit-maven-docker-merge <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_merge # yamllint disable-line rule:key-duplicates <<: *lf_maven_docker_merge scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_merge_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" - job-template: name: "{project-name}-maven-docker-merge-{stream}" id: github-maven-docker-merge <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_merge # yamllint disable-line rule:key-duplicates <<: *lf_maven_docker_merge properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "" branch: "refs/heads/{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - github - pollscm: cron: "" - github-pull-request: trigger-phrase: "^remerge$" only-trigger-phrase: true status-context: "Maven Docker Merge" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" included-regions: "{obj:github_included_regions}" ############### # Maven Stage # ############### - _lf_maven_stage: &lf_maven_stage name: lf-maven-stage ###################### # Default parameters # ###################### branch: master build-days-to-keep: 30 # 30 days in case a release takes long to get approved. build-timeout: 60 cron: "" disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" java-version: openjdk11 maven-versions-plugin: false version-properties-file: version.properties mvn-central: false mvn-global-settings: global-settings mvn-goals: clean deploy mvn-opts: "" mvn-params: "" mvn-version: mvn35 ossrh-profile-id: "" mvn-pom: "" sbom-flags: "" sbom-path: "$WORKSPACE" sbom-generator: false sbom-generator-version: "v0.0.15" sign-artifacts: false sign-mode: serial stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_release_triggers: - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+stage-(maven-)?release\s*$' gerrit_trigger_file_paths: - compare-type: ANT pattern: "**" # github_included_regions MUST match gerrit_trigger_file_paths github_included_regions: - ".*" ##################### # Job Configuration # ##################### disabled: "{disable-job}" parameters: - lf-infra-parameters: project: "{project}" branch: "{branch}" stream: "{stream}" - lf-infra-maven-parameters: mvn-opts: "{mvn-opts}" mvn-params: "{mvn-params}" mvn-version: "{mvn-version}" staging-profile-id: "{staging-profile-id}" - bool: name: MAVEN_VERSIONS_PLUGIN default: "{maven-versions-plugin}" description: Use maven-versions-plugin to update pom versions. - string: name: ARCHIVE_ARTIFACTS default: "{archive-artifacts}" description: Artifacts to archive to the logs server. - string: name: STAGING_PROFILE_ID default: "{staging-profile-id}" description: Nexus staging profile ID. - string: name: SBOM_GENERATOR_VERSION default: "{sbom-generator-version}" description: SBOM generator version to download and run. - string: name: SBOM_PATH default: "{sbom-path}" description: path where SBOM needs to be executed. builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-maven-versions-plugin: maven-versions-plugin: "{maven-versions-plugin}" version-properties-file: "{version-properties-file}" mvn-version: "{mvn-version}" mvn-pom: "{mvn-pom}" mvn-settings: "{mvn-settings}" - shell: !include-raw-escape: ../shell/maven-patch-release.sh - lf-maven-build: mvn-goals: "{mvn-goals}" # With SBOM Generator - conditional-step: condition-kind: boolean-expression condition-expression: "{sbom-generator}" steps: - shell: echo 'Running SBOM Generator' - lf-infra-maven-sbom-generator: sbom-flags: "{sbom-flags}" - lf-sigul-sign-dir: sign-artifacts: "{sign-artifacts}" sign-dir: "$WORKSPACE/m2repo" sign-mode: "{sign-mode}" - lf-maven-stage: mvn-global-settings: "{mvn-global-settings}" mvn-settings: "{mvn-settings}" mvn-staging-id: "{mvn-staging-id}" - lf-maven-central: mvn-central: "{mvn-central}" mvn-global-settings: "{mvn-global-settings}" mvn-settings: "{mvn-settings}" ossrh-profile-id: "{ossrh-profile-id}" - lf-provide-maven-settings-cleanup - job-template: name: "{project-name}-maven-stage-{stream}" id: gerrit-maven-stage <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_stage scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default triggers: - timed: "{obj:cron}" - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_release_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" - job-template: name: "{project-name}-maven-stage-{stream}" id: github-maven-stage <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_stage properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - timed: "{obj:cron}" - github-pull-request: