pipeline {
  agent any
  environment {
    CLOUDSDK_CORE_PROJECT = 'siman-448015'
    CLIENT_EMAIL = 'svfe-api-firmador@siman-448015.iam.gserviceaccount.com'
    GCLOUD_CREDS = credentials('gcloud-creds')
  }

  stages {

    stage('Envs Project') {
      steps {
        sh '''
          sed -i "s|CLOUDSDK_CORE_PROJECT|${CLOUDSDK_CORE_PROJECT}|g" **.yml
        '''
      }
    }

    stage('Clonar Repositorio') {
      steps {
        git credentialsId: 'token_gitea',
            url: 'https://gitea.grupoconsiti.com/duvan_andres/prueba.git',
            branch: 'main'
      }
    }

    stage('Verify version') {
      steps {
        sh '''
          gcloud version
          ls -la
        '''
      }
    }

    stage('Authenticate') {
      steps {
        sh '''
          gcloud auth activate-service-account --key-file="$GCLOUD_CREDS"
        '''
      }
    }

    stage('Install service') {
      steps {
        sh '''
          gcloud projects get-iam-policy siman-448015 --flatten="bindings[].members" --format="table(bindings.role, bindings.members)" | grep svfe-api-firmador
          gcloud run services replace service.yml --platform='managed' --region='us-central1'
        '''
      }
    }

    stage('Allow allUsers') {
      steps {
        sh '''
          gcloud run services add-iam-policy-binding cbii-jenkins --region='us-central1' --member='allUsers' --role='roles/run.invoker'
        '''
      }
    }
  }

  post {
    always {
      sh 'gcloud auth revoke $CLIENT_EMAIL'
    }
  }
}