push.yaml

name: Push
on:
  workflow_call:
    inputs:
      CONTAINER_REGISTRY_URL:
        required: true
        type: string

      HELM_REGISTRY_URL:
        required: true
        type: string

      SUBPATH:
        required: true
        type: string

      PUSH_CONTAINER_IMAGE:
        default: 'false'
        required: false
        type: string

      PUBLISH_HEM_CHART:
        default: 'false'
        required: false
        type: string

      NEXT_VERSION:
        required: false
        type: string

    secrets:
      REGISTRY_USERNAME:
        description: "Username for container registry to login"
        required: true

      REGISTRY_PASSWORD:
        description: "Password for container registry to login"
        required: true

jobs:
  build-and-push-container-image:
    name: Build and Push Container Image
    if: contains(inputs.PUSH_CONTAINER_IMAGE, 'true')
    runs-on: ubuntu-latest

    steps:
    - name: Checkout Code
      uses: actions/checkout@v4
      with:
        fetch-depth: '0'
  
    - name: Set up QEMU
      uses: docker/setup-qemu-action@v3

    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v3

    - name: Login to Container Registry
      uses: docker/login-action@v3
      with:
        registry: ${{ inputs.CONTAINER_REGISTRY_URL }}
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}

    - name: Build and Push Image
      uses: docker/build-push-action@v5
      with:
        context: ${{ inputs.SUBPATH }}
        tags: ${{ inputs.CONTAINER_REGISTRY_URL }}/${{ inputs.SUBPATH }}:${{ inputs.NEXT_VERSION }}
        push: true
        labels: |
          org.opencontainers.image.source=${{ github.event.repository.clone_url }}
          org.opencontainers.image.created=${{ steps.prep.outputs.created }}
          org.opencontainers.image.revision=${{ github.sha }}

  package-and-push-helm-chart:
    name: Package and Push Helm Chart
    runs-on: ubuntu-latest
    needs:
    - build-and-push-container-image
    if: |
      always() && !contains(needs.*.result, 'failure') && contains(inputs.PUBLISH_HEM_CHART, 'true')

    steps:
    - name: Checkout Code
      uses: actions/checkout@v4
      with:
        fetch-depth: '0'

    - name: Login to Container Registry
      uses: docker/login-action@v3
      with:
        registry: ${{ inputs.CONTAINER_REGISTRY_URL }}
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}

    - name: Test and Package Helm Chart
      run: |
        sed -i "s/^version:.*/version:  ${{ inputs.NEXT_VERSION }}/" ${{ inputs.SUBPATH }}/helm/Chart.yaml
        helm lint ${{ inputs.SUBPATH }}/helm/
        helm -n test template ${{ inputs.SUBPATH }} ${{ inputs.SUBPATH }}/helm/
        helm package ${{ inputs.SUBPATH }}/helm/

    - name: Push Helm Chart to Registry
      run: |
        helm push ${{ inputs.SUBPATH }}-${{ inputs.NEXT_VERSION }}.tgz ${{ inputs.HELM_REGISTRY_URL }}

  release:
    name: Create Release on GitHub
    if: |
      always() && !contains(needs.*.result, 'failure')
    runs-on: ubuntu-latest
    needs:
    - build-and-push-container-image
    - package-and-push-helm-chart

    steps:
    - name: Checkout Code
      uses: actions/checkout@v4
      with:
        fetch-depth: 1

    - name: Create GitHub Release
      uses: softprops/action-gh-release@v1
      with:
        tag_name: ${{ inputs.SUBPATH }}-${{ inputs.NEXT_VERSION }}
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}