nxtgauge-frontend-solid/.forgejo/workflows/build.yaml

name: build-and-push

on:
  push:
    branches:
      - main
      - high-performance

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build and push
        uses: docker://gcr.io/kaniko-project/executor:v1.23.2-debug
        env:
          REGISTRY_HOSTPORT: ${{ secrets.REGISTRY_HOSTPORT }}
          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
          IMAGE_NAME: nxtgauge-frontend-solid
          LATEST_TAG: high-performance-latest
          COMMIT_SHA: ${{ github.sha }}
        with:
          entrypoint: /busybox/sh
          args: ${{ github.workspace }}/.forgejo/scripts/kaniko-build.sh

      - name: Prune old image tags (keep latest 1 SHA)
        if: success()
        continue-on-error: true
        env:
          REGISTRY_HOST: ${{ secrets.REGISTRY_HOSTPORT }}
          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
        run: |
          set -euo pipefail
          python3 .forgejo/scripts/registry_prune.py \
            --registry "$REGISTRY_HOST" \
            --repo "nxtgauge-frontend-solid" \
            --username "$REGISTRY_USERNAME" \
            --password "$REGISTRY_PASSWORD" \
            --keep 1

      - name: Update GitOps and trigger deployment
        if: success()
        continue-on-error: true
        env:
          GITEOPS_REPO: ${{ secrets.GITEOPS_REPO }}
          GITEOPS_SSH_KEY: ${{ secrets.GITEOPS_SSH_KEY }}
        run: |
          set -euo pipefail
          SHA="$(git rev-parse HEAD)"

          if [ -z "$GITEOPS_REPO" ]; then
            echo "GITEOPS_REPO secret not set, skipping GitOps update"
            exit 0
          fi

          GITEOPS_DIR=$(mktemp -d)
          git clone "$GITEOPS_REPO" "$GITEOPS_DIR"
          cd "$GITEOPS_DIR"

          mkdir -p ~/.ssh
          echo "$GITEOPS_SSH_KEY" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh-keyscan github.com >> ~/.ssh/known_hosts 2>/dev/null

          python3 .forgejo/scripts/update-gitops.py \
            --repo "$GITEOPS_DIR" \
            --service "frontend-solid" \
            --sha "${SHA}" \
            --message "chore: deploy frontend-solid@${SHA}"

          rm -rf "$GITEOPS_DIR"