Makefile

.PHONY: help local-setup local-deploy local-down security-scan build push deploy monitor logs clean

# Variables
AWS_REGION ?= us-east-1
AWS_ACCOUNT_ID ?= 123456789
ECR_REPO_NAME = netflix-clone
EKS_CLUSTER_NAME = netflix-clone-prod
DOCKER_IMAGE = ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com/${ECR_REPO_NAME}
IMAGE_TAG ?= latest
NAMESPACE ?= production

# Colors
RED = \033[0;31m
GREEN = \033[0;32m
YELLOW = \033[1;33m
BLUE = \033[0;34m
NC = \033[0m # No Color

help: ## Display this help menu
	@echo "$(BLUE)Netflix-Clone DevSecOps Pipeline - Available Commands$(NC)"
	@echo ""
	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "$(GREEN)%-30s$(NC) %s\n", $$1, $$2}'

# ============================================================================
# LOCAL DEVELOPMENT
# ============================================================================

local-setup: ## Setup local development environment
	@echo "$(BLUE)Setting up local development environment...$(NC)"
	npm install
	docker pull node:18-alpine
	docker pull postgres:15-alpine
	docker pull redis:7-alpine
	@echo "$(GREEN)✓ Local environment ready$(NC)"

local-build: ## Build Docker image locally
	@echo "$(BLUE)Building Docker image...$(NC)"
	docker build -t ${ECR_REPO_NAME}:${IMAGE_TAG} \
		--build-arg BUILD_DATE=$$(date -u +'%Y-%m-%dT%H:%M:%SZ') \
		--build-arg VCS_REF=$$(git rev-parse --short HEAD) \
		.
	@echo "$(GREEN)✓ Image built: ${ECR_REPO_NAME}:${IMAGE_TAG}$(NC)"

local-deploy: ## Deploy using Docker Compose
	@echo "$(BLUE)Deploying services with Docker Compose...$(NC)"
	docker-compose up -d
	@echo "$(GREEN)✓ Services started$(NC)"
	@echo ""
	@echo "Access services at:"
	@echo "  Netflix App:    http://localhost:3000"
	@echo "  Jenkins:        http://localhost:8080"
	@echo "  Prometheus:     http://localhost:9090"
	@echo "  Grafana:        http://localhost:3001 (admin/admin)"
	@echo "  Kibana:         http://localhost:5601"
	@echo "  SonarQube:      http://localhost:9000"
	@echo "  Jaeger:         http://localhost:16686"

local-down: ## Stop Docker Compose services
	@echo "$(BLUE)Stopping services...$(NC)"
	docker-compose down
	@echo "$(GREEN)✓ Services stopped$(NC)"

local-logs: ## Show Docker Compose logs
	docker-compose logs -f netflix-clone

local-status: ## Show Docker Compose status
	docker-compose ps

# ============================================================================
# SECURITY SCANNING
# ============================================================================

scan-code: ## Run SAST analysis with SonarQube
	@echo "$(BLUE)Running SAST analysis...$(NC)"
	sonar-scanner \
		-Dsonar.projectKey=netflix-clone \
		-Dsonar.sources=src \
		-Dsonar.host.url=http://localhost:9000 \
		-Dsonar.login=admin \
		-Dsonar.password=admin
	@echo "$(GREEN)✓ Code quality scan completed$(NC)"

scan-dependencies: ## Scan dependencies for vulnerabilities
	@echo "$(BLUE)Scanning dependencies...$(NC)"
	npm audit --json > audit.json
	@echo "$(GREEN)✓ Dependency scan completed$(NC)"

scan-secrets: ## Scan for hardcoded secrets
	@echo "$(BLUE)Scanning for secrets...$(NC)"
	@if command -v trufflehog &> /dev/null; then \
		trufflehog filesystem . --json > secrets-report.json; \
	else \
		echo "$(YELLOW)⚠ TruffleHog not installed$(NC)"; \
	fi
	@echo "$(GREEN)✓ Secret scan completed$(NC)"

