pipeline {
    agent {
        kubernetes {
            cloud 'k8s-cloud'
            yaml '''
apiVersion: v1
kind: Pod
spec:
  serviceAccountName: jenkins-admin
  containers:
  - name: jnlp
    image: kubernetes-registry.moon.com/moon/inbound-agent:3345.v03dee9b_f88fc
    args: ['$(JENKINS_SECRET)', '$(JENKINS_NAME)']
  - name: docker
    image: kubernetes-registry.moon.com/moon/docker:24.0.7-cli
    command: ['cat']
    tty: true
    volumeMounts:
    - name: docker-sock
      mountPath: /var/run/docker.sock
  - name: python
    image: kubernetes-registry.moon.com/moon/python:3.11-slim
    command: ['cat']
    tty: true
  - name: kubectl-agent
    image: kubernetes-registry.moon.com/moon/kubectl-agent:1.0
    command: ['cat']
    tty: true
  volumes:
  - name: docker-sock
    hostPath:
      path: /var/run/docker.sock
      type: Socket
  dnsPolicy: ClusterFirst
  restartPolicy: Never
'''
        }
    }

    environment {
        REGISTRY = "kubernetes-registry.moon.com/moon"
        IMAGE = "my-flask-app"
        TAG = "v${env.BUILD_NUMBER}"
        HARBOR_CREDS = credentials('harbor-credentials')
    }

    stages {
        stage('Checkout') {
            steps { checkout scm }
        }

        stage('Test') {
            steps {
                container('python') {
                    sh '''
                    echo "Running pytest..."
                    pip install -r requirements.txt -i https://mirrors.tuna.tsinghua.edu.cn/pypi/web/simple
                    pytest tests/
                    '''
                }
            }
        }

        stage('Build Docker') {
            steps {
                container('docker') {
                    sh '''
                    echo "Building image..."
                    docker build -t ${REGISTRY}/${IMAGE}:${TAG} .
                    '''
                }
            }
        }

        stage('Push Docker') {
            steps {
                container('docker') {
                    sh '''
                    echo "Pushing image to Harbor..."
                    echo "$HARBOR_CREDS_PSW" | docker login ${REGISTRY} -u "$HARBOR_CREDS_USR" --password-stdin
                    docker push ${REGISTRY}/${IMAGE}:${TAG}
                    '''
                }
            }
        }

        stage('Deploy to K8s') {
            steps {
                container('kubectl-agent') {
                    sh '''
                    echo "Deploying new image..."
                    kubectl set image deployment/my-flask-app my-flask-app=${REGISTRY}/${IMAGE}:${TAG} -n dev || \
                    kubectl create deployment my-flask-app --image=${REGISTRY}/${IMAGE}:${TAG} -n dev
                    '''
                }
            }
        }
    }

    post {
        success { echo "🎉 Deployment successful! ${REGISTRY}/${IMAGE}:${TAG}" }
        failure { echo "❌ Pipeline failed. Check the logs for details." }
    }
}