name: Deploy IFT (admin)

on:
  workflow_run:
    workflows: [CI]
    types: [completed]
    branches: [master, main]
  workflow_dispatch:

concurrency:
  group: eventhub-frontadmin-deploy-ift
  cancel-in-progress: false

jobs:
  deploy-ift-admin:
    if: |
      github.event_name == 'workflow_dispatch' ||
      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - name: Compute image tag
        id: meta
        run: |
          set -euo pipefail
          if [ "${{ github.event_name }}" = "workflow_run" ]; then
            SHA="${{ github.event.workflow_run.head_sha }}"
          else
            SHA="${GITHUB_SHA}"
          fi
          echo "tag=sha-${SHA:0:12}" >> "$GITHUB_OUTPUT"

      - name: Deploy admin on IFT via SSH
        uses: appleboy/ssh-action@v0.1.5
        with:
          host: ${{ secrets.IFT_SSH_HOST }}
          username: ${{ secrets.IFT_SSH_USER }}
          key: ${{ secrets.IFT_SSH_PRIVATE_KEY }}
          script: |
            export REGISTRY_USER='${{ secrets.REGISTRY_USER }}'
            export REGISTRY_PASSWORD='${{ secrets.REGISTRY_PASSWORD }}'
            bash /opt/eventhub-ift/devops/scripts/deploy-service.sh ift admin ${{ steps.meta.outputs.tag }}