main.yml

# Runs when main branch is updated.
# Creates docker image & publishes to docker packages
# Uses ansible to trigger a redeployment of the latest code
name: Main Branch Build and Deploy
on:
  push:
    branches:
      - main

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: 25
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v4.5.2
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Run PR tests
        run: make check
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: build and push docker containers
        run: make docker-push

  deploy:
    runs-on: ubuntu-latest
    needs: build

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
      - name: Load SSH private key into ssh-agent
        uses: webfactory/ssh-agent@v0.9.1
        with:
          ssh-private-key: ${{ secrets.DEPLOY_SSH_PRIVATE_KEY }}
      - name: Install uv
        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          python-version: "3.12"
      - name: Cache Ansible Galaxy collections
        uses: actions/cache@v4
        with:
          path: ~/.ansible/collections
          key: ansible-collections-${{ hashFiles('deploy/ansible/requirements.yml') }}
      - name: Install Ansible and dependencies
        run: |
          uv tool install --with linode_api4 --with-executables-from ansible-core,ansible-lint ansible
          ansible-galaxy collection install -r deploy/ansible/requirements.yml
      - name: Deploy
        env:
          LINODE_ACCESS_TOKEN: ${{ secrets.LINODE_READ_ONLY_TOKEN }}
        run: SSH_USER=deploy make deploy