.gitlab-ci.yml

stages:
  - build
  - test
  - deploy
  - upload

variables:
  GRADLE_USER_HOME: "${CI_PROJECT_DIR}/.gradle"

cache:
  - key:
      files:
        - gradle/wrapper/gradle-wrapper.properties
    paths:
      - .gradle/wrapper
      - .gradle/caches

#####################################
# Build XCFramework

xcframework:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  when: manual
  artifacts:
    name: "green_xcframework-$CI_COMMIT_SHORT_SHA"
    expire_in: 4 days
    when: on_success
    paths:
      - common/build/XCFrameworks/*.zip
  tags:
    - osx
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - ./gradlew assembleXCFramework
    - cd common/build/XCFrameworks
    - zip -r debug.zip debug
    - zip -r release.zip release

#####################################
# Build Signed APKs

production:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
    expire_in: 7 days
    when: on_success
    paths:
      - green/build/outputs/apk/productionGoogle/release/*.apk
  tags:
    - ga
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - echo $ANDROID_KEYSTORE_BASE64 | base64 -d > keystore.jks
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleProductionGoogleRelease

production_fdroid:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  when: manual
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
    expire_in: 7 days
    when: on_success
    paths:
      - green/build/outputs/apk/productionFDroid/release/*.apk
  tags:
    - ga
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - echo $ANDROID_KEYSTORE_BASE64 | base64 -d > keystore.jks
    - ./prepare_fdroid.sh
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleProductionFDroidRelease


development:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  when: manual
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
    expire_in: 7 days
    when: on_success
    paths:
      - green/build/outputs/apk/development/release/*.apk
  tags:
    - ga
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - echo $ANDROID_KEYSTORE_BASE64 | base64 -d > keystore.jks
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleDevelopmentRelease

production_debug:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  when: manual
  cache:
    policy: pull
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
    expire_in: 7 days
    when: on_success
    paths:
      - green/build/outputs/apk/productionGoogle/debug/*.apk
  tags:
    - ga
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - echo $ANDROID_KEYSTORE_BASE64 | base64 -d > keystore.jks
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleProductionGoogleDebug

gdk_commit:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA-gdk-$GDK_COMMIT"
    expire_in: 7 days
    when: on_success
    paths:
      - green/build/outputs/apk/development/debug/*.apk
  tags:
    - ga
  when: manual
  cache:
    policy: pull
  variables:
    GDK_COMMIT: master
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - echo $ANDROID_KEYSTORE_BASE64 | base64 -d > keystore.jks
    - echo "GDK_COMMIT=$GDK_COMMIT"
    - ./gdk/fetch_android_binaries.sh -c $GDK_COMMIT
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleDevelopmentDebug

#####################################
# Build Unsigned APK

build_google_play:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: build
  when: manual
  cache:
    policy: pull
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
    expire_in: 1 hour
    when: on_success
    paths:
      - green/build/outputs/apk/productionGoogle/release/*.apk
      - green/build/outputs/mapping/*/mapping.txt
  tags:
    - ga
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - ./gradlew lintProductionGoogleRelease
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleProductionGoogleRelease

build_osx:
  stage: build
  when: manual
  tags:
    - osx
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - ./gradlew useBlockstreamKeys
    - ./gradlew assembleProductionGoogleRelease

#####################################
# Test

unit_tests:
  image:
    name: greenaddress/android@sha256:2e1c287e43417d4d69c11bf517f03043d23aba75f9aba1ee97cb47870c2106ca
    entrypoint: [""]
  stage: test
  needs: []
  cache:
    policy: pull
  tags:
    - ga
  variables:
    GIT_SUBMODULE_STRATEGY: recursive
  script:
    - cd $CI_PROJECT_DIR
    - ./gradlew useBlockstreamKeys
#    - ./gradlew lintProductionGoogleRelease
    - ./gradlew test

#####################################
# Sign production build

sign_google_play:
  tags:
    - garelease
  stage: deploy
  cache: []
  artifacts:
    name: "$CI_PROJECT_NAME-$CI_JOB_NAME-$CI_COMMIT_SHORT_SHA"
    expire_in: 30 days
    paths:
      - green/build/outputs/*
    when: on_success
  script:
    - cd $CI_PROJECT_DIR/green/build/outputs/apk/productionGoogle/release/
    - /opt/process_release
  needs:
    - build_google_play

