name: Build and Deploy Platform
on:
  push:
    branches: [main]
    paths-ignore:
      - "gitops/platform/values-abrban.yaml"
      - "**.md"
  workflow_dispatch:

env:
  REGISTRY: harbor-registry.cloudhost.svc.cluster.local:5000
  PROJECT: abrban
  BUILD_NS: cloudhost-builds

jobs:
  build-and-deploy:
    runs-on: abrban-builder
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set image tag
        shell: sh
        run: |
          SHA="${GITHUB_SHA:-$(git rev-parse HEAD)}"
          TAG="$(date +%Y%m%d-%H%M)-$(echo $SHA | cut -c1-8)"
          echo "IMAGE_TAG=${TAG}" >> "$GITHUB_ENV"
          echo "Build tag: ${TAG}"

      - name: Build backend image (Kaniko Job)
        shell: sh
        run: |
          cat <<ENDJOB | kubectl apply -f -
          apiVersion: batch/v1
          kind: Job
          metadata:
            name: build-backend-${IMAGE_TAG}
            namespace: ${BUILD_NS}
          spec:
            ttlSecondsAfterFinished: 600
            backoffLimit: 1
            template:
              spec:
                restartPolicy: Never
                imagePullSecrets:
                  - name: registry-pull-secret
                initContainers:
                  - name: clone
                    image: ${REGISTRY}/${PROJECT}/act-runner:0.2.11
                    command: ["sh", "-c", "git clone --depth=1 --branch main http://gitea-http.gitea.svc.cluster.local:3000/abrban/cloud-host.git /workspace"]
                    volumeMounts:
                      - name: ws
                        mountPath: /workspace
                containers:
                  - name: kaniko
                    image: ${REGISTRY}/${PROJECT}/kaniko-executor:v1.27.6-debug
                    command:
                      - /kaniko/executor
                    args:
                      - --dockerfile=/workspace/backend/Dockerfile
                      - --context=dir:///workspace/backend
                      - --destination=${REGISTRY}/${PROJECT}/cloudhost-backend:${IMAGE_TAG}
                      - --insecure
                      - --skip-tls-verify
                    volumeMounts:
                      - name: ws
                        mountPath: /workspace
                volumes:
                  - name: ws
                    emptyDir: {}
          ENDJOB
          echo "Waiting for backend build..."
          kubectl -n ${BUILD_NS} wait --for=condition=complete job/build-backend-${IMAGE_TAG} --timeout=20m
          echo "Backend build done"

      - name: Build frontend image (Kaniko Job)
        shell: sh
        run: |
          cat <<ENDJOB | kubectl apply -f -
          apiVersion: batch/v1
          kind: Job
          metadata:
            name: build-frontend-${IMAGE_TAG}
            namespace: ${BUILD_NS}
          spec:
            ttlSecondsAfterFinished: 600
            backoffLimit: 1
            template:
              spec:
                restartPolicy: Never
                imagePullSecrets:
                  - name: registry-pull-secret
                initContainers:
                  - name: clone
                    image: ${REGISTRY}/${PROJECT}/act-runner:0.2.11
                    command: ["sh", "-c", "git clone --depth=1 --branch main http://gitea-http.gitea.svc.cluster.local:3000/abrban/cloud-host.git /workspace"]
                    volumeMounts:
                      - name: ws
                        mountPath: /workspace
                containers:
                  - name: kaniko
                    image: ${REGISTRY}/${PROJECT}/kaniko-executor:v1.27.6-debug
                    command:
                      - /kaniko/executor
                    args:
                      - --dockerfile=/workspace/frontend/Dockerfile
                      - --context=dir:///workspace/frontend
                      - --build-arg=NEXT_PUBLIC_API_URL=https://api.abrban.com
                      - --destination=${REGISTRY}/${PROJECT}/cloudhost-frontend:${IMAGE_TAG}
                      - --insecure
                      - --skip-tls-verify
                    volumeMounts:
                      - name: ws
                        mountPath: /workspace
                volumes:
                  - name: ws
                    emptyDir: {}
          ENDJOB
          echo "Waiting for frontend build..."
          kubectl -n ${BUILD_NS} wait --for=condition=complete job/build-frontend-${IMAGE_TAG} --timeout=20m
          echo "Frontend build done"

      - name: Update GitOps values
        shell: sh
        run: |
          sed -i "s|tag: \"[^\"]*\"|tag: \"${IMAGE_TAG}\"|g" gitops/platform/values-abrban.yaml
          git config user.email "ci@abrban.com"
          git config user.name "Gitea Actions"
          git add gitops/platform/values-abrban.yaml
          git diff --cached --quiet || git commit -m "ci: deploy platform ${IMAGE_TAG}"

      - name: Push GitOps update
        shell: sh
        run: |
          git push origin HEAD:main