ci-cd-kotlin.yml

name: ci-cd-kotlin.yml

permissions:
  contents: read
  packages: read

on:
  workflow_call:
    inputs:
      uploadJarArtifact:
        required: false
        type: boolean
        default: false
      jarArtifactName:
        required: false
        type: string
      jarArtifactPath:
        required: false
        type: string
      performRelease:
        required: false
        type: boolean
        default: false
      runTestsInsideDocker:
        required: false
        type: boolean
        default: true
      hasIntegrationTests:
        required: false
        type: boolean
        default: false

env:
  IMAGE_NAME_MIXED_CASE: "${{ github.repository }}"

jobs:
  build-check-test-push:
    name: Build, check, test, push
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          clean: 'true'
          fetch-depth: 2

      # Required since custom scripts from /scripts are being used
      - name: Resolve shared workflow ref
        run: |
          set -euo pipefail
          SHARED_WORKFLOW_REF=$(grep -roh \
            'transitdata-shared-workflows/.github/workflows/[^@]*@[^ "'\'']*' \
            "${GITHUB_WORKSPACE}/.github/workflows/" 2>/dev/null \
            | sed 's/.*@//' | head -1 || true)

          if [[ -z "${SHARED_WORKFLOW_REF}" ]]; then
            echo "::warning::Could not detect shared workflow ref from caller workflows; falling back to main"
            SHARED_WORKFLOW_REF="main"
          fi

          echo "Resolved shared workflow ref: ${SHARED_WORKFLOW_REF}"
          echo "SHARED_WORKFLOW_REF=${SHARED_WORKFLOW_REF}" >> "$GITHUB_ENV"

      - name: Checkout shared workflow scripts
        uses: actions/checkout@v4
        with:
          repository: HSLdevcom/transitdata-shared-workflows
          ref: ${{ env.SHARED_WORKFLOW_REF }}
          path: .shared-workflows

      - name: Setup JDK
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '11'
          cache: 'gradle'

      - name: Validate Java version consistency
        env:
          JAVA_TOOL_OPTIONS: ""
        run: python3 "${GITHUB_WORKSPACE}/.shared-workflows/scripts/validate_java_version_consistency.py"

      - name: Check code format and lint
        run: ./gradlew spotlessCheck
        env:
          GITHUB_ACTOR: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Run unit tests inside Docker
        if: ${{ inputs.runTestsInsideDocker }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GITHUB_ACTOR_ARG: ${{ github.actor }}
          DOCKER_BUILDKIT: "1"
        run: |
          cat > /tmp/Dockerfile.test << DOCKERFILE
          # syntax=docker/dockerfile:1
          # check=error=true
          FROM ${TEST_BASE_IMAGE}
          WORKDIR /usr/app
          ARG GITHUB_ACTOR=github-actions
          COPY . .
          RUN --mount=type=secret,id=github_token \
              export GITHUB_TOKEN="\$(cat /run/secrets/github_token)" && \
              export GITHUB_ACTOR="\$GITHUB_ACTOR" && \
              ./gradlew test --stacktrace --no-daemon
          DOCKERFILE
          docker build \
            --secret id=github_token,env=GITHUB_TOKEN \
            --build-arg "GITHUB_ACTOR=${GITHUB_ACTOR_ARG}" \
            -f /tmp/Dockerfile.test \
            .

      - name: Run unit tests
        if: ${{ inputs.hasIntegrationTests == false }}
        env:
          GITHUB_ACTOR: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew test jacocoTestReport --stacktrace

      - name: Run unit tests and integration tests
        if: ${{ inputs.hasIntegrationTests }}
        env:
          GITHUB_ACTOR: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew test integrationTest jacocoTestReport --stacktrace

      - name: Upload coverage reports to Codecov
        uses: codecov/codecov-action@v5
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          fail_ci_if_error: true
          verbose: true

      - name: Upload test results to Codecov
        if: ${{ !cancelled() }}
        uses: codecov/codecov-action@v5
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          fail_ci_if_error: true
          report_type: test_results

      - name: Upload .jar artifact
        if: ${{ inputs.uploadJarArtifact }}
        uses: actions/upload-artifact@v4
        with:
          name: ${{ inputs.jarArtifactName }}
          path: ${{ inputs.jarArtifactPath }}

      - name: Build artifact
        run: ./gradlew build -x test
        env:
          GITHUB_ACTOR: ${{ github.actor }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Lowercase Docker Image Name
        run: |
          echo "IMAGE_NAME=${IMAGE_NAME_MIXED_CASE,,}" >> "${GITHUB_ENV}"
      - name: Build Docker Image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: 'false'
          tags: 'hsldevcom/${{ env.IMAGE_NAME }}:${{ github.sha }}'

      - name: Check if perform release
        id: perform_release
        run: |
          PERFORM_RELEASE=false
          if [[ "${GITHUB_REF}" == "refs/heads/main" || "${GITHUB_REF}" == "refs/heads/develop" || "${GITHUB_REF}" == "refs/heads/aks-dev" ]]; then
            PERFORM_RELEASE=true
          elif [[ "${GITHUB_REF}" == refs/tags/* ]]; then
            PERFORM_RELEASE=true
          elif [[ "${{ inputs.performRelease }}" == "true" ]]; then
            PERFORM_RELEASE=true
          fi
          echo "PERFORM_RELEASE=${PERFORM_RELEASE}" >> $GITHUB_ENV
          echo "Perform release: ${PERFORM_RELEASE}"

      - name: Setup Docker Buildx
        if: env.PERFORM_RELEASE == 'true'
        uses: docker/setup-buildx-action@v3

      - name: Extract Docker metadata
        if: env.PERFORM_RELEASE == 'true'
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.IMAGE_NAME }}
          tags: |
            type=ref,event=branch
            type=sha
            type=semver,pattern={{version}}
          labels: |
            org.opencontainers.image.title=${{ env.IMAGE_NAME }}
            org.opencontainers.image.vendor=hsldevcom

      - name: Login to Docker Hub
        if: env.PERFORM_RELEASE == 'true'
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}

      - name: Build & Push Docker image
        if: env.PERFORM_RELEASE == 'true'
        uses: docker/build-push-action@v6
        with:
          context: .
          push: ${{ env.PERFORM_RELEASE }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}