ci-build-publish.yml

name: CI Build and Publish

on:
  workflow_call:
    secrets:
      AZURE_DEVOPS_ARTIFACT_USERNAME:
        required: true
      AZURE_DEVOPS_ARTIFACT_TOKEN:
        required: true
      HMCTS_ADO_PAT:
        required: true
      DEPLOYMENT_APP_ID:
        required: true
        description: "GitHub App ID for deployment"
      DEPLOYMENT_APP_PRIVATE_KEY:
        required: true
        description: "GitHub App private key for deployment"
    inputs:
      environment:
        required: true
        type: string
        default: dev
      is_release:
        required: false
        type: boolean
        default: false
      is_publish:
        required: true
        type: boolean
      trigger_docker:
        required: true
        type: boolean
      trigger_deploy:
        required: true
        type: boolean
      deploy_environment:
        required: false
        type: string
        default: dev

jobs:
  Artefact-Version:
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    outputs:
      artefact_version: ${{ inputs.is_release && steps.artefact.outputs.release_version || steps.artefact.outputs.draft_version }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Generate Artefact Version
        id: artefact
        uses: hmcts/artefact-version-action@v1
        with:
          release: ${{ inputs.is_release }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  Build:
    needs: [Artefact-Version]
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    outputs:
      repo_name: ${{ steps.repo_vars.outputs.repo_name }}
      artefact_name: ${{ steps.repo_vars.outputs.artefact_name }}
    steps:
      - name: Checkout source code
        uses: actions/checkout@v6

      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: '25'

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v5
        with:
          gradle-version: current

      - name: Gradle Build and Publish
        env:
          ARTEFACT_VERSION: ${{ needs.Artefact-Version.outputs.artefact_version }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          AZURE_DEVOPS_ARTIFACT_USERNAME: ${{ secrets.AZURE_DEVOPS_ARTIFACT_USERNAME }}
          AZURE_DEVOPS_ARTIFACT_TOKEN: ${{ secrets.AZURE_DEVOPS_ARTIFACT_TOKEN }}
          ENVIRONMENT: ${{ inputs.environment }}
        run: |
          echo "Building with ARTEFACT_VERSION=$ARTEFACT_VERSION"
          echo "Active environment=$ENVIRONMENT"

          ./gradlew build -DARTEFACT_VERSION=$ARTEFACT_VERSION

          if [ -z "AZURE_DEVOPS_ARTIFACT_USERNAME" ]; then
            echo "::warning::AZURE_DEVOPS_ARTIFACT_USERNAME is null or not set"
          fi

          if [ -z "$AZURE_DEVOPS_ARTIFACT_TOKEN" ]; then
            echo "::warning::AZURE_DEVOPS_ARTIFACT_TOKEN is null or not set"
          fi

          if [ "${{ inputs.is_publish }}" == "true" ]; then
            echo "Publishing artefact for version: $ARTEFACT_VERSION"

            ./gradlew publish \
              -DARTEFACT_VERSION=$ARTEFACT_VERSION \
              -DGITHUB_REPOSITORY=${{ github.repository }} \
              -DGITHUB_ACTOR=${{ github.actor }} \
              -DGITHUB_TOKEN=$GITHUB_TOKEN \
              -DAZURE_DEVOPS_ARTIFACT_USERNAME=$AZURE_DEVOPS_ARTIFACT_USERNAME \
              -DAZURE_DEVOPS_ARTIFACT_TOKEN=$AZURE_DEVOPS_ARTIFACT_TOKEN
          fi

      - name: Extract repo name
        id: repo_vars
        run: |
          repo_name=${GITHUB_REPOSITORY##*/}
          echo "repo_name=${repo_name}" >> $GITHUB_OUTPUT
          echo "artefact_name=${repo_name}-${{ needs.Artefact-Version.outputs.artefact_version }}" >> $GITHUB_OUTPUT

      - name: Upload JAR Artefact
        uses: actions/upload-artifact@v6
        with:
          name: app.jar
          path: build/libs/${{ steps.repo_vars.outputs.artefact_name }}.jar

  Build-Docker:
    needs: [ Build, Artefact-Version ]
    if: ${{ inputs.trigger_docker }}
    runs-on: ubuntu-latest
    environment:
      name: ${{ inputs.environment }}
    steps:
      - name: Checkout Code
        uses: actions/checkout@v6

      - name: Download JAR Artefact
        uses: actions/download-artifact@v7
        with:
          name: app.jar
          path: build/libs

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Packages
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and Push Docker Image to GitHub
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile
          push: true
          tags: |
            ghcr.io/${{ github.repository }}:${{ needs.Artefact-Version.outputs.artefact_version }}
          build-args: |
            BASE_IMAGE=eclipse-temurin:25
            JAR_FILENAME=${{ needs.Build.outputs.artefact_name }}.jar

  Deploy:
    needs: [ Build, Artefact-Version ]
    if: ${{ inputs.trigger_deploy }}
    runs-on: ubuntu-latest
    outputs:
      run_id: ${{ steps.trigger.outputs.run_id }}
    steps:
      - name: Extract repo name
        run: echo "REPO_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV

      - name: Trigger ADO pipeline 460
        id: trigger
        uses: hmcts/trigger-ado-pipeline@v2
        with:
          pipeline_id: 460
          ado_pat: ${{ secrets.HMCTS_ADO_PAT }}
          template_parameters: >
            {
              "GROUP_ID": "uk.gov.hmcts.cp",
              "ARTIFACT_ID": "${{ env.REPO_NAME }}",
              "ARTIFACT_VERSION": "${{ needs.Artefact-Version.outputs.artefact_version }}",
              "TARGET_REPOSITORY": "${{ github.repository }}",
              "agentDemand": "ubuntu-j25",
              "baseImage": "hmcts/apm-services:25-jre"
            }

  Wait-For-ACR-Push:
    needs: [Deploy]
    if: ${{ inputs.trigger_deploy }}
    runs-on: ubuntu-latest
    steps:
      - name: Wait for ADO pipeline 460
        uses: hmcts/monitor-ado-pipeline@v1
        with:
          pipeline_id: 460
          run_id: ${{ needs.Deploy.outputs.run_id }}
          ado_pat: ${{ secrets.HMCTS_ADO_PAT }}
          poll_interval: 30
          timeout: 1800

  deploy-dev:
    needs: [Wait-For-ACR-Push, Artefact-Version, Build]
    if: ${{ inputs.trigger_deploy }}
    runs-on: ubuntu-latest
    steps:
      - name: Generate date suffix
        id: date
        shell: bash
        run: echo "suffix=_$(date -u +'%d%m%y')" >> "$GITHUB_OUTPUT"

      - name: Deploy via ADO pipeline
        uses: hmcts/action-ado-deploy@v1
        with:
          service_name: ${{ needs.Build.outputs.repo_name }}
          image_tag: ${{ needs.Artefact-Version.outputs.artefact_version }}
          tag_suffix: ${{ steps.date.outputs.suffix }}
          app_id: ${{ secrets.DEPLOYMENT_APP_ID }}
          app_private_key: ${{ secrets.DEPLOYMENT_APP_PRIVATE_KEY }}
          target_repository: hmcts/cp-vp-aks-deploy
          target_branch: env/dev
          values_file: vp-config/services_values.yml
          pipeline_id: 434
          ado_pat: ${{ secrets.HMCTS_ADO_PAT }}
          ref_name: refs/heads/env/dev
          wait: false
          template_parameters: >
            {
              "env": "dev",
              "cpbackendenv": "steccm64",
              "stack": "devamp01",
              "cluster": "K8-DEV-CS01-CL02"
            }