Jenkinsfile

pipeline {
    agent any
    
    environment {
        AWS_REGION = 'eu-west-1'
        AWS_ACCOUNT_ID = '538079272432'
        ECR_REGISTRY = '538079272432.dkr.ecr.eu-west-1.amazonaws.com'
        IMAGE_NAME = 'gitops-stack'
        IMAGE_TAG = "${BUILD_NUMBER}"
    }
    
    stages {
        stage('Test') {
            steps {
                echo 'Ejecutando tests...'
                sh 'pip install -r app/requirements.txt --break-system-packages'
                sh 'pytest tests/'
            }
        }
        
        stage('Build imagen Docker') {
            steps {
                echo 'Construyendo imagen Docker...'
                sh "docker build -t ${IMAGE_NAME}:${IMAGE_TAG} ."
            }
        }
        
        stage('Push a ECR') {
            steps {
                withCredentials([[
                    $class: 'AmazonWebServicesCredentialsBinding',
                    credentialsId: 'aws-credentials'
                ]]) {
                    echo 'Publicando imagen en ECR...'
                    sh """
                        aws ecr get-login-password --region ${AWS_REGION} | \
                        docker login --username AWS --password-stdin ${ECR_REGISTRY}
                        docker tag ${IMAGE_NAME}:${IMAGE_TAG} ${ECR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
                        docker push ${ECR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
                    """
                }
            }
        }
        
        stage('Deploy con Terraform') {
            steps {
                withCredentials([[
                    $class: 'AmazonWebServicesCredentialsBinding',
                    credentialsId: 'aws-credentials'
                ]]) {
                    echo 'Desplegando infraestructura con Terraform...'
                    dir('terraform') {
                        sh 'terraform init'
                        sh 'terraform plan'
                        input message: '¿Aplicar cambios en producción?'
                        sh 'terraform apply -auto-approve'
                    }
                }
            }
        }

        stage('Configurar nodos con Ansible via SSM') {
            steps {
                withCredentials([[
                    $class: 'AmazonWebServicesCredentialsBinding',
                    credentialsId: 'aws-credentials'
                ]]) {
                    echo 'Configurando nodos con Ansible via SSM...'
                    sh """
                        export NODE1_ID=\$(aws ec2 describe-instances \
                            --region ${AWS_REGION} \
                            --filters \
                              "Name=tag:eks:cluster-name,Values=gitops-stack-prod" \
                              "Name=instance-state-name,Values=running" \
                            --query 'Reservations[0].Instances[0].InstanceId' \
                            --output text)

                        export NODE2_ID=\$(aws ec2 describe-instances \
                            --region ${AWS_REGION} \
                            --filters \
                              "Name=tag:eks:cluster-name,Values=gitops-stack-prod" \
                              "Name=instance-state-name,Values=running" \
                            --query 'Reservations[1].Instances[0].InstanceId' \
                            --output text)

                        echo "Nodo 1 ID: \$NODE1_ID"
                        echo "Nodo 2 ID: \$NODE2_ID"

                        pip install ansible-ssm --break-system-packages || true

                        cd ansible
                        ansible-playbook site.yml \
                            -e NODE1_ID=\$NODE1_ID \
                            -e NODE2_ID=\$NODE2_ID
                    """
                }
            }
        }
        
        stage('Actualizar Kubernetes') {
            steps {
                withCredentials([[
                    $class: 'AmazonWebServicesCredentialsBinding',
                    credentialsId: 'aws-credentials'
                ]]) {
                    echo 'Conectando a EKS y desplegando...'
                    sh """
                        # Asumir el rol de admin EKS
                        CREDS=\$(aws sts assume-role \
                            --role-arn arn:aws:iam::${AWS_ACCOUNT_ID}:role/eks-admin-role \
                            --role-session-name jenkins-deploy-${BUILD_NUMBER} \
                            --query 'Credentials.[AccessKeyId,SecretAccessKey,SessionToken]' \
                            --output text)

                        export AWS_ACCESS_KEY_ID=\$(echo \$CREDS | awk '{print \$1}')
                        export AWS_SECRET_ACCESS_KEY=\$(echo \$CREDS | awk '{print \$2}')
                        export AWS_SESSION_TOKEN=\$(echo \$CREDS | awk '{print \$3}')

                        aws eks update-kubeconfig --region ${AWS_REGION} --name gitops-stack-prod
                        kubectl apply -f k8s/deployment.yaml
                        kubectl apply -f k8s/service.yaml
                        kubectl set image deployment/pipeline-demo pipeline-demo=${ECR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
                        kubectl rollout status deployment/pipeline-demo --timeout=120s
                    """
                }
            }
        }
    }
    
    post {
        success {
            echo 'Pipeline completado con éxito'
        }
        failure {
            echo 'Pipeline fallido — revisar logs'
        }
    }
}