docker-images.yml

name: Build and push docker images

on:
  push:
    branches:
      - master
    paths:
      - '**/**/TAGS'

jobs:
  changed_files:
    name: Get changed tag files
    runs-on: ubuntu-latest
    env:
      BUILD_CURRENT: ${{ github.sha }}
      BUILD_PREVIOUS: ${{ github.event.before }}
    outputs:
      matrix: ${{ steps.changes.outputs.matrix}}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Get changed TAGS files
        id: changes
        run: |
          tagfile_list_json=$(git diff-tree --no-commit-id --name-only -r  \
            $BUILD_CURRENT $BUILD_PREVIOUS \
            | grep TAGS$ \
            | jq -Rsc '. / "\n" - [""]' )
          echo "matrix=${tagfile_list_json}" > $GITHUB_OUTPUT

  build_and_push_docker_hub:
    name: Build and push to Docker Hub
    runs-on: ubuntu-latest

    # Secrets
    # DOCKER_HUB_REGISTRY_URL: "wunderio"
    env:
      DOCKER_REGISTRY_URL: ${{ secrets.DOCKER_REGISTRY_URL }}
      DOCKER_USER: ${{secrets.DOCKER_USER}}
      DOCKER_PASSWORD: ${{secrets.DOCKER_PASSWORD}}

    needs: changed_files
    strategy:
      fail-fast: false
      matrix:
        dockerfile: ${{ fromJson(needs.changed_files.outputs.matrix) }}
    if: ${{needs.changed_files.outputs.matrix}}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: docker login
        run: |
          docker login -u $DOCKER_USER -p $DOCKER_PASSWORD  

      - name: Build and push images
        run: |
          set -ex
          
          tagsFilePath=${{matrix.dockerfile}}
          
          # Remove "/TAGS" from the path
          folder=${tagsFilePath%"/TAGS"}; 
          
          # Split first two directores and use as image name and tag respectively.
          # This only works with bash, make sure the shell is correct!
          read IMAGE_NAME LEFTOVERS <<<$(IFS="/"; echo $folder);

          # Read TAGS file, tag image with each tag and push to remote
          IMAGE_ID=$DOCKER_REGISTRY_URL/$IMAGE_NAME
          cat $tagsFilePath | while read TAG || [[ -n $TAG ]];
          do
            # Add tags
            docker build $folder --file $folder/Dockerfile --tag $IMAGE_ID:$TAG
            # Push image
            docker push $IMAGE_ID:$TAG
          done;

  circleci-k8s-test-build:
    name: Test released images
    runs-on: ubuntu-latest
    needs:
      - build_and_push_docker_hub
    strategy:
      matrix:
        project: [
          {org: "wunderio", repo: "drupal-project-k8s", branch: "master"},
          {org: "wunderio", repo: "frontend-project-k8s", branch: "master"},
          {org: "wunderio", repo: "simple-project-k8s", branch: "master"}
        ]
    steps:
      - uses: actions/checkout@v4
      - name: Validate released images with ${{ matrix.project.repo }}
        run: |
          REPO_NAME="${{ matrix.project.repo }}"
          ORG_NAME="${{ matrix.project.org }}"
          BRANCH_NAME="${{ matrix.project.branch }}"
          CIRCLECI_DEV_API_TOKEN_B64=$(echo -n "${{ secrets.CIRCLECI_DEV_API_TOKEN }}:" | base64)

          if [ -z "${{ secrets.CIRCLECI_DEV_API_TOKEN }}" ]; then
            echo "Repository secrets is missing CIRCLECI_DEV_API_TOKEN variable."
            exit 1
          fi

          echo "Running ${ORG_NAME}/${REPO_NAME}/${BRANCH_NAME} build on CircleCI"
          echo "Project link: https://app.circleci.com/pipelines/github/${ORG_NAME}/${REPO_NAME}?branch=${BRANCH_NAME}"

          # Trigger a new pipeline
          PIPELINE_ID=$(curl --request POST \
            --url "https://circleci.com/api/v2/project/gh/wunderio/${REPO_NAME}/pipeline" \
            --header "content-type: application/json" \
            --data "{\"branch\":\"${BRANCH_NAME}\"}" \
            --header "authorization: Basic ${CIRCLECI_DEV_API_TOKEN_B64}" --silent | jq -r '.id')

          echo "Pipeline ID: ${PIPELINE_ID}"

          sleep 10

          # Wait for pipeline to be complete
          while true; do
            PIPELINE_STATUS=$(curl --request GET \
              --url "https://circleci.com/api/v2/pipeline/${PIPELINE_ID}/workflow" \
              --header "authorization: Basic ${CIRCLECI_DEV_API_TOKEN_B64}" --silent | jq -r '.items[0].status')
            if [ "${PIPELINE_STATUS}" = "success" ]; then
              echo "Pipeline completed successfully"
              break
            elif [ "${PIPELINE_STATUS}" != "created" ] && [ "${PIPELINE_STATUS}" != "running" ]; then
              echo "Pipeline status: ${PIPELINE_STATUS}, failing the test"
              exit 1
            fi
            echo "current status: ${PIPELINE_STATUS}"
            sleep 10
          done