api-cd.yml

name: EPICTRACK API CD


on:
  push:
    branches:
      - develop
    paths:
      - "epictrack-api/**"
  workflow_dispatch:
    inputs:
      environment:
        description: "Environment (dev/test/prod)"
        required: true
        default: "dev"

defaults:
  run:
    shell: bash
    working-directory: ./epictrack-api

env:
  APP_NAME: "epictrack-api"
  TAG_NAME: "${{ github.event.inputs.environment || 'dev' }}" # If the environment type is manually selected, use the input value; otherwise, use 'dev' as default

jobs:
  check_template_changes:
    runs-on: ubuntu-latest
    if: github.repository == 'bcgov/EPIC.track'
    outputs:
      templates_changed: ${{ steps.check.outputs.templates_changed }}
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 2
      - name: Detect xlsx changes
        id: check
        run: |
          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
            # Manual trigger — always upload so the user gets a full sync
            echo "templates_changed=true" >> $GITHUB_OUTPUT
          elif git diff --name-only HEAD~1 HEAD -- epictrack-api/src/api/templates/event_templates/ | grep -q "\.xlsx$"; then
            echo "templates_changed=true" >> $GITHUB_OUTPUT
            echo "Template files changed in this push"
          else
            echo "templates_changed=false" >> $GITHUB_OUTPUT
            echo "No template files changed, skipping upload"
          fi

  api-cd:
    runs-on: ubuntu-24.04

    if: github.repository == 'bcgov/EPIC.track'
    environment:
      name: "dev"

    steps:
      - uses: actions/checkout@v6

      - name: Install OpenShift CLI
        run: |
          curl -LO "https://mirror.openshift.com/pub/openshift-v4/clients/ocp/latest/openshift-client-linux.tar.gz"
          tar -xvzf openshift-client-linux.tar.gz
          sudo mv oc /usr/local/bin/
          rm -f openshift-client-linux.tar.gz

      - name: Login Openshift
        shell: bash
        run: |
          oc login --server=${{secrets.OPENSHIFT_LOGIN_REGISTRY}} --token=${{secrets.OPENSHIFT_SA_TOKEN}}

      - name: Login Docker
        run: |
          echo "${{ secrets.OPENSHIFT_SA_TOKEN }}" | 
          docker login ${{ secrets.OPENSHIFT_IMAGE_REGISTRY }} -u ${{ secrets.OPENSHIFT_SA_NAME}} --password-stdin

      - name: Build image
        run: |
          docker build . --file Dockerfile --tag image

      - name: Push image
        run: |
          IMAGE_ID=${{ secrets.OPENSHIFT_IMAGE_REGISTRY }}/"${{ secrets.OPENSHIFT_REPOSITORY}}-tools"/$APP_NAME
          docker tag image $IMAGE_ID:latest
          docker push $IMAGE_ID:latest
          docker image tag $IMAGE_ID:latest $IMAGE_ID:$TAG_NAME
          docker push $IMAGE_ID:$TAG_NAME

      - name: Rollout
        shell: bash
        run: |
          oc rollout restart deployment/${{ env.APP_NAME }} -n ${{ secrets.OPENSHIFT_REPOSITORY }}-${{ env.TAG_NAME }}
          oc rollout status deployment/${{ env.APP_NAME }} -n ${{ secrets.OPENSHIFT_REPOSITORY }}-${{ env.TAG_NAME }} --timeout=5m

  update_event_templates:
    needs: [api-cd, check_template_changes]
    if: needs.check_template_changes.outputs.templates_changed == 'true'
    uses: ./.github/workflows/deploy-event-templates.yml
    with:
      environment: "dev"
    secrets: inherit