publish.yml

name: Build & Publish Docker Image

# ! Change this back to released
#on:
#  release:
#    types: [ published ]
on:
  pull_request:
    types: [ opened, synchronize, reopened ]

jobs:
#  build-base-js:
#    runs-on: ubuntu-latest
#    permissions:
#      contents: read
#      packages: write
#      # This is used to complete the identity challenge
#      # with sigstore/fulcio when running outside of PRs.
#      id-token: write
#    strategy:
#      matrix:
#        type: [ "js-build", "js-run" ]
#    steps:
#      - name: Checkout
#        uses: actions/checkout@v3
#      - uses: ./.github/actions/prepare
#        id: prepare
#        with:
#          service-name: acs-base
#          token: ${{ secrets.GITHUB_TOKEN }}
#      - name: Build
#        id: build-and-push
#        uses: docker/build-push-action@v5
#        with:
#          context: .
#          platforms: linux/amd64,linux/arm64
#          file: ./acs-base-images/Dockerfile.${{ matrix.type }}
#          push: true
#          tags: ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}-${{ matrix.type }}:${{ steps.prepare.outputs.version }}
#          build-args: |
#            base=ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}
#            version=${{ steps.prepare.outputs.version }}
#          labels: ${{ steps.prepare.outputs.labels }}
#          cache-from: type=gha
#          cache-to: type=gha,mode=max
#      - uses: ./.github/actions/cleanup
#        id: cleanup
#        with:
#          version: ${{ steps.prepare.outputs.version }}
#          service-name: ${{ steps.prepare.outputs.service-name }}-${{ matrix.type }}
#          digest: ${{ steps.build-and-push.outputs.digest }}
#  build-base-pg-build:
#    runs-on: ubuntu-latest
#    needs: build-base-js
#    permissions:
#      contents: read
#      packages: write
#      # This is used to complete the identity challenge
#      # with sigstore/fulcio when running outside of PRs.
#      id-token: write
#    steps:
#      - name: Checkout
#        uses: actions/checkout@v3
#      - uses: ./.github/actions/prepare
#        id: prepare
#        with:
#          service-name: acs-base
#          token: ${{ secrets.GITHUB_TOKEN }}
#      - name: Build
#        id: build-and-push
#        uses: docker/build-push-action@v5
#        with:
#          context: .
#          platforms: linux/amd64
#          file: ./acs-base-images/Dockerfile.pg-build
#          push: true
#          tags: ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}-pg-build:${{ steps.prepare.outputs.version }}
#          build-args: |
#            base=ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}
#            version=${{ steps.prepare.outputs.version }}
#          labels: ${{ steps.prepare.outputs.labels }}
#          cache-from: type=gha
#          cache-to: type=gha,mode=max
#      - uses: ./.github/actions/cleanup
#        id: cleanup
#        with:
#          version: ${{ steps.prepare.outputs.version }}
#          service-name: ${{ steps.prepare.outputs.service-name }}-pg-build
#          digest: ${{ steps.build-and-push.outputs.digest }}
#  build-base-pg-run:
#    runs-on: ubuntu-latest
#    needs: build-base-pg-build
#    permissions:
#      contents: read
#      packages: write
#      # This is used to complete the identity challenge
#      # with sigstore/fulcio when running outside of PRs.
#      id-token: write
#    steps:
#      - name: Checkout
#        uses: actions/checkout@v3
#      - uses: ./.github/actions/prepare
#        id: prepare
#        with:
#          service-name: acs-base
#          token: ${{ secrets.GITHUB_TOKEN }}
#      - name: Build
#        id: build-and-push
#        uses: docker/build-push-action@v5
#        with:
#          context: .
