name: Deploy STEP3 UAT

on:
  push:
    branches:
      - main
    paths-ignore:
      - '**.md'
      - 'tools/**'
      - 'tests/*.gd'
  workflow_dispatch: {}

concurrency:
  group: step3-uat
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: self-hosted
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Configure kubeconfig
        env:
          KUBECONFIG_CONTENT: ${{ secrets.KUBECONFIG }}
        run: |
          if [ -n "$KUBECONFIG_CONTENT" ]; then
            mkdir -p /tmp/kube
            printf '%s\n' "$KUBECONFIG_CONTENT" > /tmp/kube/config
            echo "KUBECONFIG=/tmp/kube/config" >> "$GITHUB_ENV"
          fi

      - name: Deploy UAT
        env:
          DEPLOYMENT_ENVIRONMENT: uat
          KUBE_NAMESPACE: step3-uat
          PUBLIC_API_ORIGIN: https://us3q.ranaze.com
          PUBLIC_WEB_ORIGIN: https://ustep3.ranaze.com
          MONGODB_CONNECTION_STRING: ${{ secrets.UAT_MONGODB_CONNECTION_STRING }}
          AUTH_JWT_KEY: ${{ secrets.UAT_AUTH_JWT_KEY }}
          INTERNAL_PURGE_SECRET: ${{ secrets.UAT_INTERNAL_PURGE_SECRET }}
          STRIPE_SECRET_KEY: ${{ secrets.UAT_STRIPE_SECRET_KEY }}
          STRIPE_WEBHOOK_SECRET: ${{ secrets.UAT_STRIPE_WEBHOOK_SECRET }}
          GOOGLE_CLIENT_ID: ${{ secrets.UAT_GOOGLE_CLIENT_ID }}
          GOOGLE_CLIENT_SECRET: ${{ secrets.UAT_GOOGLE_CLIENT_SECRET }}
        run: bash .gitea/scripts/deploy-environment.sh

      - name: Upload UAT smoke-test artifacts
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: uat-smoke-${{ github.run_number }}-${{ github.run_attempt }}
          path: artifacts/uat-smoke
          if-no-files-found: warn
          retention-days: 14