scan-docker: ## Scan Docker image for vulnerabilities
	@echo "$(BLUE)Scanning Docker image...$(NC)"
	@if command -v trivy &> /dev/null; then \
		trivy image --severity HIGH,CRITICAL \
			--format json \
			--output trivy-report.json \
			${ECR_REPO_NAME}:${IMAGE_TAG}; \
	fi
	@if command -v grype &> /dev/null; then \
		grype ${ECR_REPO_NAME}:${IMAGE_TAG} \
			-o json > grype-report.json; \
	fi
	@echo "$(GREEN)✓ Docker image scan completed$(NC)"

security-scan: scan-code scan-dependencies scan-secrets scan-docker ## Run all security scans
	@echo "$(GREEN)✓ All security scans completed$(NC)"

# ============================================================================
# AWS & DOCKER REGISTRY
# ============================================================================

aws-login: ## Login to AWS ECR
	@echo "$(BLUE)Logging into AWS ECR...$(NC)"
	aws ecr get-login-password --region ${AWS_REGION} | \
		docker login --username AWS --password-stdin ${AWS_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com
	@echo "$(GREEN)✓ Logged into ECR$(NC)"

ecr-create: ## Create ECR repository
	@echo "$(BLUE)Creating ECR repository...$(NC)"
	aws ecr create-repository \
		--repository-name ${ECR_REPO_NAME} \
		--region ${AWS_REGION} \
		--encryption-configuration encryptionType=AES 2>/dev/null || \
		echo "$(YELLOW)Repository already exists$(NC)"

# ============================================================================
# BUILD & PUSH
# ============================================================================

build: local-build ## Build Docker image

push: aws-login ## Push image to ECR
	@echo "$(BLUE)Pushing image to ECR...$(NC)"
	docker tag ${ECR_REPO_NAME}:${IMAGE_TAG} ${DOCKER_IMAGE}:${IMAGE_TAG}
	docker tag ${ECR_REPO_NAME}:${IMAGE_TAG} ${DOCKER_IMAGE}:latest
	docker push ${DOCKER_IMAGE}:${IMAGE_TAG}
	docker push ${DOCKER_IMAGE}:latest
	@echo "$(GREEN)✓ Image pushed to ECR$(NC)"

# ============================================================================
# KUBERNETES
# ============================================================================

k8s-cluster-create: ## Create EKS cluster
	@echo "$(BLUE)Creating EKS cluster...$(NC)"
	eksctl create cluster \
		--name ${EKS_CLUSTER_NAME} \
		--region ${AWS_REGION} \
		--nodegroup-name standard-workers \
		--node-type t3.medium \
		--nodes 3 \
		--managed
	@echo "$(GREEN)✓ EKS cluster created$(NC)"

k8s-cluster-delete: ## Delete EKS cluster
	@echo "$(YELLOW)Deleting EKS cluster...$(NC)"
	eksctl delete cluster --name ${EKS_CLUSTER_NAME} --region ${AWS_REGION}
	@echo "$(GREEN)✓ EKS cluster deleted$(NC)"

k8s-deploy: ## Deploy application to Kubernetes
	@echo "$(BLUE)Deploying to Kubernetes...$(NC)"
	kubectl create namespace ${NAMESPACE} --dry-run=client -o yaml | kubectl apply -f -
	kubectl apply -f k8s-deployment.yaml
	kubectl wait --for=condition=available --timeout=300s \
		deployment/netflix-clone -n ${NAMESPACE}
	@echo "$(GREEN)✓ Application deployed$(NC)"

k8s-rollout-status: ## Check rollout status
	kubectl rollout status deployment/netflix-clone -n ${NAMESPACE}

k8s-scale: ## Scale deployment (usage: make k8s-scale REPLICAS=5)
	@echo "$(BLUE)Scaling deployment to ${REPLICAS} replicas...$(NC)"
	kubectl scale deployment/netflix-clone --replicas=${REPLICAS} -n ${NAMESPACE}
	@echo "$(GREEN)✓ Deployment scaled$(NC)"

