deploy.yml

name: Generate and Deploy Index

on:
  workflow_dispatch:
    inputs:
      image_tag:
        description: "Docker image tag to deploy"
        required: true
        default: "main"

env:
  POETRY_CACHE_DIR: ~/.cache/pypoetry
  PIPX_BIN_DIR: /usr/local/bin

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Get GHCR package hash
        id: get_package_hash
        run: |
            container_id=$(gh api --paginate -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /orgs/MinBZK/packages/container/task-registry/versions | jq -r '.[] | select(.metadata.container.tags | contains(["${{ inputs.image_tag }}"])) | .name')
            echo "container_id=$container_id" >> "$GITHUB_OUTPUT"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: check correct name
        run: |
            if [ -z "${{steps.get_package_hash.outputs.container_id}}" ]; then
              echo "Variable is empty. Failing the workflow."
              exit 1
            fi

      - uses: actions/checkout@v4
        with:
          repository: 'minbzk/ai-validation-infra'
          ref: main
          token: ${{ secrets.GH_PAT }}

      - name: Configure Git
        run: |
          git config --global user.name "github-actions[bot]"
          git config --global user.email "github-actions[bot]@users.noreply.github.com"


      - name: Make changes to the file
        run: |
          sed -i 's/newTag: .*$/newTag: ${{inputs.image_tag  }}@${{ steps.get_package_hash.outputs.container_id }}/g' apps/task-registry/sandbox/kustomization.yaml
          sed -i 's|minbzk.github.io/version: .*$|minbzk.github.io/version: main|g' apps/task-registry/sandbox/kustomization.yaml
          git add apps/task-registry/sandbox/kustomization.yaml

      - name: show changes
        run: git diff --staged

      - name: push changes
        run: |
          git commit -m "Update task-registry sandbox tag ${{ steps.get_package_hash.outputs.container_id }}"
          git push --force-with-lease
        env:
          GITHUB_TOKEN: ${{ secrets.GH_PAT }}