push.yml

# SPDX-FileCopyrightText: Copyright DB InfraGO AG and contributors
# SPDX-License-Identifier: CC0-1.0
name: push

on:
  push:
    branches: ['**']
    tags: ['v*.*.*']
  pull_request:
    branches: [main]

jobs:
  push-images:
    runs-on: ubuntu-latest
    if: github.actor != 'dependabot[bot]'
    name: Build and push ${{ matrix.name }} image
    strategy:
      matrix:
        include:
          - name: backend
            image: ghcr.io/dsd-dbs/capella-collab-manager/backend
            context: ./backend
          - name: frontend
            image: ghcr.io/dsd-dbs/capella-collab-manager/frontend
            context: ./frontend
          - name: guacamole
            image: ghcr.io/dsd-dbs/capella-collab-manager/guacamole
            context: ./images/guacamole
          - name: session-preparation
            image: ghcr.io/dsd-dbs/capella-collab-manager/session-preparation
            context: ./images/session-preparation
          - name: docs
            image: ghcr.io/dsd-dbs/capella-collab-manager/docs
            context: ./docs
    steps:
      - name: Checkout repository
        if: ${{ matrix.name != 'frontend' && matrix.name != 'backend' }}
        uses: actions/checkout@v4
      - name: Checkout repository
        if: ${{ matrix.name == 'frontend' || matrix.name == 'backend' }}
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Fetch version
        if: ${{ matrix.name == 'backend' }}
        run: |
          python backend/generate_git_archival.py
      - name: Fetch version
        if: ${{ matrix.name == 'frontend' }}
        run: |
          python frontend/fetch-version.py
      - name: Login to github container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Extract metadata for Docker
        id: tag
        run: |
          echo "branch=${GITHUB_REF_NAME//[^a-zA-Z0-9.]/-}" >> "$GITHUB_OUTPUT"
          echo "sha=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
      - name: Build and push Docker image
        id: build-and-push
        uses: docker/build-push-action@v6
        with:
          context: ${{ matrix.context }}
          tags: ${{ matrix.image }}:${{ steps.tag.outputs.branch }}
          labels: git-short-sha=${{ steps.tag.outputs.sha }}
          push: true
  install-chart:
    runs-on: ubuntu-latest
    if: github.actor != 'dependabot[bot]'
    needs: [push-images]
    name: Install chart in kind cluster
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - name: Install helm
        uses: azure/setup-helm@v4
      - name: Extract metadata for Docker
        id: tag
        run: |
          echo "branch=${GITHUB_REF_NAME//[^a-zA-Z0-9.]/-}" >> "$GITHUB_OUTPUT"
          echo "sha=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
      - name: Create k8s Kind Cluster
        uses: helm/kind-action@v1.10.0
      - name: Create sessions namespace
        run: |
          kubectl create namespace collab-sessions
      - name: Add registry token
        run: |
          kubectl create secret docker-registry github \
            --docker-server=ghcr.io \
            --docker-username=${{ github.actor }} \
            --docker-password=${{ secrets.GITHUB_TOKEN }}
      - name: Add secret to default serviceaccount
        run: |
          kubectl patch serviceaccount default \
            -p '{"imagePullSecrets": [{"name": "github"}]}'
      - name: Update dependencies
        run: |
          helm dependency update ./helm
      - name: Install chart
        run: |
          helm install test \
          --set docker.tag="${{ steps.tag.outputs.branch }}" \
          --set loki.enabled=False \
          --set cluster.pvc.storageClassName="standard" \
          --set cluster.imagePullSecret="github" \
          --set promtail.storageClassName="standard" \
          --set backend.storageClassName="standard" \
          --set mocks.oauth=True \
          --set development=True \
          --set general.port=8080 \
          --set database.backend.internal.password="secret" \
          --set database.guacamole.internal.password="secret" \
          --set valkey.password="secret" \
          --set backend.authentication.oauth.endpoints.wellKnown="http://test-oauth-mock:8080/default/.well-known/openid-configuration" \
          ./helm
      - name: Wait for all containers to be ready
        run: |
          kubectl wait --all deployment --for condition=Available=True --timeout=5m
      - name: Print status of Pods
        if: always()
        run: |
          kubectl get pods
      - name: Describe deployments
        if: always()
        run: |
          kubectl describe deployment
      - name: Describe pods
        if: always()
        run: |
          kubectl describe pods
      - name: Describe nodes
        if: always()
        run: |
          kubectl describe nodes
      - name: Describe PVCs
        if: always()
        run: |
          kubectl describe pvc
      - name: Describe volumes
        if: always()
        run: |
          kubectl describe pv
      - name: Describe configmaps
        if: always()
        run: |
          kubectl describe cm
      - name: Describe secrets
        if: always()
        run: |
          kubectl describe secrets
      - name: Print logs of backend container
        if: always()
        run: |
          kubectl logs deployment/test-backend test-backend