pipeline {
    agent any

    parameters {
        booleanParam(
            name: 'DEPLOY_AFTER_BUILD',
            defaultValue: false,
            description: '是否快速回滚上一个版本?'
        )
        choice(
            name: 'BRANCH_NAME',
            choices: ['dxin', 'opt'],
            description: '选择Yaml的分支'
        )
        imageTag(
            name: 'IMAGE_NAME',
            description: '此处是 sit 镜像仓库内的 flymoon-agent 镜像',
            registry: 'https://uswccr.ccs.tencentyun.com',
            image: 'lessiesit/flymoon-agent',
            credentialId: 'dxin_img_hub_auth',
            filter: '.*',
            defaultTag: '',
            verifySsl: true
        )
    }
    environment {
        KUBECONFIG = credentials('k8s-test-config-admin')  // k8s 凭证 ID, Jenkins 中配置的凭证名称
        Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-agent.yaml"
        Deployment_name = "s1-flymoon-agent"
        K8s_namespace = "sit"
        Pod_container_name = "flymoon-agent"
    }
    stages {
       stage('快速回滚上一版本') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == true }
            }
            steps {
                script {
                    sh """
                    echo "=== 开始回滚到上一个版本 ==="
                    kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace}
                    echo "=== 回滚中... ==="
                    kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
                    echo "=== 查看所使用的镜像 ==="
                    kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'
                    echo "=== 回滚完成 ==="
                    """
                }
            }
        }
        stage('拉取yaml') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                git branch: "${params.BRANCH_NAME}", 
                credentialsId: 'fly_gitlab_auth', 
                url: 'http://172.24.16.20/opt/opt-config.git'
            }
        }
        stage('修改YAML镜像') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    echo "=== 所选择镜像: ${params.IMAGE_NAME} ==="
                    sh """
                    echo "=== 修改 Deployment YAML 中的镜像版本 ==="
                    sed -i 's#image:.*#image: ${params.IMAGE_NAME}#' ${Deployment_yaml}
                    """
                }
            }
        }
        stage('部署到k8s') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}"
                    sh """
                        echo "===Apply Deployment YAML ==="
                        kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace}

                        echo "=== 查看当前使用的镜像 ==="
                        kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'

                        echo "=== 添加注解 ==="
                        kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace}

                        echo "=== 查看历史版本 ==="
                        kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} 
                    """
                }
            }
        }
        stage('检查部署情况') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                echo "检测部署状态并验证新版本运行情况"
                sh """
                    echo "=== 检查 Deployment 更新状态 ==="
                    kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s
                    
                    echo "=== 检查 Pods 是否全部 Ready ==="
                    kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide

                    echo "=== 获取最新 Pod 名称 ==="
                    NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}')

                    echo "=== 新 Pod 启动日志(最近20行) ==="
                    kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true

                    echo "✅ 部署成功：\$NEW_POD 已正常运行"
                """
            }
        }
        stage('生成变更说明') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM"
                    def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim()
                    env.CHANGE_MSG = """
                        jenkins执行人: ${user}
                        修改时间: ${now}
                        镜像版本: ${params.IMAGE_NAME}
                        部署对象: ${Deployment_name}
                    """.stripIndent()
                    echo "=== 本次部署变更说明 ==="
                    echo env.CHANGE_MSG
                }
            }
        }
        stage('提交变更记录到 GitLab') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) {
                        sh """
                            cd ${WORKSPACE}
                            git config user.name "jenkins"
                            git config user.email "jenkins@local"

                            git add ${Deployment_yaml}
                            git commit -m "更新镜像 ${CHANGE_MSG}"

                            # 生成临时 .netrc 文件
                            echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc
                            chmod 600 ~/.netrc

                            git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME}
                        """
                    }
                }
            }
        }
    }

    post {
        success {
            echo "成功！"
            echo "=== 所选择镜像: ${params.IMAGE_NAME} ==="
        }
        failure {
            echo "有步骤失败，请检查！"
        }
    }
}