pipeline {
    agent any
    parameters {
        string(name: "target_host", defaultValue: "", trim: true, description: "Target host")
        string(name: "username", defaultValue: "", trim: true, description: "Ansible user")
        password(name: "password", defaultValue: "", description: "Ansible password")
        booleanParam(name: "rproxy_install", defaultValue: true, description: "Install Rproxy")
        base64File(name: "rootca", description: "RootCA (only for 'Install Rproxy')")
        base64File(name: "rootca_key", description: "RootCA key (only for 'Install Rproxy')")
        booleanParam(name: "config_add", defaultValue: true, description: "Add config")
        string(name: "rproxy_service_name", defaultValue: "", trim: true, description: "Service name (for 'Add config' job only)")
        string(name: "rproxy_service_port", defaultValue: "", trim: true, description: "Service port (for 'Add config' job only)")
        string(name: "rproxy_service_address", defaultValue: "", trim: true, description: "Service address (for 'Add config' job only)")

    }
    stages {
        stage('Download') {
            steps {
                git branch: 'dev', url:'${git_url}/Ansible/rproxy.git', credentialsId: 'git'
            }
        }
        stage('Save certs') {
            when {
                expression {
                    return params.rproxy_install
                }
            }
            steps {
                sh 'mkdir roles/rproxy/files/certs'
                withFileParameter('rootca') {
                    sh 'mv ${rootca} roles/rproxy/files/certs/RootCA.crt'
                }
                withFileParameter('rootca_key') {
                    sh 'mv ${rootca_key} roles/rproxy/files/certs/RootCA.key'
                }
            }
        }
        stage('Install Rproxy') {
            when {
                expression {
                    return params.rproxy_install
                }
            }
            steps {
                script {
                    wrap([$class: 'MaskPasswordsBuildWrapper', varPasswordPairs: [[password: params.password]]]) { 
                        sh 'ansible-playbook rproxy.yml -i ${target_host}, -t install -u ${username} -e "ansible_password=${password} rproxy_service_name=${rproxy_service_name} rproxy_service_port=${rproxy_service_port} rproxy_service_address=${rproxy_service_address}"'
                    }
                }
            }
        }
        stage('Add config') {
            when {
                expression {
                    return params.config_add
                }
            }
            steps {
                script {
                    wrap([$class: 'MaskPasswordsBuildWrapper', varPasswordPairs: [[password: params.password]]]) { 
                        sh 'ansible-playbook rproxy.yml -i ${target_host}, -t add_config -u ${username} -e "ansible_password=${password} rproxy_service_name=${rproxy_service_name} rproxy_service_port=${rproxy_service_port} rproxy_service_address=${rproxy_service_address}"'
                    }
                }
            }
        }
    }
}