build-backend.yml

name: Build Backend

on:
  push:
    branches: [ "main" ]
    paths:
      - "applications/backend/**"

env:
  PROJECT_ID: ${{ secrets.GKE_PROJECT }}
  GAR_LOCATION: us-central1

jobs:
  setup-build-publish:
    name: Setup, Build, Publish
    runs-on: ubuntu-latest
    environment: production

    permissions:
      contents: 'write'
      id-token: 'write'

    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        token: ${{ secrets.PAT_TOKEN }}

      # Authentication via credentials json
    - id: 'auth'
      uses: 'google-github-actions/auth@v1'
      with:
        credentials_json: '${{ secrets.GCP_CREDENTIALS }}'

    - name: Docker configuration
      run: gcloud auth configure-docker ${{ env.GAR_LOCATION }}-docker.pkg.dev --quiet
      
    - name: Set up Taskfile
      uses: arduino/setup-task@v1.0.3

    - name: Build
      run: task build-backend-image tag="$GITHUB_SHA"

    # Push the Docker image to Google Artifact Registry
    - name: Publish
      run: task push-backend-image tag="$GITHUB_SHA"

    - name: Replace Backend Image Tag
      run: sed -i "s/\(&backendImageTag\) [^[:space:]]*/\1 $GITHUB_SHA/g" infrastructure/k8s/folio-feed-helm/values.yaml

    - name: Commit the Changes
      run: |
        git config user.name "Github Actions"
        git config user.email github-actions@github.com
        git diff
        git add infrastructure/k8s/folio-feed-helm/values.yaml
        git commit -m "backend image update: $GITHUB_SHA"
        git push origin main