k8s-restart: ## Restart deployment
	@echo "$(BLUE)Restarting deployment...$(NC)"
	kubectl rollout restart deployment/netflix-clone -n ${NAMESPACE}
	@echo "$(GREEN)✓ Deployment restarted$(NC)"

k8s-delete: ## Delete deployment
	@echo "$(YELLOW)Deleting deployment...$(NC)"
	kubectl delete deployment netflix-clone -n ${NAMESPACE}
	@echo "$(GREEN)✓ Deployment deleted$(NC)"

k8s-status: ## Show Kubernetes resources status
	@echo "$(BLUE)Kubernetes Resources:$(NC)"
	kubectl get all -n ${NAMESPACE}
	@echo ""
	@echo "$(BLUE)Pods:$(NC)"
	kubectl get pods -n ${NAMESPACE} -o wide
	@echo ""
	@echo "$(BLUE)Services:$(NC)"
	kubectl get svc -n ${NAMESPACE}

# ============================================================================
# ARGOCD & GITOPS
# ============================================================================

argocd-install: ## Install ArgoCD
	@echo "$(BLUE)Installing ArgoCD...$(NC)"
	kubectl create namespace argocd --dry-run=client -o yaml | kubectl apply -f -
	kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
	@echo "$(GREEN)✓ ArgoCD installed$(NC)"

argocd-deploy: ## Deploy ArgoCD application
	@echo "$(BLUE)Deploying ArgoCD application...$(NC)"
	kubectl apply -f argocd-applicationset.yaml
	@echo "$(GREEN)✓ ArgoCD application deployed$(NC)"

argocd-login: ## Get ArgoCD initial password
	@echo "$(BLUE)Getting ArgoCD initial password...$(NC)"
	@kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
	@echo ""

argocd-port-forward: ## Port forward to ArgoCD server
	@echo "$(BLUE)Forwarding to ArgoCD on localhost:8443...$(NC)"
	kubectl port-forward svc/argocd-server -n argocd 8443:443

# ============================================================================
# MONITORING & OBSERVABILITY
# ============================================================================

prometheus-install: ## Install Prometheus
	@echo "$(BLUE)Installing Prometheus...$(NC)"
	kubectl apply -f prometheus-setup.yaml
	@echo "$(GREEN)✓ Prometheus installed$(NC)"

grafana-install: ## Install Grafana
	@echo "$(BLUE)Installing Grafana...$(NC)"
	kubectl apply -f grafana-setup.yaml
	@echo "$(GREEN)✓ Grafana installed$(NC)"

monitoring-install: prometheus-install grafana-install ## Install all monitoring tools
	@echo "$(GREEN)✓ Monitoring stack installed$(NC)"

prometheus-port-forward: ## Port forward to Prometheus
	@echo "$(BLUE)Forwarding to Prometheus on localhost:9090...$(NC)"
	kubectl port-forward svc/prometheus 9090:9090 -n monitoring

grafana-port-forward: ## Port forward to Grafana
	@echo "$(BLUE)Forwarding to Grafana on localhost:3000...$(NC)"
	kubectl port-forward svc/grafana 3000:3000 -n monitoring

# ============================================================================
# LOGGING & DEBUGGING
# ============================================================================

logs-app: ## Show application logs
	kubectl logs -f deployment/netflix-clone -n ${NAMESPACE}

logs-previous: ## Show previous pod logs (for crashes)
	kubectl logs --previous deployment/netflix-clone -n ${NAMESPACE}

logs-all-pods: ## Show logs from all pods
	kubectl logs -f -l app=netflix-clone -n ${NAMESPACE}

describe-pod: ## Describe pod (usage: make describe-pod POD=pod-name)
	kubectl describe pod ${POD} -n ${NAMESPACE}

debug-pod: ## Debug pod with shell access (usage: make debug-pod POD=pod-name)
	@echo "$(BLUE)Starting debug session...$(NC)"
	kubectl debug pod/${POD} -n ${NAMESPACE} -it --image=busybox

port-forward-app: ## Port forward to application
	@echo "$(BLUE)Forwarding app to localhost:8080...$(NC)"
	kubectl port-forward svc/netflix-clone 8080:80 -n ${NAMESPACE}

