ci.yaml

name: CI

on:
  push:
    branches: [master]
    tags: ['v*']
  pull_request:
    branches: [master]
  schedule:
  - cron: 0 4 * * *

jobs:
  test:
    name: All checks are passed
    uses: ./.github/workflows/test.yaml

  approve:
    name: Approve bot PR
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request_target'
    needs: test
    steps:
    - name: Checkout
      uses: actions/checkout@v3
    - id: generate_token
      uses: tibdex/github-app-token@v1
      with:
        app_id: ${{ secrets.BOT_APP_ID }}
        private_key: ${{ secrets.BOT_PRIVATE_KEY }}
    - name: metadata
      id: metadata
      if: github.actor == 'dependabot[bot]'
      uses: dependabot/fetch-metadata@v1.3.6
      with:
        github-token: ${{ steps.generate_token.outputs.token }}
    - name: Enable auto-merge for bot PRs
      run: gh pr merge --auto --squash --delete-branch "$PR_URL"
      env:
        PR_URL: ${{ github.event.pull_request.html_url }}
        GH_TOKEN: ${{ steps.generate_token.outputs.token }}

  release:
    name: Create release
    needs: test
    if: github.event_name == 'push' && (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/'))
    uses: neuro-inc/reuse/.github/workflows/release-service.yaml@v24.10.0
    with:
      image: platformapi
      helm_charts: platform-api platform-api-poller

  deploy:
    name: Deploy
    needs: release
    uses: neuro-inc/reuse/.github/workflows/deploy-service.yaml@v24.10.0
    secrets:
      tf_api_token: ${{ secrets.TF_API_TOKEN }}
    with:
      environment: ${{ needs.release.outputs.prerelease == 'true' && 'dev' || 'prod' }}
      dev_workspace: ${{ vars.DEV_TFC_WORKSPACE_JSON }}
      prod_workspaces: ${{ vars.PROD_TFC_WORKSPACES_JSON }}
      variables: |
        platform_api_version=${{ needs.release.outputs.version }}