name: Deploy STEP3 PRD

on:
  push:
    branches:
      - production
  workflow_dispatch: {}

concurrency:
  group: step3-prd
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: self-hosted
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Configure kubeconfig
        env:
          KUBECONFIG_CONTENT: ${{ secrets.KUBECONFIG }}
        run: |
          if [ -n "$KUBECONFIG_CONTENT" ]; then
            mkdir -p /tmp/kube
            printf '%s\n' "$KUBECONFIG_CONTENT" > /tmp/kube/config
            echo "KUBECONFIG=/tmp/kube/config" >> "$GITHUB_ENV"
          fi

      - name: Deploy PRD
        env:
          DEPLOYMENT_ENVIRONMENT: prd
          KUBE_NAMESPACE: step3-prd
          PUBLIC_API_ORIGIN: https://s3q.ranaze.com
          MONGODB_CONNECTION_STRING: ${{ secrets.PRD_MONGODB_CONNECTION_STRING }}
          AUTH_JWT_KEY: ${{ secrets.PRD_AUTH_JWT_KEY }}
          INTERNAL_PURGE_SECRET: ${{ secrets.PRD_INTERNAL_PURGE_SECRET }}
          STRIPE_SECRET_KEY: ${{ secrets.PRD_STRIPE_SECRET_KEY }}
          STRIPE_WEBHOOK_SECRET: ${{ secrets.PRD_STRIPE_WEBHOOK_SECRET }}
          GOOGLE_CLIENT_ID: ${{ secrets.PRD_GOOGLE_CLIENT_ID }}
          GOOGLE_CLIENT_SECRET: ${{ secrets.PRD_GOOGLE_CLIENT_SECRET }}
        run: bash .gitea/scripts/deploy-environment.sh