name: CI

on:
  push:
    branches: [main]

env:
  REGISTRY: forge.quinefoundation.com
  IMAGE: forge.quinefoundation.com/ironmagma/customer-riverside

jobs:
  build:
    runs-on: ubuntu-latest
    container:
      image: quay.io/podman/stable
      options: --privileged
    env:
      STORAGE_DRIVER: vfs
    outputs:
      image_digest: ${{ steps.push.outputs.digest }}
    steps:
      - name: Install git
        run: dnf install -y --quiet git-core

      - name: Checkout
        run: |
          git clone --depth=1 \
            "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@${{ env.REGISTRY }}/${{ github.repository }}.git" \
            .
          git checkout "${{ github.sha }}"

      - name: Log in to registry
        env:
          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
        run: echo "$REGISTRY_PASSWORD" | podman login "$REGISTRY" -u "$REGISTRY_USERNAME" --password-stdin

      - name: Build and push
        id: push
        run: |
          podman build --layers=false -t "$IMAGE:${{ github.sha }}" .
          podman push "$IMAGE:${{ github.sha }}" --digestfile /tmp/img-digest
          DIGEST=$(grep -oE '[a-f0-9]{64}' /tmp/img-digest)
          echo "digest=$DIGEST" >> $GITHUB_OUTPUT

  bump-infra:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Bump riverside in infra repo
        env:
          FORGE_TOKEN: ${{ secrets.REGISTRY_PASSWORD  }}
          FORGE_USER: ${{ secrets.REGISTRY_USERNAME }}
          SHA: ${{ github.sha }}
          IMAGE_DIGEST: ${{ needs.build.outputs.image_digest }}
        run: |
          git clone "https://${FORGE_USER}:${FORGE_TOKEN}@forge.quinefoundation.com/Cold-Air-Networks/petersweb-infra.git" infra
          cd infra
          chmod -R u+r .

          BRANCH="bump-riverside-${SHA:0:7}"
          git checkout -b "$BRANCH"

          ./bump-riverside.sh "$IMAGE_DIGEST"

          git config user.email "ci@quinefoundation.com"
          git config user.name "CI"
          git add -A
          git commit -m "bump riverside to ${SHA:0:7}"
          git push origin "$BRANCH"

          curl -sf -X POST \
            -H "Authorization: token $FORGE_TOKEN" \
            -H "Content-Type: application/json" \
            "https://forge.quinefoundation.com/api/v1/repos/Cold-Air-Networks/petersweb-infra/pulls" \
            -d "{
              \"title\": \"bump riverside to ${SHA:0:7}\",
              \"head\": \"$BRANCH\",
              \"base\": \"main\",
              \"body\": \"Automated bump from Cold-Air-Networks/customer-riverside@$SHA\"
            }"