workflow.yml

name: Docker Build and Publish

on:
  push:
    branches:
      - main

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}

jobs:

  buildjob:

    runs-on: ubuntu-latest

    steps:

    - name: Checkout repository
      uses: actions/checkout@v4
      
    - name: login to GHCR
      uses: docker/login-action@v1
      with:
        registry: ${{ env.REGISTRY }}
        username: ${{ github.actor }} 
        password: ${{ secrets.MY_GITHUB_TOKEN }}

    - name: Extract metadata (tags, labels) for Docker
      id: meta
      uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
      with:
        images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

    - name: Build and push Docker image
      uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
      with:
        context: .
        push: true
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}

  deployjob:

    needs: buildjob

    name: "Deploy to XC vk8s"
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./terraform

    steps:
      - name: Checkout Git Repo
        uses: actions/checkout@v3
        with:
          ref: main        

      - name: pull kubeconfig from secret
        run: |
          echo "${{ secrets.VK8S_KUBECONFIG }}" > kubeconfig.yaml

      - name: cat kubeconfig from secret
        run: cat kubeconfig.yaml

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v2
        with:
          terraform_version: 1.2.4

      - name: Terraform Init
        id: init1
        run: |
          terraform init \
          -backend-config="access_key=${{ secrets.AZURE_BACKEND_KEY }}" 
      
      - name: Terraform Validate
        id: validate1
        run: terraform validate 

      - name: Terraform Apply
        id: apply1
        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
        run: terraform apply -auto-approve -no-color -input=false 
        env:
          VES_P12_PASSWORD: ${{ secrets.VES_P12_PASSWORD }}
          # TF_LOG: debug