checks.yml

name: Checks

on:
  push:
    branches:
      - '**'  # This will trigger on all branches
    tags:
      - '**'  # This will trigger on all tags

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  NODE_VERSION: '18.15'
  LOG_LEVEL: 'SILENCE'

jobs:
  setup:
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v3
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'
          cache-dependency-path: package-lock.json
      - uses: actions/cache@v3
        id: cache
        with:
          path: node_modules
          key: node-modules-cache-node-${{ env.NODE_VERSION }}-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
      - name: Install Dependencies
        if: steps.cache.outputs.cache-hit != 'true'
        run: npm ci --ignore-scripts

  lint:
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    needs: setup
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v3
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'
          cache-dependency-path: package-lock.json
      - uses: actions/cache@v3
        id: cache
        with:
          path: node_modules
          key: node-modules-cache-node-${{ env.NODE_VERSION }}-${{ runner.os }}-${{ hashFiles('package-lock.json') }}

      - name: Lint
        run: npm run lint

  test:
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    needs: setup
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v3
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'
          cache-dependency-path: package-lock.json
      - uses: actions/cache@v3
        id: cache
        with:
          path: node_modules
          key: node-modules-cache-node-${{ env.NODE_VERSION }}-${{ runner.os }}-${{ hashFiles('package-lock.json') }}

      - name: Test
        run: npm test

  build_and_push:
    name: Build Image
    runs-on: ubuntu-22.04
    if: startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/dev'
    needs: ["test", "lint"]
    permissions:
      id-token: write
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set AWS Role
        id: set-role
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            echo "AWS_ROLE_TO_ASSUME=${{ secrets.AWS_ROLE }}" >> $GITHUB_ENV
          else
            echo "AWS_ROLE_TO_ASSUME=${{ secrets.AWS_ROLE_DEV }}" >> $GITHUB_ENV
          fi

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: eu-west-2
          role-to-assume: ${{ env.AWS_ROLE_TO_ASSUME }}
          role-session-name: ${{ github.run_id }}
          output-credentials: true

      - name: Amazon ECR Login
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2

      - name: Set Env
        run: |
          echo "REGISTRY=${{ steps.login-ecr.outputs.registry }}" >> $GITHUB_ENV
          echo "TAG_NAME=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
          echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
          echo "SHORT_SHA=$(echo ${GITHUB_SHA} | cut -c1-8)" >> $GITHUB_ENV
          echo "REPO_NAME=$(echo ${GITHUB_REPOSITORY} | cut -d'/' -f2)" >> $GITHUB_ENV

      - name: Build Docker Image
        env:
          REGISTRY: ${{ env.REGISTRY }}
          TAG_NAME: ${{ env.TAG_NAME }}
          BRANCH_NAME: ${{ env.BRANCH_NAME }}
          SHORT_SHA: ${{ env.SHORT_SHA }}
          REPO_NAME: ${{ env.REPO_NAME }}
        run: |
          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            echo "Build image for '${REPO_NAME}' with tag '${TAG_NAME}'"
            docker build -t "${REGISTRY}/${REPO_NAME}:${TAG_NAME}-${SHORT_SHA}" .
          else
            echo "Build image for '${REPO_NAME}' with tag '${BRANCH_NAME}'"
            docker build -t "${REGISTRY}/${REPO_NAME}:${BRANCH_NAME}-${SHORT_SHA}" .
          fi

      - name: Push Docker Image
        env:
          REGISTRY: ${{ env.REGISTRY }}
          TAG_NAME: ${{ env.TAG_NAME }}
          BRANCH_NAME: ${{ env.BRANCH_NAME }}
          SHORT_SHA: ${{ env.SHORT_SHA }}
          REPO_NAME: ${{ env.REPO_NAME }}
        run: |
          echo "Push image to ECR"
          if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            docker push "${REGISTRY}/${REPO_NAME}:${TAG_NAME}-${SHORT_SHA}"
          else
            docker push "${REGISTRY}/${REPO_NAME}:${BRANCH_NAME}-${SHORT_SHA}"
          fi

    outputs:
      registry: ${{ steps.login-ecr.outputs.registry }}

  deploy:
    name: Deploy
    runs-on: ubuntu-latest
    if: startsWith(github.ref, 'refs/tags/') || github.ref == 'refs/heads/dev'
    needs: ["setup", "test", "lint", "build_and_push"]
    steps:
      - name: Set Env
        run: |
          echo "REGISTRY=${{ needs.build_and_push.outputs.registry }}" >> $GITHUB_ENV
          echo "TAG_NAME=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
          echo "BRANCH_NAME=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
          echo "SHORT_SHA=$(echo ${GITHUB_SHA} | cut -c1-8)" >> $GITHUB_ENV
          echo "REPO_NAME=$(echo ${GITHUB_REPOSITORY} | cut -d'/' -f2)" >> $GITHUB_ENV

      - name: Checkout tools repo
        uses: actions/checkout@v4
        with:
          repository: NexusMutual/argocd
          path: argocd
          token: ${{ secrets.GIT_TOKEN  }}
      - name: Update Tag in Helm Values for argocd
        env:
          REGISTRY: ${{ env.REGISTRY }}
          TAG_NAME: ${{ env.TAG_NAME }}
          BRANCH_NAME: ${{ env.BRANCH_NAME }}
          SHORT_SHA: ${{ env.SHORT_SHA }}
          REPO_NAME: ${{ env.REPO_NAME }}
        run: |
            if [[ "${GITHUB_REF}" == refs/tags/* ]]; then
              cd argocd/values/production/${REPO_NAME} &&  sed -i "/tag:/s/tag:.*/tag: ${TAG_NAME}-${SHORT_SHA}/" values.yaml
            else
              cd argocd/values/staging/${REPO_NAME} &&  sed -i "/tag:/s/tag:.*/tag: ${BRANCH_NAME}-${SHORT_SHA}/" values.yaml
            fi
            git config --global user.email "devops@cloudhero.io"
            git config --global user.name "CloudHero"
            git add .
            git commit --allow-empty -m "updated image tag to ${SHORT_SHA} for ${REPO_NAME}"
            git push origin master