pipeline {
    agent any

    parameters {
        booleanParam(
            name: 'DEPLOY_AFTER_BUILD',
            defaultValue: false,
            description: '是否快速回滚上一个版本?'
        )
        choice(
            name: 'BRANCH_NAME',
            choices: ['dxin', 'opt'],
            description: '选择Yaml的分支'
        )
        imageTag(
            name: 'IMAGE_NAME',
            description: '此处是 sit 镜像仓库内的 flymoon-admin 镜像',
            registry: 'https://uswccr.ccs.tencentyun.com',
            image: 'lessiesit/flymoon-admin',
            credentialId: 'dxin_img_hub_auth',
            filter: '.*',
            defaultTag: '',
            verifySsl: true
        )
    }
    environment {
        KUBECONFIG = credentials('k8s-test-config-admin')  // k8s 凭证 ID, Jenkins 中配置的凭证名称
        IMAGE_FULL_NAME = "uswccr.ccs.tencentyun.com/${IMAGE_NAME}"
        Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-admin.yaml"
        Deployment_name = "s1-flymoon-admin"
        K8s_namespace = "sit"
        Pod_container_name = "flymoon-admin"
    }
    stages {
       stage('快速回滚上一版本') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == true }
            }
            steps {
                script {
                    sh """
                    echo "=== 开始回滚到上一个版本 ==="
                    kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace}
                    echo "=== 回滚中... ==="
                    kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
                    echo "=== 查看所使用的镜像 ==="
                    kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'
                    echo "=== 回滚完成 ==="
                    """
                }
            }
        }
        stage('拉取yaml') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                git branch: "${params.BRANCH_NAME}", 
                credentialsId: 'fly_gitlab_auth', 
                url: 'http://172.24.16.20/opt/opt-config.git'
            }
        }
        stage('修改YAML镜像') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    echo "=== 所选择新的镜像: ${params.IMAGE_NAME} ==="
                    OLD_IMAGE_NAME = sh (
                        script: "kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'",
                        returnStdout: true
                    ).trim()
                    echo "--- 旧镜像: ${OLD_IMAGE_NAME} ---"
                    sh """
                        echo "=== 修改 Deployment YAML 中的镜像版本 ==="
                        sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml}
                    """
                }
            }
        }
        stage('部署到k8s') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}"
                    sh """
                        echo "===Apply Deployment YAML ==="
                        kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace}

                        echo "=== 查看当前新使用的镜像 ==="
                        kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'

                        echo "=== 添加注解 ==="
                        kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace}

                        echo "=== 查看历史版本 ==="
                        kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} 
                    """
                }
            }
        }
        stage('检查部署情况') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    echo "=== 检测部署状态并验证新版本运行情况 ==="
                    echo "--- 检查 Deployment 更新状态 ---"
                    def rolloutStatus = sh(
                        script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s",
                        returnStatus: true
                    )
                
                    if (rolloutStatus != 0){
                        echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..."
                        sh """
                            echo "--- Deployment 状态 ---"
                            kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true

                            echo '--- Pod 列表 ---'
                            kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o wide || true

                            echo "--- Pod 描述 (describe) ---"
                            for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do
                                echo "-- Pod 描述 \$pod --"
                                kubectl describe pod \$pod -n ${K8s_namespace} || true
                            done
                            
                            echo "--- 最近 200 行 Pod 日志 ---"
                            for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do
                                echo "-- logs \$pod --"
                                kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true
                            done
                        """
                        error("=== Deployment 发布失败，请检查以上输出定位问题 ===")
                    }

                    echo "=== 检查 Pods 是否全部 Ready ==="
                    sh "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide"

                    echo "=== 获取最新 Pod 名称 ==="
                    NEW_POD = sh (
                        script: "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'",
                        returnStdout: true
                    ).trim()

                    echo "=== 新 Pod 启动日志(最近20行) ==="
                    sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true"

                    echo "✅ 部署成功：${NEW_POD} 已正常运行"
                }
            }
        }
        stage('生成变更说明') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM"
                    def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim()
                    env.CHANGE_MSG = """
                        jenkins执行人: ${user}
                        修改时间: ${now}
                        旧镜像: ${OLD_IMAGE_NAME}
                        新镜像: ${IMAGE_FULL_NAME}
                        部署对象: ${Deployment_name}
                    """.stripIndent()
                    echo "=== 本次部署变更说明 ==="
                    echo env.CHANGE_MSG
                }
            }
        }
        stage('提交变更记录到 GitLab') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD == false }
            }
            steps {
                script {
                    withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) {
                        sh """
                            cd ${WORKSPACE}
                            git config user.name "jenkins"
                            git config user.email "jenkins@local"

                            git add ${Deployment_yaml}
                            git commit -m "更新镜像 ${CHANGE_MSG}"

                            # 生成临时 .netrc 文件
                            echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc
                            chmod 600 ~/.netrc

                            git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME}
                        """
                    }
                }
            }
        }
    }

    post {
        success {
            echo "成功！"
            echo "=== 所选择镜像: ${params.IMAGE_NAME} ==="
        }
        failure {
            echo "有步骤失败，请检查！"
        }
    }
}