# ============================================================================
# CI/CD & JENKINS
# ============================================================================

jenkins-install: ## Install Jenkins
	@echo "$(BLUE)Installing Jenkins...$(NC)"
	helm repo add jenkinsci https://charts.jenkins.io
	helm repo update
	helm install jenkins jenkinsci/jenkins --namespace jenkins --create-namespace
	@echo "$(GREEN)✓ Jenkins installed$(NC)"

jenkins-port-forward: ## Port forward to Jenkins
	@echo "$(BLUE)Forwarding to Jenkins on localhost:8080...$(NC)"
	kubectl port-forward svc/jenkins 8080:8080 -n jenkins

jenkins-logs: ## Show Jenkins logs
	kubectl logs -f -l app.kubernetes.io/name=jenkins -n jenkins

# ============================================================================
# MAINTENANCE & CLEANUP
# ============================================================================

test: ## Run unit tests
	@echo "$(BLUE)Running tests...$(NC)"
	npm test -- --coverage
	@echo "$(GREEN)✓ Tests completed$(NC)"

lint: ## Run code linting
	@echo "$(BLUE)Running linter...$(NC)"
	npm run lint
	@echo "$(GREEN)✓ Linting completed$(NC)"

format: ## Format code
	@echo "$(BLUE)Formatting code...$(NC)"
	npm run format
	@echo "$(GREEN)✓ Code formatted$(NC)"

clean: ## Clean local artifacts
	@echo "$(YELLOW)Cleaning artifacts...$(NC)"
	rm -rf node_modules dist coverage
	rm -f *-report.json *.log
	docker-compose down -v
	@echo "$(GREEN)✓ Cleanup completed$(NC)"

clean-all: clean ## Complete cleanup including images
	@echo "$(YELLOW)Removing Docker images...$(NC)"
	docker rmi ${ECR_REPO_NAME}:${IMAGE_TAG} 2>/dev/null || true
	docker system prune -f
	@echo "$(GREEN)✓ Complete cleanup done$(NC)"

# ============================================================================
# FULL PIPELINE
# ============================================================================

pipeline-local: local-setup build security-scan local-deploy logs-app ## Run complete local pipeline
	@echo "$(GREEN)✓ Local pipeline completed$(NC)"

pipeline-aws: build security-scan ecr-create push k8s-deploy argocd-deploy ## Run complete AWS pipeline
	@echo "$(GREEN)✓ AWS pipeline completed$(NC)"

setup-all: ## Complete setup (AWS + monitoring)
	@echo "$(BLUE)Running complete setup...$(NC)"
	chmod +x setup-devsecops-pipeline.sh
	./setup-devsecops-pipeline.sh
	@echo "$(GREEN)✓ Complete setup finished$(NC)"

# ============================================================================
# UTILITIES
# ============================================================================

versions: ## Show component versions
	@echo "$(BLUE)Component Versions:$(NC)"
	@echo "Docker: $$(docker --version)"
	@echo "kubectl: $$(kubectl version --client --short 2>/dev/null || echo 'not installed')"
	@echo "helm: $$(helm version --short 2>/dev/null || echo 'not installed')"
	@echo "aws: $$(aws --version 2>/dev/null || echo 'not installed')"

info: ## Show configuration info
	@echo "$(BLUE)Configuration:$(NC)"
	@echo "AWS Region: ${AWS_REGION}"
	@echo "AWS Account: ${AWS_ACCOUNT_ID}"
	@echo "ECR Repo: ${ECR_REPO_NAME}"
	@echo "EKS Cluster: ${EKS_CLUSTER_NAME}"
	@echo "Namespace: ${NAMESPACE}"
	@echo "Docker Image: ${DOCKER_IMAGE}"

.DEFAULT_GOAL := help