ci-build-publish.yml

name: CI Build and Publish

on:
  workflow_call:
    secrets:
      AZURE_DEVOPS_ARTIFACT_USERNAME:
        required: true
      AZURE_DEVOPS_ARTIFACT_TOKEN:
        required: true
      HMCTS_CP_ADO_PAT:
        required: true
      CP_VP_AKS_DEPLOY_KEY:
        required: true
        description: "SSH deploy key with write access to hmcts/cp-vp-aks-deploy"
    inputs:
      environment:
        required: true
        type: string
        default: dev
      is_release:
        required: false
        type: boolean
        default: false
      is_publish:
        required: true
        type: boolean
      trigger_docker:
        required: true
        type: boolean
      trigger_deploy:
        required: true
        type: boolean
      deploy_environment:
        required: false
        type: string
        default: dev

jobs:
  Artefact-Version:
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    outputs:
      artefact_version: ${{ inputs.is_release && steps.artefact.outputs.release_version || steps.artefact.outputs.draft_version }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Generate Artefact Version
        id: artefact
        uses: hmcts/artefact-version-action@v1
        with:
          release: ${{ inputs.is_release }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  Build:
    needs: [Artefact-Version]
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    outputs:
      repo_name: ${{ steps.repo_vars.outputs.repo_name }}
      artefact_name: ${{ steps.repo_vars.outputs.artefact_name }}

    steps:
      - name: Checkout source code
        uses: actions/checkout@v6

      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: '21'

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v5
        with:
          gradle-version: current

      - name: Gradle Build
        env:
          ARTEFACT_VERSION: ${{ needs.Artefact-Version.outputs.artefact_version }}
        run: |
          echo "Building with ARTEFACT_VERSION=$ARTEFACT_VERSION"
          gradle build -DARTEFACT_VERSION=$ARTEFACT_VERSION

      - name: Extract repo name
        id: repo_vars
        run: |
          repo_name=${GITHUB_REPOSITORY##*/}
          echo "repo_name=${repo_name}" >> $GITHUB_OUTPUT
          echo "artefact_name=${repo_name}-${{ needs.Artefact-Version.outputs.artefact_version }}" >> $GITHUB_OUTPUT

      - name: Upload JAR Artefact
        uses: actions/upload-artifact@v6
        with:
          name: app.jar
          path: build/libs/${{ steps.repo_vars.outputs.artefact_name }}.jar

  Provider-Deploy:
    needs: [ Artefact-Version, Build ]
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    steps:
      - name: Checkout source code
        uses: actions/checkout@v6

      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: '21'

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v5
        with:
          gradle-version: current

      - name: Gradle Publish
        if: ${{ inputs.is_publish }}
        env:
          ARTEFACT_VERSION: ${{ needs.Artefact-Version.outputs.artefact_version }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          AZURE_DEVOPS_ARTIFACT_USERNAME: ${{ secrets.AZURE_DEVOPS_ARTIFACT_USERNAME }}
          AZURE_DEVOPS_ARTIFACT_TOKEN: ${{ secrets.AZURE_DEVOPS_ARTIFACT_TOKEN }}
          ENVIRONMENT: ${{ inputs.environment }}
        run: |
          echo "Active environment=$ENVIRONMENT"
          if [ -z "AZURE_DEVOPS_ARTIFACT_USERNAME" ]; then
            echo "::warning::AZURE_DEVOPS_ARTIFACT_USERNAME is null or not set"
          fi

          if [ -z "$AZURE_DEVOPS_ARTIFACT_TOKEN" ]; then
            echo "::warning::AZURE_DEVOPS_ARTIFACT_TOKEN is null or not set"
          fi

          echo "Publishing artefact for version: $ARTEFACT_VERSION"
          
          gradle publish \
            -DARTEFACT_VERSION=$ARTEFACT_VERSION \
            -DGITHUB_REPOSITORY=${{ github.repository }} \
            -DGITHUB_ACTOR=${{ github.actor }} \
            -DGITHUB_TOKEN=$GITHUB_TOKEN \
            -DAZURE_DEVOPS_ARTIFACT_USERNAME=$AZURE_DEVOPS_ARTIFACT_USERNAME \
            -DAZURE_DEVOPS_ARTIFACT_TOKEN=$AZURE_DEVOPS_ARTIFACT_TOKEN

  Build-Docker:
    needs: [ Provider-Deploy, Build, Artefact-Version ]
    if: ${{ inputs.trigger_docker }}
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    steps:
      - name: Checkout Code
        uses: actions/checkout@v6

      - name: Download JAR Artefact
        uses: actions/download-artifact@v7
        with:
          name: app.jar
          path: build/libs

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Packages
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and Push Docker Image to GitHub
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile
          push: true
          tags: |
            ghcr.io/${{ github.repository }}:${{ needs.Artefact-Version.outputs.artefact_version }}
          build-args: |
            BASE_IMAGE=eclipse-temurin:21
            JAR_FILENAME=${{ needs.Build.outputs.artefact_name }}.jar

  Deploy:
    needs: [Provider-Deploy, Build, Artefact-Version]
    if: ${{ inputs.trigger_deploy }}
    runs-on: ubuntu-latest
    outputs:
      run_id: ${{ steps.trigger.outputs.run_id }}
    steps:
      - name: Extract repo name
        run: echo "REPO_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV

      - name: Trigger ADO pipeline 460
        id: trigger
        uses: hmcts/trigger-ado-pipeline@v2
        with:
          pipeline_id: 460
          ado_pat: ${{ secrets.HMCTS_CP_ADO_PAT }}
          template_parameters: >
            {
              "GROUP_ID": "uk.gov.hmcts.cp",
              "ARTIFACT_ID": "${{ env.REPO_NAME }}",
              "ARTIFACT_VERSION": "${{ needs.Artefact-Version.outputs.artefact_version }}",
              "TARGET_REPOSITORY": "${{ github.repository }}"
            }

  Wait-For-ACR-Push:
    needs: [Deploy]
    if: ${{ inputs.trigger_deploy }}
    runs-on: ubuntu-latest
    steps:
      - name: Wait for ADO pipeline 460
        uses: hmcts/monitor-ado-pipeline@v1
        with:
          pipeline_id: 460
          run_id: ${{ needs.Deploy.outputs.run_id }}
          ado_pat: ${{ secrets.HMCTS_CP_ADO_PAT }}
          poll_interval: 30
          timeout: 1800

  Deploy-To-K8s:
    needs: [Wait-For-ACR-Push, Artefact-Version, Build]
    if: ${{ inputs.trigger_deploy }}
    uses: hmcts/cp-vp-aks-deploy/.github/workflows/update-service-tag.yml@main
    with:
      service_name: ${{ needs.Build.outputs.repo_name }}
      image_tag: ${{ needs.Artefact-Version.outputs.artefact_version }}
      environment: ${{ inputs.deploy_environment }}
    secrets:
      deploy_key: ${{ secrets.CP_VP_AKS_DEPLOY_KEY }}