name: Deploy the Helm Chart

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  # "Build" from the source code
  build:  
    runs-on: self-hosted
    outputs:
      chart-name: ${{ steps.update-helm-repo.outputs.CHART_NAME }}
    steps:
    # Get the source code from the repository
    - name: Checkout repository
      uses: actions/checkout@v4
    
    # "Build"/package the source code int the appropriate format (Helm chart etc...)
    - name: Update Helm Repository (if needed)
      id: update-helm-repo
      run: |
        # Parse the chart name from the Chart.yaml
        CHART_NAME=$(yq '.name' Chart.yaml)
        CHART_NAME=${CHART_NAME#\"}  # Remove leading quote
        CHART_NAME=${CHART_NAME%\"}  # Remove trailing quote
        echo "CHART_NAME=$CHART_NAME" >> $GITHUB_OUTPUT

        echo "Chart Name: $CHART_NAME"

        # Note, this depends on the [Harbor Helm Index](https://git.bridgemanaccessible.ca/Bridgeman-Accessible/harbor-helm-index) pretty heavily
        # In particular, that tool allows us to treat what is an OCI registry as a Helm repository (which includes using `helm search repo`)
        helm repo add BridgemanAccessible https://helm.bridgemanaccessible.ca
            
        # Check if the chart is already in the repository or not
        REMOTE_CHART_WORK_OUTPUT=$(helm search repo BridgemanAccessible/$CHART_NAME 2>/dev/null || echo "")
        if [ -n "$REMOTE_CHART_WORK_OUTPUT" ]; then
          # The chart is already in the repository, so we need to check if the version is the same or not
          echo "Chart already exists in the repository. Checking version..."
        
          IFS=' ' read -r -a REMOTE_VERSIONS <<< $(helm search repo BridgemanAccessible/$CHART_NAME --output json | jq '.[].version | @sh')
        
          echo "Remote Chart Versions: ${REMOTE_VERSIONS[@]}"
        else
          # The chart is not in the repository, so we'll need to add it
          echo "Chart not found in the repository. Adding it..."
        
          # Set a blank value so that it WON'T match the local version
          IFS=' ' read -r -a REMOTE_VERSIONS <<< ""
        fi

        # Just to keep things clean/safe/etc... remove the repo
        helm repo remove BridgemanAccessible
            
        # Get the local version from the Chart.yaml file
        LOCAL_VERSION=$(yq '.version' Chart.yaml)
        LOCAL_VERSION=${LOCAL_VERSION#\"}  # Remove leading quote
        LOCAL_VERSION=${LOCAL_VERSION%\"}  # Remove trailing quote
        echo "Local Chart Version: $LOCAL_VERSION"

        has_match='false'
        if [ ${#REMOTE_VERSIONS[@]} -gt 0 ]; then
          # Loop through the remote tags and check if any of them match the local version
          for REMOTE_VERSION in ${REMOTE_VERSIONS[@]}; do
            REMOTE_VERSION=${REMOTE_VERSION#\'}  # Remove leading quote
            REMOTE_VERSION=${REMOTE_VERSION%\'}  # Remove trailing quote
        
            # Check if the remote tag is the same as the local tag
            if [ "$REMOTE_VERSION" == "$LOCAL_VERSION" ]; then
              echo "Remote version matches local version!"
              has_match='true'
              break
            fi
          done
        fi
        
        # If the versions match, we want to increment the chart's patch version
        if [ "has_match" ]; then
          echo "Versions match!"
          
          # Increment the patch version of the local version (Ex. 1.0.0 -> 1.0.1)
          IFS='.' read -r major minor patch <<< "$LOCAL_VERSION"
          patch=$((patch + 1))
          NEW_LOCAL_VERSION="$major.$minor.$patch"
        
          echo "New Local Version: $NEW_LOCAL_VERSION"
          echo "Committing new chart version change..."
        
          sed -i "s|version: \"$LOCAL_VERSION\"|version: \"$NEW_LOCAL_VERSION\"|g" Chart.yaml
        
          LOCAL_VERSION=$NEW_LOCAL_VERSION
        
          # Update remote URL to use the GITHUB_TOKEN for authentication
          git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@git.bridgemanaccessible.ca/${{ github.repository }}.git
        
          # Setup git user details for committing the version change and tag
          git config user.name "Forgejo Actions"
          git config user.email "actions@git.bridgemanaccessible.ca"
              
          # Commit the version change to the `package.json` file
          git add Chart.yaml
          git commit -m "[Forgejo Actions] Update Helm chart version to $(yq -r '.version' Chart.yaml)"
              
          # Push the changes to the repository
          git push origin HEAD:main
        else
          echo "Versions do not match!"
        fi

        #helm package .
        #helm push ./$CHART_NAME-$LOCAL_VERSION.tgz oci://${{ secrets.REPOSITORY_HOSTNAME }}/helm  
  
  # Deploy to our environment (stagging cluster)
  #deploy:
  #  runs-on: self-hosted
  #  needs: build
  #  outputs:
  #    backup-created: ${{ steps.backup.outputs.created }}
  #    restore-time: ${{ steps.deploy-helm-chart.outputs.RESTORE_TIME }}
  #  env:
  #    NAMESPACE: custom-vault
  #    RELEASE_NAME: custom-vault
  #    CHART_NAME: ${{ needs.build.outputs.chart-name }}
  #  steps:
  #  # Deploy the resources to the cluster
  #  - name: Deploy Helm Chart
  #    id: deploy-helm-chart
  #    run: |
  #      FILLED_VALUES_FILE="values.filled.yaml"
  #
  #      # Download a filled version of the `values.yaml` file from a secure location
  #      DOWNLOAD_FILE=$(curl -sSL https://secure-storage.bridgemanaccessible.ca/services-dashboard/values.filled.yaml?token=${{ secrets.SECURE_STORAGE_TOKEN }} -o $FILLED_VALUES_FILE || echo "Failed to download filled values file.")
  #      if [ "$DOWNLOAD_FILE" == "Failed to download filled values file." ]; then
  #        echo "Error: $DOWNLOAD_FILE"
  #        exit 1
  #      fi
  #
  #      # Parse the chart name from the Chart.yaml
  #      CHART_NAME=${{ env.CHART_NAME }}
  #      echo "Chart Name: $CHART_NAME"
  #
  #      # Can run `k8s-deploy --help` if you want to see all the options available
  #      k8s-deploy \
  #        --namespace ${{ env.NAMESPACE }} \
  #        --release-name ${{ env.RELEASE_NAME }} \
  #        --filled-values-file $FILLED_VALUES_FILE \
  #        --chart-name $CHART_NAME \
  #        --rwx-volumes vault-role-vars