#          platforms: linux/amd64
#          file: ./acs-base-images/Dockerfile.pg-run
#          push: true
#          tags: ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}-pg-run:${{ steps.prepare.outputs.version }}
#          build-args: |
#            base=ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}
#            version=${{ steps.prepare.outputs.version }}
#          labels: ${{ steps.prepare.outputs.labels }}
#          cache-from: type=gha
#          cache-to: type=gha,mode=max
#      - uses: ./.github/actions/cleanup
#        id: cleanup
#        with:
#          version: ${{ steps.prepare.outputs.version }}
#          service-name: ${{ steps.prepare.outputs.service-name }}-pg-run
#          digest: ${{ steps.build-and-push.outputs.digest }}
#  build-x86:
##    needs: [ build-base-js, build-base-pg-build, build-base-pg-run ]
#    runs-on: ubuntu-latest
#    strategy:
#      matrix:
#        service: [ 'acs-auth', 'acs-directory', 'acs-cluster-manager', 'acs-cmdesc', 'acs-configdb',
#                   'acs-edge-monitor', 'acs-edge-sync', 'acs-git', 'acs-identity', 'acs-krb-keys-operator',
#                   'acs-krb-utils', 'acs-service-setup', 'acs-visualiser' ]
#    permissions:
#      contents: read
#      packages: write
#      id-token: write
#      pull-requests: write
#    steps:
#      - name: Checkout
#        uses: actions/checkout@v3
#      - uses: ./.github/actions/prepare
#        id: prepare
#        with:
#          service-name: ${{ matrix.service }}
#          token: ${{ secrets.GITHUB_TOKEN }}
#
#      - name: Build
#        uses: docker/build-push-action@v5
#        id: build-and-push
#        with:
#          context: ./${{ steps.prepare.outputs.service-name }}
#          push: true
#          tags: ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}:${{ steps.prepare.outputs.version }}
#          labels: ${{  steps.prepare.outputs.labels }}
#          cache-from: type=gha
#          cache-to: type=gha,mode=max
#          build-args: |
#            revision=${{ steps.prepare.outputs.version }} (${{ github.sha }})
#      - uses: ./.github/actions/cleanup
#        id: cleanup
#        with:
#          version: ${{ steps.prepare.outputs.version }}
#          service-name: ${{ steps.prepare.outputs.service-name }}
#          digest: ${{ steps.build-and-push.outputs.digest }}
#  build-x86-arm:
##    needs: [ build-base-js, build-base-pg-build, build-base-pg-run ]
#    runs-on: ubuntu-latest
#    strategy:
#      matrix:
#        service: [ 'acs-edge' ]
#    permissions:
#      contents: read
#      packages: write
#      id-token: write
#      pull-requests: write
#    steps:
#      - name: Checkout
#        uses: actions/checkout@v3
#      - uses: ./.github/actions/prepare
#        id: prepare
#        with:
#          service-name: ${{ matrix.service }}
#          token: ${{ secrets.GITHUB_TOKEN }}
#      - name: Build
#        uses: docker/build-push-action@v5
#        id: build-and-push
#        with:
#          context: ./${{ steps.prepare.outputs.service-name }}
#          platforms: linux/amd64,linux/arm64
#          push: true
#          build-args: |
#            revision=${{ steps.prepare.outputs.version }} (${{ github.sha }})
#          tags: ghcr.io/amrc-factoryplus/${{ steps.prepare.outputs.service-name }}:${{ steps.prepare.outputs.version }}
#          labels: ${{  steps.prepare.outputs.labels }}
#          cache-from: type=gha
#          cache-to: type=gha,mode=max
#
#      - uses: ./.github/actions/cleanup
#        id: cleanup
#        with:
#          version: ${{ steps.prepare.outputs.version }}
#          service-name: ${{ steps.prepare.outputs.service-name }}
#          digest: ${{ steps.build-and-push.outputs.digest }}
  build-manager:
    name: Build Manager
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
      id-token: write
      pull-requests: write
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - uses: ./.github/actions/prepare
        id: prepare
        with:
          service-name: acs-manager
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Check Backend Builder
        id: check-backend-builder
        run: |
          docker manifest inspect ghcr.io/amrc-factoryplus/acs-manager:backend-build-1.1.0 || echo "needs-build=true" >> $GITHUB_OUTPUT

