rollout-dashboard.yaml

name: Rollout dashboard
on:
  push:
    branches:
      - main
    paths:
      - rollout-dashboard/**
      - .github/**
  pull_request:
    paths:
      - rollout-dashboard/**
      - .github/**

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  test-backend:
    name: Test rollout dashboard backend
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    steps:
      - name: Set month and year for cache key
        id: date
        run: echo "date=$(date +'%Y-%m')" >> "$GITHUB_OUTPUT"
      - uses: actions/checkout@v4
      - name: Move backend files to source root
        run: mv -f rollout-dashboard/server/* .
      - name: Cache Cargo stuff once a month for faster execution
        uses: actions/cache@v3
        with:
          key: cargo-build-deps-${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}-${{ steps.date.outputs.date }}
          path: |
            ~/.cargo/bin/
            ~/.cargo/registry/index/
            ~/.cargo/registry/cache/
            ~/.cargo/git/db/
            target/debug/build
            target/debug/deps
            target/debug/.fingerprint
      - name: Set up Rust toolchain
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
      - name: Security audit
        uses: actions-rs/audit-check@v1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: cargo machete
        run: |
          set -e
          which cargo-machete || cargo install cargo-machete
          cargo machete
      - name: cargo clippy
        uses: actions-rs/cargo@v1
        with:
          command: clippy
      - name: cargo test
        uses: actions-rs/cargo@v1
        with:
          command: test
  test-frontend:
    if: github.event_name == 'pull_request'
    name: Test rollout dashboard frontend
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20.x"
      - name: Move frontend files to source root
        run: mv -f rollout-dashboard/frontend/* .
      - name: prepare NPM for CI
        run: npm ci
      - name: Security audit (optional for now)
        run: npm audit || true
      - name: build frontend
        run: npm run build
      - name: run tests on frontend
        run: npm run check
  build-rollout-dashboard-container:
    name: Build rollout dashboard container
    if: github.event_name == 'pull_request'
    needs: [test-backend, test-frontend]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: docker/metadata-action@v5
        id: metadata
        with:
          images: ghcr.io/${{ github.repository }}/cache
          tags: |
            type=sha,format=long
      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - uses: int128/kaniko-action@v1
        name: Create rollout-dashboard container
        with:
          push: true
          tags: ${{ steps.metadata.outputs.tags }}
          labels: ${{ steps.metadata.outputs.labels }}
          cache: true
          cache-repository: ghcr.io/${{ github.repository }}/cache
          context: rollout-dashboard
  publish-rollout-dashboard-container:
    name: Publish rollout dashboard container
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: docker/metadata-action@v5
        id: metadata
        with:
          images: ghcr.io/${{ github.repository }}/rollout-dashboard
          tags: |
            type=schedule
            type=ref,event=branch
            type=ref,event=tag
            type=ref,event=pr
            type=sha,format=long
      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - uses: int128/kaniko-action@v1
        name: Create and publish rollout-dashboard container
        with:
          push: true
          tags: ${{ steps.metadata.outputs.tags }}
          labels: ${{ steps.metadata.outputs.labels }}
          cache: true
          cache-repository: ghcr.io/${{ github.repository }}/cache
          context: rollout-dashboard