test-ci.yaml

## For each release, the value of workflow name, branches and VERSION need to be adjusted accordingly

name: Zeva new-pipeline Test CI

on:
  workflow_dispatch:

env:
  GIT_URL: https://github.com/bcgov/zeva.git
  DEV_NAMESPACE: ${{ secrets.OPENSHIFT_NAMESPACE_PLATE }}-dev
  TEST_NAMESPACE: ${{ secrets.OPENSHIFT_NAMESPACE_PLATE }}-test

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  install-oc:
    runs-on: ubuntu-latest
    outputs:
      cache-hit: ${{ steps.cache.outputs.cache-hit }}
    steps:
      - name: Check out repository
        uses: actions/checkout@v4.1.1

      - name: Set up cache for OpenShift CLI
        id: cache
        uses: actions/cache@v4.2.0
        with:
          path: /usr/local/bin/oc  # Path where the `oc` binary will be installed
          key: oc-cli-${{ runner.os }}

      - name: Install OpenShift CLI (if not cached)
        if: steps.cache.outputs.cache-hit != 'true'
        run: |
          curl -LO https://mirror.openshift.com/pub/openshift-v4/clients/ocp/stable/openshift-client-linux.tar.gz
          tar -xvf openshift-client-linux.tar.gz
          sudo mv oc /usr/local/bin/
          oc version --client

      - name: Confirm OpenShift CLI is Available
        run: oc version --client

  get-build-suffix:
    name: Find Dev deployment build suffix 
    runs-on: ubuntu-latest
    needs: [install-oc]

    outputs:
      output1: ${{ steps.get-build-suffix.outputs.BUILD_SUFFIX }}

    steps:
      - name: Restore oc command from Cache
        uses: actions/cache@v4.2.0
        with:
          path: /usr/local/bin/oc
          key: oc-cli-${{ runner.os }}

      - name: Log in to Openshift
        uses: redhat-actions/oc-login@v1.3
        with:
          openshift_server_url: ${{ secrets.OPENSHIFT_SERVER }}
          openshift_token: ${{ secrets.OPENSHIFT_TOKEN }}
          insecure_skip_tls_verify: true
          namespace: ${{ env.DEV_NAMESPACE }}

      - id: get-build-suffix
        run: |
          build_suffix=$(oc -n ${{ env.DEV_NAMESPACE }} describe deployment/zeva-dev-frontend | grep Image | awk -F ':' '{print $NF}')
          echo "Validating $build_suffix"
          if [[ "$build_suffix" =~ ^[0-9]+\.[0-9]+\.[0-9]+-[0-9]{14}$ ]]; then
            echo "Build suffix $build_suffix format is valid."
            echo "BUILD_SUFFIX=$build_suffix" >> $GITHUB_OUTPUT
          else
            echo "Error: Build suffix $build_suffix format is invalid!"
            exit 1
          fi


  deploy-on-test:
    name: Deploy ZEVA on Test
    runs-on: ubuntu-latest
    timeout-minutes: 60
    needs: [get-build-suffix]

    env:
      BUILD_SUFFIX: ${{ needs.get-build-suffix.outputs.output1 }}

    steps:
      - name: Ask for approval for ZEVA ${{ env.BUILD_SUFFIX }} Test deployment
        uses: trstringer/manual-approval@v1.6.0
        with:
          secret: ${{ github.TOKEN }}
          approvers: emi-hi,tim738745,kuanfandevops,JulianForeman,rogerlcleung
          minimum-approvals: 1
          issue-title: "ZEVA ${{ env.BUILD_SUFFIX }} Test Deployment"

      - name: Checkout Manifest repository
        uses: actions/checkout@v4.1.1
        with:
          repository: bcgov-c/tenant-gitops-e52f12
          ref: main
          ssh-key: ${{ secrets.MANIFEST_REPO_DEPLOY_KEY }}

      - name: Update frontend and backend image tags
        uses: mikefarah/yq@v4.40.5
        with:
          cmd: |
            yq -i '.frontend.image.tag = "${{ env.BUILD_SUFFIX }}"' zeva/values-test.yaml
            yq -i '.backend.image.tag = "${{ env.BUILD_SUFFIX }}"' zeva/values-test.yaml

      - name: GitHub Commit & Push
        shell: bash {0}
        run: |
          git config --global user.email "actions@github.com"
          git config --global user.name "GitHub Actions"
          git add zeva/values-test.yaml
          git commit -m "Update the image tag to ${{ env.BUILD_SUFFIX }} on Zeva Test Environment"
          git push

      - name: Restore oc command from Cache
        uses: actions/cache@v4.2.0
        with:
          path: /usr/local/bin/oc
          key: oc-cli-${{ runner.os }}

      - name: Log in to Openshift
        uses: redhat-actions/oc-login@v1.3
        with:
          openshift_server_url: ${{ secrets.OPENSHIFT_SERVER }}
          openshift_token: ${{ secrets.OPENSHIFT_TOKEN }}
          insecure_skip_tls_verify: true
          namespace: ${{ env.TEST_NAMESPACE }}

      - name: Tag ZEVA images to Test
        run: |
          helm -n ${{ env.TEST_NAMESPACE }} list
          oc tag ${{ env.DEV_NAMESPACE }}/zeva-backend:${{ env.BUILD_SUFFIX }} ${{ env.TEST_NAMESPACE }}/zeva-backend:${{ env.BUILD_SUFFIX }}
          oc tag ${{ env.DEV_NAMESPACE }}/zeva-frontend:${{ env.BUILD_SUFFIX }} ${{ env.TEST_NAMESPACE }}/zeva-frontend:${{ env.BUILD_SUFFIX }}
          cd zeva
          helm -n ${{ env.TEST_NAMESPACE }} -f ./values-test.yaml upgrade --install zeva-test .