.gitlab-ci.yml

image: python:3.8-buster

variables:
  GIT_SUBMODULE_STRATEGY: recursive
  GIT_DEPTH: 1  
  BRANCH_NAME: "${CI_COMMIT_REF_NAME}_temp"              # Name of the branch to modify
  BOT_NAME: "GitLab Runner Bot"              # Bot's name that appears in the commit log
  BOT_EMAIL: "gitlab-runner-bot@example.net" # Bot's email, not important
  COMMIT_MESSAGE: "Commit from runner "      # Part of the commit message


.push_convert: &push_convert |
  lines=$(git diff --cached | wc -l)
  if [ $lines -gt 0 ]; then
    echo "commiting"
    git commit -m 'convert whitelists'
    echo "git push $BRANCH_NAME"
    git push -o ci.skip "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" $BRANCH_NAME
  else
    echo "nothing to commit"
  fi


.delete_private_files: &delete_private_files |
  lines=$(git for-each-ref refs/heads/ --format='%(refname:short)')
  if [ $(echo $lines | grep -w $BRANCH_NAME | wc -l) -gt 0 ]; then
    git checkout $BRANCH_NAME
  else
    git checkout -b $BRANCH_NAME
  fi
  for FILENAME in $(cat private_files)
    do  
      for DELETE_FILE in $(find -print | grep $(echo $FILENAME | tr -d '\r')$)
        do
          git rm $DELETE_FILE
        done
    done
  git commit -m 'delete private files'
  echo "git push $BRANCH_NAME"
  git push -o ci.skip "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" $BRANCH_NAME


.push_merge_public: &push_merge_public |
  git checkout public
  git pull --allow-unrelated-histories --strategy-option theirs
  git merge --allow-unrelated-histories origin/$BRANCH_NAME --strategy-option theirs
  echo "merge branches"
  git push -o ci.skip "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" public
  

.push_merge: &push_merge |
  lines=$(git ls-remote --heads "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" $BRANCH_NAME | wc -l)
  if [ $lines -gt 0 ]; then
    git checkout $CI_COMMIT_REF_NAME
    git pull
    git merge --allow-unrelated-histories origin/$BRANCH_NAME --strategy-option theirs
    echo "merge branches"
    git push -o ci.skip "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" $CI_COMMIT_REF_NAME
  else
    echo "nothing to commit"
  fi


.remove_local: &remove_local |
  git fetch --all --prune
  lines=$(git for-each-ref refs/heads/ --format='%(refname:short)')
  echo $lines
  if [ $(echo $lines | grep -w $BRANCH_NAME | wc -l) -gt 0 ]; then
    git branch -D $BRANCH_NAME
    echo "delete local branch"
  else
    echo "No local branch to delete"
  fi
  git fetch --all --prune
  lines=$(git for-each-ref refs/heads/ --format='%(refname:short)')
  echo $lines
  if [ $(echo $lines | grep -w main_temp | wc -l) -gt 0 ]; then
    git branch -D main_temp
    echo "delete local branch"
  else
    echo "No local main_temp branch to delete"
  fi
  
  
  
.remove_remote: &remove_remote |
  git fetch --all --prune
  lines=$(git for-each-ref refs/remotes/ --format='%(refname:short)')
  echo $lines
  if [ $(echo $lines | grep -w "origin/$BRANCH_NAME" | wc -l) -gt 0 ]; then
    git push "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" --delete $BRANCH_NAME
    echo "delete remote branch"
  else
    echo "No remote branch to delete"
  fi
  git fetch --all --prune
  lines=$(git for-each-ref refs/remotes/ --format='%(refname:short)')
  echo $lines
  if [ $(echo $lines | grep -w "origin/main_temp" | wc -l) -gt 0 ]; then
    git push "https://whatever:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" --delete main_temp
    echo "delete remote branch"
  else
    echo "No remote main_temp branch to delete"
  fi
  

before_script:
  - pip install -r requirements.txt


stages:    
  - pre_remove     
  - test
  - convert
  - merge
  - merge_public
  - post_remove
  

test_whitelists:
  stage: test
  script:
    - test/test_whitelists.py


convert_whitelists:
  stage: convert
  except:
    - public
  script:
    - test/update_department.py -d "${MANAGEMENT_API_DOMAIN}" -id "${MANAGEMENT_API_CLIENTID}" -s "${MANAGEMENT_API_SECRET}"
    - misc/convert.py
    - git config --global user.name "${BOT_NAME}"
    - git config --global user.email "${BOT_EMAIL}"
    - git fetch --all --prune
    - git checkout -b $BRANCH_NAME
    - git add whitelists/department
    - git add misc/json
    - *push_convert
    

merge_branch:
  stage: merge
  except:
    - public
  script:
    - git fetch
    - git config --global user.name "${BOT_NAME}"
    - git config --global user.email "${BOT_EMAIL}"
    - *push_merge


remove_branch_pre:
  stage: pre_remove
  script:
    - git config --global user.name "${BOT_NAME}"
    - git config --global user.email "${BOT_EMAIL}"
    - *remove_local
    - *remove_remote
  

remove_branch_post:
  stage: post_remove
  script:
    - git config --global user.name "${BOT_NAME}"
    - git config --global user.email "${BOT_EMAIL}"
    - *remove_local
    - *remove_remote


merge_public_branch:
  stage: merge_public
  only: 
    - main
  script:
    - git config --global user.name "${BOT_NAME}"
    - git config --global user.email "${BOT_EMAIL}"
    - *delete_private_files
    - *push_merge_public