name: Build & Deploy Go API

on:
  push:
    branches: [main]

env:
  REGISTRY: 192.168.1.212:1180/library

jobs:
  build:
    runs-on: self-hosted
    steps:
      - name: Install build tools
        run: apk add --no-cache curl git docker-cli jq 2>/dev/null || true

      - name: Clone + prepare
        run: |
          WORK=/root/.cache/demo-go-api
          rm -rf "$WORK"
          mkdir -p "$WORK"
          cd "$WORK"
          git clone http://joe:${GITEA_TOKEN}@192.168.1.212:3000/joe/demo-go-api.git .

      - name: Login to Harbor
        run: docker login 192.168.1.212:1180 -u admin -p "$HARBOR_PASSWORD"
        env:
          HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}

      - name: Build & push image
        run: |
          cd /root/.cache/demo-go-api
          SHORT=${GITHUB_SHA::8}
          TAG="${REGISTRY}/demo-go-api:${SHORT}"
          LATEST="${REGISTRY}/demo-go-api:latest"
          docker build --build-arg VERSION=${SHORT} -t "${TAG}" -t "${LATEST}" .
          docker push "${TAG}"
          docker push "${LATEST}"
          echo "✓ Pushed ${TAG}"
        env:
          GITHUB_SHA: ${{ github.sha }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          REGISTRY: ${{ env.REGISTRY }}

      - name: Update ArgoCD
        run: |
          SHORT=${GITHUB_SHA::8}
          # Use kubectl to update ArgoCD image tag directly (no git push needed)
          PATCH=$(jq -n --arg tag "$SHORT" --arg reg "$REGISTRY" \
            '{"spec":{"source":{"helm":{"parameters":[{"name":"image.registry","value":$reg},{"name":"image.tag","value":$tag}]}}}}')
          kubectl -n cicd patch application demo-go-api --type=merge -p "$PATCH"
          echo "✓ ArgoCD updated with tag ${SHORT}"
        env:
          GITHUB_SHA: ${{ github.sha }}
          REGISTRY: ${{ env.REGISTRY }}