name: adminpanel-ci-cd

on:
  push:
    tags:
      - 'adminpanel-v*'
  pull_request:
    branches: [main]

env:
  REGISTRY: git.sova.local
  IMAGE: git.sova.local/sova/adminpanel

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '24'
      - run: npm ci
      - run: npm run build

  parse-tag:
    if: startsWith(github.ref, 'refs/tags/adminpanel-v')
    runs-on: ubuntu-latest
    outputs:
      full_tag: ${{ steps.meta.outputs.full_tag }}
      env: ${{ steps.meta.outputs.env }}
      version: ${{ steps.meta.outputs.version }}
    steps:
      - name: Parse tag
        id: meta
        run: |
          TAG="${GITHUB_REF#refs/tags/}"
          echo "full_tag=$TAG" >> "$GITHUB_OUTPUT"
          echo "env=$(echo "$TAG" | sed -E 's/adminpanel-v([0-9.]+)-([a-z]+)/\2/')" >> "$GITHUB_OUTPUT"
          echo "version=$(echo "$TAG" | sed -E 's/adminpanel-v([0-9.]+).*/\1/')" >> "$GITHUB_OUTPUT"

  build-and-push:
    needs: [test, parse-tag]
    if: startsWith(github.ref, 'refs/tags/adminpanel-v')
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Docker login
        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login "$REGISTRY" -u sova-ci --password-stdin
      - name: Build and push
        run: |
          TAG="${{ needs.parse-tag.outputs.full_tag }}"
          docker build -f Dockerfile -t "$IMAGE:${TAG}" -t "$IMAGE:${{ needs.parse-tag.outputs.version }}" .
          docker push "$IMAGE:${TAG}"
          docker push "$IMAGE:${{ needs.parse-tag.outputs.version }}"

  deploy-gitops:
    needs: [build-and-push, parse-tag]
    if: startsWith(github.ref, 'refs/tags/adminpanel-v')
    runs-on: ubuntu-latest
    steps:
      - name: Bump image tag in sova-deploy
        env:
          DEPLOY_KEY: ${{ secrets.SOVA_DEPLOY_KEY }}
        run: |
          eval "$(ssh-agent -s)"
          echo "$DEPLOY_KEY" | ssh-add -
          git clone git@gitea.sova.local:sova/sova-deploy.git
          cd sova-deploy
          ENV="${{ needs.parse-tag.outputs.env }}"
          TAG="${{ needs.parse-tag.outputs.full_tag }}"
          git config user.email "ci-bot@sova.local"
          git config user.name "sova-ci"
          MAX_RETRIES=5
          for attempt in $(seq 1 $MAX_RETRIES); do
            git pull --rebase origin main
            yq -i ".image.tag = \"${TAG}\"" "apps/adminpanel/values-${ENV}.yaml"
            git add "apps/adminpanel/values-${ENV}.yaml"
            git diff --cached --quiet && { echo "No changes"; exit 0; }
            git commit -m "chore(adminpanel): bump ${ENV} to ${TAG}"
            if git push origin main; then
              echo "Push OK on attempt ${attempt}"
              exit 0
            fi
            echo "Push failed, retry ${attempt}/${MAX_RETRIES}..."
            git reset --hard HEAD~1
            sleep $((attempt * 2))
          done
          echo "Failed to push after ${MAX_RETRIES} attempts"
          exit 1