name: Deploy Territory Autobattler Auth API

on:
  push:
    branches:
      - main
  workflow_dispatch: {}

jobs:
  deploy:
    runs-on: self-hosted

    env:
      IMAGE_NAME: territory-autobattler-auth:latest
      IMAGE_TAR: ${{ github.workspace }}/territory-autobattler-auth.tar
      REMOTE_IMAGE_TAR: /home/hz/territory-autobattler-auth.tar
      NAMESPACE: territory-autobattler
      DEPLOYMENT_NAME: territory-autobattler-auth
      NODES: "192.168.86.72 192.168.86.73 192.168.86.74"

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4

      - name: Build Docker image
        run: |
          cd microservices/AuthApi
          docker build -t "${IMAGE_NAME}" .

      - name: Clean stale TAR on runner
        run: |
          rm -f "${IMAGE_TAR}"

      - name: Save Docker image to TAR
        run: |
          docker save "${IMAGE_NAME}" -o "${IMAGE_TAR}"

      - name: Copy TAR to nodes
        run: |
          for node in ${NODES}; do
            echo "Copying image tar to $node ..."
            ssh -o StrictHostKeyChecking=no hz@"$node" "rm -f ${REMOTE_IMAGE_TAR}"
            scp -o StrictHostKeyChecking=no "${IMAGE_TAR}" hz@"$node":"${REMOTE_IMAGE_TAR}"
          done

      - name: Import image on nodes
        run: |
          for node in ${NODES}; do
            echo "Importing image on $node ..."
            ssh -o StrictHostKeyChecking=no hz@"$node" "sudo ctr -n k8s.io images import ${REMOTE_IMAGE_TAR}"
          done

      - name: Clean TAR from nodes
        if: always()
        run: |
          for node in ${NODES}; do
            echo "Removing image tar on $node ..."
            ssh -o StrictHostKeyChecking=no hz@"$node" "rm -f ${REMOTE_IMAGE_TAR}"
          done

      - name: Clean TAR on runner
        if: always()
        run: |
          rm -f "${IMAGE_TAR}"

      - name: Write kubeconfig from secret
        env:
          KUBECONFIG_CONTENT: ${{ secrets.KUBECONFIG }}
        run: |
          mkdir -p /tmp/kube
          printf '%s\n' "$KUBECONFIG_CONTENT" > /tmp/kube/config

      - name: Create namespace if missing
        env:
          KUBECONFIG: /tmp/kube/config
        run: |
          kubectl create namespace "${NAMESPACE}" --dry-run=client -o yaml | kubectl apply -f -

      - name: Apply Auth manifests
        env:
          KUBECONFIG: /tmp/kube/config
        run: |
          kubectl apply -f microservices/AuthApi/k8s/configmap.yaml
          kubectl apply -f microservices/AuthApi/k8s/secret.yaml
          kubectl apply -f microservices/AuthApi/k8s/deployment.yaml
          kubectl apply -f microservices/AuthApi/k8s/service.yaml

      - name: Restart Auth deployment
        env:
          KUBECONFIG: /tmp/kube/config
        run: |
          kubectl rollout restart deployment/"${DEPLOYMENT_NAME}" -n "${NAMESPACE}"
          kubectl rollout status deployment/"${DEPLOYMENT_NAME}" -n "${NAMESPACE}"