pipeline {
  agent any

  environment {
    REGISTRY          = "docker.io/adelyao"
    APP_NAME          = "employee"
    MANIFEST_REPO     = "https://git.winteraccess.id/adel/Employee-manifest.git"
    MANIFEST_CRED_ID  = "GIT_CRED_ID"
    DOCKER_CRED_ID    = "DOCKER_CRED_ID"
    MANIFEST_DIR      = "manifest"
  }

  parameters {
    string(name: 'IMAGE_TAG', defaultValue: '', description: 'Custom image tag (optional)')
  }

  stages {
    stage('Prepare Workspace') {
      steps {
        cleanWs()
        checkout scm
      }
    }

    stage('Install yq') {
      steps {
        sh '''
          if ! command -v yq &> /dev/null; then
            echo "Installing yq..."
            wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O /usr/local/bin/yq
            chmod +x /usr/local/bin/yq
          fi
          yq --version
        '''
      }
    }

    stage('Build and Push Docker Images') {
      steps {
        script {
          def tag = params.IMAGE_TAG ?: "build-${env.BUILD_NUMBER}"
          echo "Building and pushing images with tag: ${tag}"

          withCredentials([usernamePassword(credentialsId: env.DOCKER_CRED_ID, usernameVariable: 'DOCKER_USER', passwordVariable: 'DOCKER_PASS')]) {
            sh """
              echo "\$DOCKER_PASS" | docker login -u "\$DOCKER_USER" --password-stdin

              docker build -t ${REGISTRY}/${APP_NAME}-be:${tag} ./employee-be
              docker push ${REGISTRY}/${APP_NAME}-be:${tag}

              docker build -t ${REGISTRY}/${APP_NAME}-fe:${tag} ./employee-fe
              docker push ${REGISTRY}/${APP_NAME}-fe:${tag}

              docker logout
            """
          }

          env.IMAGE_TAG_FINAL = tag
        }
      }
    }

    stage('Update Manifest for Current Branch') {
      steps {
        script {
          def currentBranch = env.BRANCH_NAME ?: sh(script: "git rev-parse --abbrev-ref HEAD", returnStdout: true).trim()
          echo "🔹 Current branch detected: ${currentBranch}"

          def envMap = [
            "develop": "dev",
            "staging": "stag",
            "main": "prod"
          ]
          def overlayEnv = envMap.get(currentBranch, currentBranch)

          if (!["dev", "stag", "prod"].contains(overlayEnv)) {
            error "Invalid branch/environment: ${overlayEnv}. Only dev, stag, or prod allowed."
          }

          withCredentials([usernamePassword(credentialsId: env.MANIFEST_CRED_ID, usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) {
            sh """
              echo "Cloning manifest repo..."
              rm -rf ${MANIFEST_DIR}
              git clone https://\$GIT_USER:\$GIT_PASS@${env.MANIFEST_REPO.replace('https://', '')} ${MANIFEST_DIR}
            """

            dir(env.MANIFEST_DIR) {
              sh """
                git checkout ${overlayEnv} || git checkout -b ${overlayEnv}

                echo "Updating image tags inside overlays/${overlayEnv}/patch-deployment.yaml..."
                yq e -i '(.spec.template.spec.containers[] | select(.name == "backend") | .image) = "${REGISTRY}/${APP_NAME}-be:${overlayEnv}-${env.IMAGE_TAG_FINAL}"' overlays/${overlayEnv}/patch-deployment.yaml
                yq e -i '(.spec.template.spec.containers[] | select(.name == "frontend") | .image) = "${REGISTRY}/${APP_NAME}-fe:${overlayEnv}-${env.IMAGE_TAG_FINAL}"' overlays/${overlayEnv}/patch-deployment.yaml

                git add overlays/${overlayEnv}/patch-deployment.yaml
                git commit -m "chore(${overlayEnv}): update image tags to ${overlayEnv}-${env.IMAGE_TAG_FINAL}" || echo "No changes to commit"

                git push https://\$GIT_USER:\$GIT_PASS@${env.MANIFEST_REPO.replace('https://', '')} ${overlayEnv}
              """
            }
          }
        }
      }
    }

    stage('ArgoCD Sync (optional)') {
      steps {
        echo "If ArgoCD auto-sync is enabled, updates will deploy automatically."
      }
    }
  }

  post {
    success {
      echo "Pipeline completed successfully for branch: ${env.BRANCH_NAME}"
    }
    failure {
      echo "Pipeline failed. Check logs for details."
    }
  }
}