build_and_push.yml

name: Build and Push

on:
  workflow_dispatch:
  push:
    branches:
      - aldudin
    paths-ignore:
      - database/**
      - package.json
      - package-lock.json
      - CHANGELOG.md
      - .conventional-changelog.mjs
      - .release-it.json

env:
  JFROG_REGISTRY: artifacts.developer.gov.bc.ca
  IMAGE_NAME_FRONTEND: sf4a-strdss/strdss-frontend-dev
  IMAGE_NAME_BACKEND: sf4a-strdss/strdss-backend-dev

jobs:
  build-backend:
    runs-on: ubuntu-22.04
    timeout-minutes: 10

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup .NET
        uses: actions/setup-dotnet@v3
        with:
          dotnet-version: '7.0.400'

      - uses: actions/cache@v3
        with:
          path: ~/.nuget/packages
          key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
          restore-keys: |
            ${{ runner.os }}-nuget

      - name: Setup Tools
        uses: ./.github/actions/setup-tools

      - name: Build backend
        run: |
          pwd
          dotnet build ./server/server.sln

      - name: Test backend
        run: dotnet test ./server/server.sln --no-build

     # SonarQube integration for backend
      - name: SonarQube Scan Backend
        uses: sonarsource/sonarcloud-github-action@v2
        env:
          SONAR_HOST_URL: https://sonarcloud.io
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_TEST }}

  build-frontend:
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '18'

      - name: Install Angular CLI
        run: |
          cd ./frontend
          npm install -g @angular/cli

      - name: Install project dependencies
        run: |
          cd ./frontend
          npm install
          
      - name: Build frontend
        run: |
          cd ./frontend
          ng build --configuration=production

      - name: Run frontend tests
        run: |
          cd ./frontend
          ng test --watch=false --progress=false --browsers=ChromeHeadless --code-coverage --source-map=false
        continue-on-error: true
       

     # SonarQube integration frontend
      - name: SonarQube Scan
        uses: sonarsource/sonarcloud-github-action@v2
        env:
          SONAR_HOST_URL: https://sonarcloud.io
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN_TEST }}

  Docker-build-backend:
    needs: [build-backend]
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: actions/checkout@v4

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Build Docker image
      run: cd server && docker build -t strdss-backend-dev -f Dockerfile .

    - name: Tag Docker image
      run: docker tag strdss-backend-dev artifacts.developer.gov.bc.ca/sf4a-strdss/strdss-backend-dev:latest

    - name: Push Docker image to Artifactory
      run: |
        docker login artifacts.developer.gov.bc.ca -u ${{ secrets.JFROG_USERNAME }} -p ${{ secrets.JFROG_PASSWORD }}
        docker push artifacts.developer.gov.bc.ca/sf4a-strdss/strdss-backend-dev:latest

  Docker-build-frontend:
    needs: [build-frontend]
    runs-on: ubuntu-22.04
    timeout-minutes: 10
    permissions:
      contents: read
      packages: write

    steps:
    - uses: actions/checkout@v4

    - name: Setup Tools
      uses: ./.github/actions/setup-tools

    - name: Render style_nonce
      id: render_style_nonce
      run: echo "::set-output name=style_nonce::$(echo -n ${{ github.sha }} | base64)"

    - name: Build Docker image
      run: cd server && docker build -t strdss-frontend-dev -f Dockerfile .

    - name: Tag Docker image
      run: docker tag strdss-frontend-dev artifacts.developer.gov.bc.ca/sf4a-strdss/strdss-frontend-dev:latest

    - name: Push Docker image to Artifactory
      run: |
        docker login artifacts.developer.gov.bc.ca -u ${{ secrets.JFROG_USERNAME }} -p ${{ secrets.JFROG_PASSWORD }}
        docker push artifacts.developer.gov.bc.ca/sf4a-strdss/strdss-frontend-dev:latest


  deploy:
    needs: [Docker-build-frontend, Docker-build-backend]
    runs-on: ubuntu-22.04
    timeout-minutes: 5
    permissions:
      contents: read
    environment:
      name: dev
      url: https://dev-strdata.apps.advsol-ams.3j6z.p1.openshiftapps.com

    steps:
    - uses: actions/checkout@v4

    - name: Authenticate and set context
      uses: redhat-actions/oc-login@v1.3
      with:
        openshift_server_url: ${{ secrets.OPENSHIFT_SERVER_AMS }}
        openshift_token: ${{ secrets.OPENSHIFT_TOKEN_AMS }}
        namespace: f4a30d-dev
        insecure_skip_tls_verify: true

    - name: Log in to JFrog Artifactory
      uses: docker/login-action@v1
      with:
        registry: artifacts.developer.gov.bc.ca
        username: ${{ secrets.JFROG_USERNAME }}
        password: ${{ secrets.JFROG_PASSWORD }}

    - name: Deploy apps with Helm chart
      run: |
        docker login artifacts.developer.gov.bc.ca -u ${{ secrets.JFROG_USERNAME }} -p ${{ secrets.JFROG_PASSWORD }}
        docker pull artifacts.developer.gov.bc.ca/sf4a-strdss/strdss-backend-dev:latest
        make upgrade \
        NAMESPACE=f4a30d-dev \
        NAME=strdss-dev \
        ENV_NAME=dev \
        IMAGE_TAG_FRONTEND=latest \
        IMAGE_TAG_BACKEND=latest \
      working-directory: ./helm/main