# Build and push container images to Artifact Registry
name: Build & Push Images

on:
  push:
    branches: [main, develop]
    paths:
      - "trading-platform/**"
      - "!trading-platform/infra/**"

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  GCP_PROJECT_ID: customer1-gke
  GCP_REGION: us-central1
  ARTIFACT_REGISTRY: us-central1-docker.pkg.dev/${{ env.GCP_PROJECT_ID }}/trading

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@v4

      - name: Authenticate to Google Cloud
        uses: google-github-actions/auth@v2
        with:
          workload_identity_provider: projects/${{ env.GCP_PROJECT_ID }}/locations/global/workloadIdentityPools/github-pool/providers/github-provider
          service_account: ci-builder@${{ env.GCP_PROJECT_ID }}.iam.gserviceaccount.com

      - name: Set up Cloud SDK
        uses: google-github-actions/setup-gcloud@v2

      - name: Configure Docker for Artifact Registry
        run: gcloud auth configure-docker ${{ env.GCP_REGION }}-docker.pkg.dev --quiet

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Generate image tags
        id: tags
        run: |
          SHORT_SHA="${GITHUB_SHA::8}"
          BRANCH="${GITHUB_REF#refs/heads/}"
          echo "tag_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
          echo "tag_branch=${BRANCH}" >> $GITHUB_OUTPUT
          echo "tag_latest=${BRANCH}" >> $GITHUB_OUTPUT

      # ---- Execute Service ----
      - name: Build and push execute-service
        uses: docker/build-push-action@v5
        with:
          context: trading-platform/execute-service
          file: trading-platform/infra/dockerfiles/execute-service/Dockerfile
          push: true
          tags: |
            ${{ env.ARTIFACT_REGISTRY }}/execute-service:${{ steps.tags.outputs.tag_sha }}
            ${{ env.ARTIFACT_REGISTRY }}/execute-service:${{ steps.tags.outputs.tag_branch }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      # ---- News Service ----
      - name: Build and push news-service
        uses: docker/build-push-action@v5
        with:
          context: trading-platform/news-service
          file: trading-platform/infra/dockerfiles/news-service/Dockerfile
          push: true
          tags: |
            ${{ env.ARTIFACT_REGISTRY }}/news-service:${{ steps.tags.outputs.tag_sha }}
            ${{ env.ARTIFACT_REGISTRY }}/news-service:${{ steps.tags.outputs.tag_branch }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      # ---- Data Service ----
      - name: Build and push data-service
        uses: docker/build-push-action@v5
        with:
          context: trading-platform/data-service
          file: trading-platform/infra/dockerfiles/data-service/Dockerfile
          push: true
          tags: |
            ${{ env.ARTIFACT_REGISTRY }}/data-service:${{ steps.tags.outputs.tag_sha }}
            ${{ env.ARTIFACT_REGISTRY }}/data-service:${{ steps.tags.outputs.tag_branch }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      # ---- Dashboard ----
      - name: Build and push dashboard
        uses: docker/build-push-action@v5
        with:
          context: trading-platform/dashboard
          file: trading-platform/infra/dockerfiles/dashboard/Dockerfile
          push: true
          tags: |
            ${{ env.ARTIFACT_REGISTRY }}/dashboard:${{ steps.tags.outputs.tag_sha }}
            ${{ env.ARTIFACT_REGISTRY }}/dashboard:${{ steps.tags.outputs.tag_branch }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Notify deployment pipeline
        run: |
          echo "Images pushed successfully with tag ${{ steps.tags.outputs.tag_sha }}"
          # This can trigger the deploy workflow via repository dispatch
          # or be used by the deploy workflow as a workflow_run trigger