trigger-phrase: "^stage-(maven-)?release$" only-trigger-phrase: true status-context: "Maven Release" permit-all: true github-hooks: true white-list-target-branches: - "{branch}" included-regions: "{obj:github_included_regions}" ########################## # Maven Stage for Docker # ########################## - _lf_maven_docker_stage: &lf_maven_docker_stage name: lf-maven-docker-stage builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-infra-docker-login: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" # must provide maven settings AFTER docker-login due to its cleanup - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-maven-versions-plugin: maven-versions-plugin: "{maven-versions-plugin}" version-properties-file: "{version-properties-file}" mvn-version: "{mvn-version}" mvn-pom: "{mvn-pom}" mvn-settings: "{mvn-settings}" - shell: !include-raw-escape: ../shell/maven-patch-release.sh - inject: properties-content: | CONTAINER_PULL_REGISTRY={container-public-registry} CONTAINER_PUSH_REGISTRY={container-staging-registry} - lf-maven-build: mvn-goals: "{mvn-goals}" # With SBOM Generator - conditional-step: condition-kind: boolean-expression condition-expression: "{sbom-generator}" steps: - shell: echo 'Running SBOM Generator' - lf-infra-maven-sbom-generator: sbom-flags: "{sbom-flags}" - lf-sigul-sign-dir: sign-artifacts: "{sign-artifacts}" sign-dir: "$WORKSPACE/m2repo" sign-mode: "{sign-mode}" # NO lf-maven-stage # NO lf-maven-central - lf-provide-maven-settings-cleanup gerrit_release_docker_triggers: - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+stage-(docker-)?release\s*$' - job-template: name: "{project-name}-maven-docker-stage-{stream}" id: gerrit-maven-docker-stage <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_stage # yamllint disable-line rule:key-duplicates <<: *lf_maven_docker_stage scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default triggers: - timed: "{obj:cron}" - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_release_docker_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" - job-template: name: "{project-name}-maven-docker-stage-{stream}" id: github-maven-docker-stage <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_stage # yamllint disable-line rule:key-duplicates <<: *lf_maven_docker_stage properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "{branch}" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - timed: "{obj:cron}" - github-pull-request: trigger-phrase: "^stage-(docker-)?release$" only-trigger-phrase: true status-context: "Maven Release" permit-all: true github-hooks: true white-list-target-branches: - "{branch}" included-regions: "{obj:github_included_regions}" ############### # Maven Sonar # ############### - _lf_maven_sonar: &lf_maven_sonar name: lf-maven-sonar ###################### # Default parameters # ###################### branch: master # Sonar should always be run on master branch build-days-to-keep: 7 build-timeout: 60 cron: "H H * * 6" # run weekly disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" jacoco-exclude-pattern: >- **/gen/**, **/generated-sources/**, **/yang-gen**, **/pax/**, java-version: openjdk11 java-opts: "" mvn-global-settings: global-settings mvn-goals: clean install mvn-opts: "" mvn-params: "" mvn-version: mvn35 sonar-mvn-goal: "sonar:sonar" sonarcloud: false sonarcloud-project-key: "" sonarcloud-project-organization: "" sonarcloud-api-token-cred-id: sonarcloud-api-token sonarcloud-qualitygate-wait: false # Projects not compatible with jdk17 can set java-version to something else sonarcloud-java-version: openjdk17 stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false scan-dev-branch: false gerrit_sonar_triggers: - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+run-sonar\s*$' ##################### # Job Configuration # ##################### disabled: "{disable-job}" parameters: - lf-infra-parameters: project: "{project}" branch: "{branch}" stream: "{stream}" - lf-infra-maven-parameters: mvn-opts: "{mvn-opts}" mvn-params: "{mvn-params}" mvn-version: "{mvn-version}" - string: name: ARCHIVE_ARTIFACTS default: "{archive-artifacts}" description: Artifacts to archive to the logs server. - string: name: JAVA_OPTS default: "{java-opts}" description: | Java options. Example: -Xmx1024m - string: name: SONAR_MAVEN_GOAL default: "{sonar-mvn-goal}" description: | Maven goals to pass to the Sonar call. Typically sonar:sonar however to use a specific version of the sonar-maven-plugin we can call "org.codehaus.mojo:sonar-maven-plugin:3.3.0.603:sonar". wrappers: - credentials-binding: - text: credential-id: "{sonarcloud-api-token-cred-id}" variable: API_TOKEN triggers: - timed: "{obj:cron}" - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_sonar_triggers}" projects: - project-compare-type: "ANT" project-pattern: "{project}" branches: - branch-compare-type: "ANT" branch-pattern: "**/master" skip-vote: successful: true failed: true unstable: true notbuilt: true publishers: - lf-jacoco-report: exclude-pattern: "{jacoco-exclude-pattern}" - findbugs - lf-infra-publish - _mvn_sonar_builders: &mvn_sonar_builders name: mvn-sonar-builders builders: - lf-infra-pre-build # With SonarCloud - conditional-step: condition-kind: boolean-expression condition-expression: "{sonarcloud}" steps: - shell: echo 'Using SonarCloud' - lf-infra-maven-sonarcloud: java-version: "{java-version}" mvn-goals: "{mvn-goals}" mvn-settings: "{mvn-settings}" mvn-version: "{mvn-version}" sonarcloud-project-key: "{sonarcloud-project-key}" sonarcloud-project-organization: "{sonarcloud-project-organization}" sonarcloud-java-version: "{sonarcloud-java-version}" sonarcloud-qualitygate-wait: "{sonarcloud-qualitygate-wait}" scan-dev-branch: "{scan-dev-branch}" # With SonarQube - conditional-step: condition-kind: not condition-operand: condition-kind: boolean-expression condition-expression: "{sonarcloud}" steps: - shell: echo 'Using SonarQube' - lf-infra-maven-sonar: java-version: "{java-version}" mvn-goals: "{mvn-goals}" mvn-settings: "{mvn-settings}" mvn-version: "{mvn-version}" - _mvn_sonar_builders_prescan_script: &mvn_sonar_builders_prescan_script name: mvn-sonar-builders-prescan-script builders: - shell: "{sonar-prescan-script}" - lf-infra-pre-build # With SonarCloud - conditional-step: condition-kind: boolean-expression condition-expression: "{sonarcloud}" steps: - shell: echo 'Using SonarCloud' - lf-infra-maven-sonarcloud: java-version: "{java-version}" mvn-goals: "{mvn-goals}" mvn-settings: "{mvn-settings}" mvn-version: "{mvn-version}" sonarcloud-project-key: "{sonarcloud-project-key}" sonarcloud-project-organization: "{sonarcloud-project-organization}" sonarcloud-java-version: "{sonarcloud-java-version}" sonarcloud-qualitygate-wait: "{sonarcloud-qualitygate-wait}" scan-dev-branch: "{scan-dev-branch}" # With SonarQube - conditional-step: condition-kind: not condition-operand: condition-kind: boolean-expression condition-expression: "{sonarcloud}" steps: - shell: echo 'Using SonarQube' - lf-infra-maven-sonar: java-version: "{java-version}" mvn-goals: "{mvn-goals}" mvn-settings: "{mvn-settings}" mvn-version: "{mvn-version}" - builder: name: lf-infra-maven-sbom-generator # Run Maven goals and trigger SPDX SBOM Generator tool builders: - inject: properties-content: | SBOM_FLAGS={sbom-flags} - shell: !include-raw-escape: - ../shell/sbom-generator.sh - builder: name: lf-infra-maven-sonar # Run a Sonar build with Maven builders: - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - inject: # Switch this to the sonar wrapper when JJB 2.0 is available properties-content: | SONAR_HOST_URL=$SONAR_URL MAVEN_GOALS={mvn-goals} - lf-provide-maven-settings: global-settings-file: global-settings settings-file: "{mvn-settings}" - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-sonar.sh - lf-provide-maven-settings-cleanup - builder: name: lf-infra-maven-sonarcloud # Run a Sonar build with Maven builders: - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - inject: # Switch this to the sonar wrapper when JJB 2.0 is available properties-content: | SONAR_HOST_URL=https://sonarcloud.io PROJECT_KEY={sonarcloud-project-key} PROJECT_ORGANIZATION={sonarcloud-project-organization} MAVEN_GOALS={mvn-goals} SONARCLOUD_JAVA_VERSION={sonarcloud-java-version} SCAN_DEV_BRANCH={scan-dev-branch} SONARCLOUD_QUALITYGATE_WAIT={sonarcloud-qualitygate-wait} - lf-provide-maven-settings: global-settings-file: global-settings settings-file: "{mvn-settings}" - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-sonar.sh - lf-provide-maven-settings-cleanup - job-template: name: "{project-name}-sonar" id: gerrit-maven-sonar <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_sonar <<: *mvn_sonar_builders scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: $GERRIT_REFSPEC branch: $GERRIT_BRANCH submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default - job-template: name: "{project-name}-sonar-verify" id: gerrit-maven-sonar-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_sonar <<: *mvn_sonar_builders sonarcloud: true scan-dev-branch: true sonarcloud-qualitygate-wait: false gerrit_sonar_triggers: - patchset-created-event: exclude-drafts: true exclude-trivial-rebase: false exclude-no-code-change: false - draft-published-event - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$' gerrit_trigger_file_paths: - compare-type: REG_EXP pattern: ".*" triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_sonar_triggers}" projects: - project-compare-type: "ANT" project-pattern: "{project}" branches: - branch-compare-type: "ANT" branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: $GERRIT_REFSPEC branch: $GERRIT_BRANCH submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: gerrit - job-template: name: "{project-name}-sonar-prescan-script" id: gerrit-maven-sonar-prescan-script <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_sonar <<: *mvn_sonar_builders_prescan_script scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: $GERRIT_REFSPEC branch: $GERRIT_BRANCH submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default - job-template: name: "{project-name}-sonar" id: github-maven-sonar <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_sonar properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "$sha1" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - timed: "{obj:cron}" - github-pull-request: trigger-phrase: "^run-sonar$" only-trigger-phrase: true status-context: "Maven Sonar" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" - job-template: name: "{project-name}-sonar-prescan-script" id: github-maven-sonar-prescan-script <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_sonar <<: *mvn_sonar_builders_prescan_script properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "$sha1" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - timed: "{obj:cron}" - github-pull-request: trigger-phrase: "^run-sonar$" only-trigger-phrase: true status-context: "Maven Sonar" permit-all: true github-hooks: true org-list: - "{github-org}" white-list: "{obj:github_pr_allowlist}" admin-list: "{obj:github_pr_admin_list}" white-list-target-branches: - "{branch}" ################ # Maven Verify # ################ - _lf_maven_verify: &lf_maven_verify name: lf-maven-verify ###################### # Default parameters # ###################### branch: master build-days-to-keep: 7 build-timeout: 60 disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" jacoco-exclude-pattern: >- **/gen/**, **/generated-sources/**, **/yang-gen**, **/pax/** java-version: openjdk11 mvn-global-settings: global-settings mvn-goals: clean deploy mvn-opts: "" mvn-params: "-Dstream=$STREAM -Dmaven.source.skip=true" mvn-version: mvn35 pre-build-script: "# pre-build script goes here" post-build-script: "# post-build script goes here" stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_verify_triggers: - patchset-created-event: exclude-drafts: true exclude-trivial-rebase: false exclude-no-code-change: false - draft-published-event - comment-added-contains-event: comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$' gerrit_trigger_file_paths: - compare-type: REG_EXP pattern: ".*" # github_included_regions MUST match gerrit_trigger_file_paths github_included_regions: - ".*" ##################### # Job Configuration # ##################### concurrent: true disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - shell: "{pre-build-script}" - lf-maven-build: mvn-goals: "{mvn-goals}" - shell: "{post-build-script}" - lf-provide-maven-settings-cleanup publishers: - findbugs - lf-jacoco-report: exclude-pattern: "{jacoco-exclude-pattern}" - lf-infra-publish - job-template: name: "{project-name}-maven-verify-{stream}-{mvn-version}-{java-version}" id: gerrit-maven-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_verify scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: gerrit triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_verify_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" - job-template: name: "{project-name}-maven-verify-{stream}-{mvn-version}-{java-version}" id: github-maven-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_verify properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "$sha1" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - github-pull-request: trigger-phrase: "^(recheck|reverify)$" only-trigger-phrase: false status-context: "Maven Verify {mvn-version}-{java-version}" permit-all: true github-hooks: true white-list-target-branches: - "{branch}" included-regions: "{obj:github_included_regions}" ########################### # Maven Verify for Docker # ########################### - _lf_maven_docker_verify: &lf_maven_docker_verify name: lf-maven-docker-verify # image push not allowed during verification mvn-goals: clean install builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-infra-docker-login: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" # must provide maven settings AFTER docker due to its cleanup - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - inject: properties-content: | CONTAINER_PULL_REGISTRY={container-public-registry} - lf-maven-build: mvn-goals: "{mvn-goals}" - lf-provide-maven-settings-cleanup - job-template: name: "{project-name}-maven-docker-verify-{stream}-{mvn-version}-{java-version}" id: gerrit-maven-docker-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_verify # yamllint disable-line rule:key-duplicates <<: *lf_maven_docker_verify scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: gerrit triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_verify_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" - job-template: name: "{project-name}-maven-docker-verify-{stream}-{mvn-version}-{java-version}" id: github-maven-docker-verify <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_verify # yamllint disable-line rule:key-duplicates <<: *lf_maven_docker_verify properties: - lf-infra-properties: build-days-to-keep: "{build-days-to-keep}" - github: url: "{github-url}/{github-org}/{project}" scm: - lf-infra-github-scm: url: "{git-clone-url}{github-org}/{project}" refspec: "+refs/pull/*:refs/remotes/origin/pr/*" branch: "$sha1" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: default jenkins-ssh-credential: "{jenkins-ssh-credential}" triggers: - github-pull-request: trigger-phrase: "^(recheck|reverify)$" only-trigger-phrase: false status-context: "Maven Docker Verify {mvn-version}-{java-version}" permit-all: true github-hooks: true white-list-target-branches: - "{branch}" included-regions: "{obj:github_included_regions}" ############################# # Maven Verify Dependencies # ############################# - _lf_maven_verify_dependencies: &lf_maven_verify_dependencies name: lf-maven-verify-dependencies ###################### # Default parameters # ###################### branch: master build-days-to-keep: 7 build-timeout: 60 disable-job: false git-url: "$GIT_URL/$PROJECT" github-url: "https://github.com" jacoco-exclude-pattern: >- **/gen/**, **/generated-sources/**, **/yang-gen**, **/pax/** java-version: openjdk11 mvn-global-settings: global-settings mvn-goals: clean deploy mvn-opts: "" mvn-params: "-Dstream=$STREAM" mvn-version: mvn35 stream: master submodule-recursive: true submodule-timeout: 10 submodule-disable: false gerrit_verify_triggers: - comment-added-contains-event: comment-contains-value: "recheck: [0-9 ]+" gerrit_trigger_file_paths: - compare-type: ANT pattern: "**" ##################### # Job Configuration # ##################### concurrent: true disabled: "{disable-job}" builders: - lf-infra-pre-build - lf-jacoco-nojava-workaround - lf-maven-install: mvn-version: "{mvn-version}" - lf-update-java-alternatives: java-version: "{java-version}" - lf-provide-maven-settings: global-settings-file: "{mvn-global-settings}" settings-file: "{mvn-settings}" - lf-fetch-dependent-patches - shell: !include-raw-escape: - ../shell/common-variables.sh - ../shell/maven-build-deps.sh - lf-maven-build: mvn-goals: "{mvn-goals}" - lf-provide-maven-settings-cleanup publishers: - findbugs - lf-jacoco-report: exclude-pattern: "{jacoco-exclude-pattern}" - lf-infra-publish - job-template: name: "{project-name}-maven-verify-deps-{stream}-{mvn-version}-{java-version}" id: gerrit-maven-verify-dependencies <<: *lf_maven_common # yamllint disable-line rule:key-duplicates <<: *lf_maven_verify_dependencies scm: - lf-infra-gerrit-scm: jenkins-ssh-credential: "{jenkins-ssh-credential}" git-url: "{git-url}" refspec: "$GERRIT_REFSPEC" branch: "$GERRIT_BRANCH" submodule-recursive: "{submodule-recursive}" submodule-timeout: "{submodule-timeout}" submodule-disable: "{submodule-disable}" choosing-strategy: gerrit triggers: - gerrit: server-name: "{gerrit-server-name}" trigger-on: "{obj:gerrit_verify_triggers}" projects: - project-compare-type: ANT project-pattern: "{project}" branches: - branch-compare-type: ANT branch-pattern: "**/{branch}" file-paths: "{obj:gerrit_trigger_file_paths}" comment-text-parameter-mode: PLAIN