pipeline {
    agent none

    stages {
        stage('SSHCA CLI') {
            matrix {
                axes {
                    axis {
                        name 'ARCH'
                        values 'amd64', 'arm64'
                    }
                }

                stages {
                    stage('CLI') {
                        agent {
                            kubernetes {
                                yamlFile 'ci/podTemplate.yaml'
                                yamlMergeStrategy merge()
                                defaultContainer 'fedora'
                                nodeSelector "kubernetes.io/arch=${ARCH}"
                            }
                        }
                        environment {
                            GNUPGHOME = "${env.WORKSPACE_TMP}/gnupg"
                        }
                        stages {
                            stage('Prepare') {
                                steps {
                                    sh '. ci/prepare.sh'
                                }
                            }

                            stage('Build') {
                                steps {
                                    sh '. ci/build.sh'
                                    script {
                                        if (env.BRANCH_NAME == 'master') {
                                            withCredentials([
                                                file(
                                                    credentialsId: 'rpm-gpg-key',
                                                    variable: 'RPM_GPG_PRIVATE_KEY',
                                                ),
                                                file(
                                                    credentialsId: 'rpm-gpg-key-passphrase',
                                                    variable: 'RPM_GPG_KEY_PASSPHRASE',
                                                ),
                                            ]) {
                                                sh '. ci/sign-rpms.sh'
                                            }
                                        }
                                    }
                                }
                                post {
                                    success {
                                        archiveArtifacts '*.rpm'
                                    }
                                }
                            }

                            stage('Publish') {
                                when {
                                    branch 'master'
                                }
                                steps {
                                    sshagent(['jenkins-repohost']) {
                                        sh '. ci/publish.sh'
                                    }
                                }
                            }
                        }
                    }
                }

            }
        }
    }
}