deploy.yml

name: Build app and update Docker image

on:
  # Use the release event because push events are not triggered for commits tagged with more than three tags:
  # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#push.
  release:
    types: [created]

jobs:
  build:
    runs-on: ubuntu-latest
    if: startsWith(github.ref_name, '@netwerk-digitaal-erfgoed/network-of-terms-graphql') || startsWith(github.ref_name, '@netwerk-digitaal-erfgoed/network-of-terms-reconciliation')

    steps:
      - uses: actions/checkout@v3

      # https://github.com/dhoulb/multi-semantic-release#git-tags tags packages `@scope/package-name@version`.
      - uses: actions-ecosystem/action-regex-match@v2.0.2
        id: parse-tag
        with:
          text: ${{ github.ref_name }}
          regex: '^@netwerk-digitaal-erfgoed/(.+)@(.+)$'

      # See https://github.com/docker/build-push-action#complete-workflow.
      - name: Set variables
        id: vars
        run: |
          VERSION_TAG=${GITHUB_REF#refs/tags/}
          echo "package_name=${{steps.parse-tag.outputs.group1}}" >> $GITHUB_OUTPUT
          echo "version_tag=${{steps.parse-tag.outputs.group2}}" >> $GITHUB_OUTPUT
          echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
          echo "docker_image=ghcr.io/netwerk-digitaal-erfgoed/${{steps.parse-tag.outputs.group1}}" >> $GITHUB_OUTPUT

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2.9.0
        with:
          # See https://github.com/docker/build-push-action/issues/126.
          driver-opts: image=moby/buildkit:master

      - name: Log in to Docker registry
        uses: docker/login-action@v2.2.0
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}

      - name: Build and push image to registry
        uses: docker/build-push-action@v4.1.1
        with:
          context: .
          push: true
          build-args: PACKAGE_DIR=packages/${{ steps.vars.outputs.package_name }}
          tags: |
            ${{ steps.vars.outputs.docker_image }}:${{ steps.vars.outputs.sha_short }}
            ${{ steps.vars.outputs.docker_image }}:${{ steps.vars.outputs.version_tag }}
            ${{ steps.vars.outputs.docker_image }}:latest

      - uses: digitalocean/action-doctl@v2
        with:
          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}

      - name: Store DigitalOcean credentials
        run: doctl kubernetes cluster kubeconfig save nde

      # See https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#updating-a-deployment
      - name: Update deployment
        run: |
          kubectl set image deployment/${{ steps.vars.outputs.package_name }} app=${{ steps.vars.outputs.docker_image }}:${{ steps.vars.outputs.sha_short }}

      - name: Verify deployment
        run: kubectl rollout status deployment/${{ steps.vars.outputs.package_name }} --timeout=120s