buildTestPublishContainerDeploy.yml

name: buildTestPublishContainerDeploy
on:
  push:
    branches:
      - main
  release:
    types:
      - published
  pull_request:
  workflow_dispatch:
env:
  notifyBCContainerTag: latest
jobs:
  build-and-test:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout 🛎️
        uses: actions/checkout@v4.1.4
        with:
          persist-credentials: false
      - uses: actions/setup-node@v4.0.2
        with:
          node-version: ${{ vars.NODE_VERSION }}
      - name: Install and Test 🔧
        run: |
          npm ci
          yarn test
      - name: Set package version
        run: echo "notifyBCContainerTag=$(npm pkg get version)" >> $GITHUB_ENV
  publish-container:
    if: ${{ github.repository == 'bcgov/des-notifybc' && github.event_name != 'pull_request' }}
    needs: build-and-test
    runs-on: ubuntu-latest
    steps:
      - name: Save $notifyBCContainerTag to file
        run: |
          echo $notifyBCContainerTag > notifyBCContainerTag.txt
      - name: Upload notifyBCContainerTag
        if: ${{ startsWith(github.ref, 'refs/heads/') }}
        uses: actions/upload-artifact@v2
        with:
          name: notifyBCContainerTag
          path: notifyBCContainerTag.txt
      - name: Checkout 🛎️
        uses: actions/checkout@v4.1.4
        with:
          persist-credentials: false
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3.1.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Publish Container 🚀
        uses: docker/build-push-action@v5.3.0
        with:
          push: true
          tags: ghcr.io/bcgov/des-notify-bc:${{ env.notifyBCContainerTag }}
          build-args: nodeVersion=${{ vars.NODE_VERSION }}
  deploy:
    if: ${{ github.repository == 'bcgov/des-notifybc' && github.event_name == 'push' }}
    needs: publish-container
    runs-on: ubuntu-latest
    steps:
      - name: Checkout 🛎️
        uses: actions/checkout@v4.1.4
        with:
          persist-credentials: false
      - name: Decrypt values.ocp4.dev.yaml.gpg
        run: ./.github/scripts/decrypt_secret.sh
        env:
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
      - name: Install oc
        uses: redhat-actions/oc-installer@v1
      - name: Authenticate to OCP4 and set context
        uses: redhat-actions/oc-login@v1
        with:
          openshift_server_url: ${{ secrets.OPENSHIFT_SERVER_URL }}
          openshift_token: ${{ secrets.OPENSHIFT_API_TOKEN }}
          namespace: ${{ secrets.OPENSHIFT_PROJECT }}-dev
      - name: Download notifyBCContainerTag
        uses: actions/download-artifact@v2
        with:
          name: notifyBCContainerTag
      - name: helm upgrade 🚀
        run: |
          export notifyBCContainerTag=`cat notifyBCContainerTag.txt`
          helm upgrade -f helm/platform-specific/openshift.yaml \
          -f .github/values.ocp4.dev.yaml --set \
          image.tag="$notifyBCContainerTag" `helm ls -q` helm
          oc get deployment -o name | xargs oc rollout restart