#####################################
# Upload to GCS bucket
.gcp_prep:
  stage: upload
  image: blockstream/gcloud-docker-tf:1.1.9
  cache: []
  tags:
    - ga

gcp_auth:
  extends: .gcp_prep
  when: manual
  id_tokens:
    GITLAB_OIDC_TOKEN:
      aud: https://gl.blockstream.io
  variables:
    POOL_ID: gitlab-2f4bb583
    PROVIDER_ID: gitlab
    SERVICE_ACCOUNT_EMAIL: green-android-builds-uploader@green-backend.iam.gserviceaccount.com
  script:
    - echo ${GITLAB_OIDC_TOKEN} > .ci_job_jwt_file
    - gcloud iam workload-identity-pools create-cred-config "projects/697214616889/locations/global/workloadIdentityPools/${POOL_ID}/providers/${PROVIDER_ID}"
      --service-account="${SERVICE_ACCOUNT_EMAIL}"
      --output-file=.gcp_temp_cred.json
      --credential-source-file=.ci_job_jwt_file
  artifacts:
    paths:
      - .gcp_temp_cred.json
      - .ci_job_jwt_file
    expire_in: 1h

gcp_push_production:
  extends: .gcp_prep
  needs: ["gcp_auth", "production"]
  variables:
    GCS_BUCKET: green-android-builds
    APK_NAME: $CI_PROJECT_NAME-$CI_COMMIT_SHA
  before_script:
    - gcloud auth login --cred-file=.gcp_temp_cred.json --update-adc
  script:
    - apk add libqrencode
    - echo "Uploading gs://$GCS_BUCKET/$APK_NAME"
    - gsutil -m cp -r $CI_PROJECT_DIR/green/build/outputs/apk/productionGoogle/release/*.apk gs://$GCS_BUCKET/$APK_NAME.apk
    - echo "https://storage.googleapis.com/$GCS_BUCKET/$APK_NAME.apk"
    - qrencode -t UTF8 "https://storage.googleapis.com/$GCS_BUCKET/$APK_NAME.apk"

gcp_push_development:
  extends: .gcp_prep
  needs: ["gcp_auth", "development"]
  variables:
    GCS_BUCKET: green-android-builds
    APK_NAME: $CI_PROJECT_NAME-$CI_COMMIT_SHA-development
  before_script:
    - gcloud auth login --cred-file=.gcp_temp_cred.json --update-adc
  script:
    - apk add libqrencode
    - echo "Uploading gs://$GCS_BUCKET/$APK_NAME"
    - gsutil -m cp -r $CI_PROJECT_DIR/green/build/outputs/apk/development/release/*.apk gs://$GCS_BUCKET/$APK_NAME.apk
    - echo "https://storage.googleapis.com/$GCS_BUCKET/$APK_NAME.apk"
    - qrencode -t UTF8 "https://storage.googleapis.com/$GCS_BUCKET/$APK_NAME.apk"

gcp_push_gdk_commit:
  extends: .gcp_prep
  needs: ["gcp_auth", "gdk_commit"]
  variables:
    GCS_BUCKET: green-android-builds
    APK_NAME: $CI_PROJECT_NAME-$CI_COMMIT_SHA-gdk
  before_script:
    - gcloud auth login --cred-file=.gcp_temp_cred.json --update-adc
  script:
    - apk add libqrencode
    - echo "Uploading gs://$GCS_BUCKET/$APK_NAME"
    - gsutil -m cp -r $CI_PROJECT_DIR/green/build/outputs/apk/productionGoogle/release/*.apk gs://$GCS_BUCKET/$APK_NAME.apk
    - echo "https://storage.googleapis.com/$GCS_BUCKET/$APK_NAME.apk"
    - qrencode -t UTF8 "https://storage.googleapis.com/$GCS_BUCKET/$APK_NAME.apk"

gcp_push_xcframework:
  extends: .gcp_prep
  needs: ["gcp_auth", "xcframework"]
  variables:
    GCS_BUCKET: green-android-builds
    XCFRAMEWORK_NAME: green_xcframework-$CI_COMMIT_SHA
  before_script:
    - gcloud auth login --cred-file=.gcp_temp_cred.json --update-adc
  script:
    - apk add libqrencode
    - echo "Uploading gs://$GCS_BUCKET/${XCFRAMEWORK_NAME}_debug.zip"
    - gsutil -m cp -r $CI_PROJECT_DIR/common/build/XCFrameworks/release.zip gs://$GCS_BUCKET/${XCFRAMEWORK_NAME}_debug.zip
    - echo "https://storage.googleapis.com/$GCS_BUCKET/${XCFRAMEWORK_NAME}_debug.zip"
    - echo "Uploading gs://$GCS_BUCKET/${XCFRAMEWORK_NAME}_release.zip"
    - gsutil -m cp -r $CI_PROJECT_DIR/common/build/XCFrameworks/release.zip gs://$GCS_BUCKET/${XCFRAMEWORK_NAME}_release.zip
    - echo "https://storage.googleapis.com/$GCS_BUCKET/${XCFRAMEWORK_NAME}_release.zip"