# Reusable workflow: Bump deploy-timestamp in wectrl-k8s-cluster repo (GitOps deploy)
# Usage: uses: wectrl-net/ci-templates/.gitea/workflows/deploy-k8s.yaml@main
#
# With environment-based mutable tags (:prod, :staging, :dev), the image tag in
# k8s manifests stays constant. To trigger a rollout after pushing a new image,
# this workflow bumps the deploy-timestamp pod annotation, which causes ArgoCD to
# detect a diff and sync the deployment.
name: Deploy to K8s (GitOps)

on:
  workflow_call:
    inputs:
      image-name:
        description: "Full image name (e.g. git.wectrl.net/wectrl-net/my-service) — used in commit message for traceability"
        required: true
        type: string
      deploy-paths:
        description: "Space-separated paths to deployment manifests in the k8s cluster repo"
        required: true
        type: string
      service-name:
        description: "Service name for commit message (e.g. h1per-pms)"
        required: true
        type: string
      k8s-repo:
        description: "K8s cluster repo (org/repo)"
        required: false
        type: string
        default: "wectrl-net/wectrl-k8s-cluster"
    secrets:
      GIT_USER:
        required: true
      GIT_TOKEN:
        required: true

jobs:
  deploy:
    name: Update k8s Cluster Repo
    runs-on: ubuntu-latest
    if: gitea.ref == 'refs/heads/main'
    steps:
      - name: Install yq
        run: |
          set -euo pipefail
          wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.1/yq_linux_amd64
          chmod +x /usr/local/bin/yq

      - name: Bump deploy-timestamp in cluster repo
        run: |
          set -euo pipefail

          SHA="${{ gitea.sha }}"
          SHORT_SHA="${SHA:0:7}"
          TIMESTAMP="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
          RUN_URL="${{ gitea.server_url }}/${{ gitea.repository }}/actions/runs/${{ gitea.run_id }}"

          git clone https://${{ secrets.GIT_USER }}:${{ secrets.GIT_TOKEN }}@git.wectrl.net/${{ inputs.k8s-repo }}.git
          cd wectrl-k8s-cluster

          git config user.email "ci@wectrl.net"
          git config user.name "Gitea CI"

          for DEPLOY_PATH in ${{ inputs.deploy-paths }}; do
            yq -i '.spec.template.metadata.annotations.deploy-timestamp = "'"${TIMESTAMP}"'"' \
              "${DEPLOY_PATH}"
            git add "${DEPLOY_PATH}"
          done

          if git diff --staged --quiet; then
            echo "No changes to commit"
          else
            git commit -m "deploy: ${{ inputs.service-name }} sha-${SHORT_SHA}

Timestamp: ${TIMESTAMP}
Source: ${SHA}
Run: ${RUN_URL}"
            git push origin main
            echo "Cluster repo updated — ArgoCD will sync within ~3 min"
          fi