      - name: Build Backend Builder
        id: build-backend-builder
        if: steps.check-backend-builder.outputs.needs-build == 'true'
        uses: docker/build-push-action@v4
        with:
          context: acs-manager
          file: ./.docker/Dockerfiles/Dockerfile.backend-build
          push: true
          tags: ghcr.io/amrc-factoryplus/acs-manager:backend-build-1.1.0

      - name: Check Backend Base
        id: check-backend-base
        run: |
          docker manifest inspect ghcr.io/amrc-factoryplus/acs-manager:prod-base-php82-1.0.6 || echo "needs-build=true" >> $GITHUB_OUTPUT

      - name: Build Backend Base
        id: build-backend-base
        if: steps.check-backend-base.outputs.needs-build == 'true'
        uses: docker/build-push-action@v4
        with:
          context: acs-manager
          file: ./.docker/Dockerfiles/Dockerfile.backend-base
          push: true
          tags: ghcr.io/amrc-factoryplus/acs-manager:prod-base-php82-1.0.6

      - name: Build Backend
        id: build-backend
        uses: docker/build-push-action@v4
        with:
          context: acs-manager
          file: ./.docker/Dockerfiles/Dockerfile
          load: true
          tags: ${{ steps.prepare.outputs.version }}-backend
          labels: ${{  steps.prepare.outputs.labels }}
          outputs: type=docker,dest=/tmp/image.tar

      - name: Upload Backend
        uses: actions/upload-artifact@v2
        with:
          name: ${{ github.event.number }}
          path: /tmp/image.tar

      - name: Build & Push Frontend
        id: build-and-push-frontend
        uses: docker/build-push-action@v4
        with:
          context: acs-manager
          push: true
          file: ./.docker/Dockerfiles/Dockerfile
          target: production-frontend
          tags: ${{ steps.prepare.outputs.version }}-frontend
          labels: ${{ steps.prepare.outputs.labels }}

  push-manager:
    name: Push Backend
    runs-on: ubuntu-latest
    needs: build-manager
    permissions:
      contents: read
      packages: write
      id-token: write
      pull-requests: write

    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v1

      - name: Login to GitHub container registry
        uses: docker/login-action@v2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract Docker metadata
        id: meta
        uses: docker/metadata-action@v4
        with:
          images: ghcr.io/amrc-factoryplus/acs-manager

      - name: Download artifact
        uses: actions/download-artifact@v2
        with:
          name: ${{ github.event.number }}
          path: /tmp

      - name: Load and push image
        run: |
          docker load --input /tmp/image.tar
          docker image ls -a
          docker push ${{ steps.prepare.outputs.version }}-backend
  build-mqtt:
    runs-on: ubuntu-latest
    steps:
      - name: Skip
        run: |
          echo "Skipping"
#  build-helm-chart:
#    needs: [ 'build-x86', 'build-x86-arm', 'push-manager', 'build-mqtt' ]
#    runs-on: ubuntu-latest
#    steps:
#      - name: Install Helm
#        run: |
#          curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
#      - name: Checkout code
#        uses: actions/checkout@v3
#        with:
#          ref: ${{ github.event.release.tag_name }}
#      - name: Login to GitHub Container Registry
#        uses: docker/login-action@v3
#        with:
#          registry: ghcr.io
#          username: ${{ github.actor }}
#          password: ${{ secrets.GITHUB_TOKEN }}
#      - name: Package Helm chart
#        run: |
#          TAG=${{ github.event.release.tag_name }}
#          VERSION=${TAG#v}
#          helm package -u -d deploy/build --version=$VERSION --app-version=$VERSION deploy
#          echo "VERSION=$VERSION" >> $GITHUB_ENV
#      - uses: actions/upload-artifact@v3
#        with:
#          name: new-release
#          path: build/amrc-connectivity-stack-${{ env.VERSION }}.tgz

  # This job checks out the release branch, adds the new release to the /builds folder, builds the index and commits
  # the changes, which triggers Github to release it as a new pages repo
#  release-helm-chart:
#    needs: build-helm-chart
#    runs-on: ubuntu-latest
#    steps:
#      - name: Install Helm
#        run: |
#          curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
#      - name: Checkout code
#        uses: actions/checkout@v3
#        with:
#          ref: release
#      - name: add-new-release
#        uses: actions/download-artifact@v3
#        with:
#          name: new-release
#          path: deploy/build
#      - name: Build index
#        run: |
#          cd deploy/build
#          helm repo index --url https://amrc-factoryplus.github.io/amrc-connectivity-stack/build .
#      - name: commit
#        uses: stefanzweifel/git-auto-commit-action@v4
#        id: auto_commit_action
#        with:
#          commit_message: Release ${{ github.event.release.tag_name }}
#          commit_user_name: GitHub Action
#          commit_user_email: actions@github.com
#          branch: release
#          create_branch: true
#          push_options: '--force'