name: generate-chart

on:
  push:
    tags:
      - "*"

jobs:
  generate-chart-publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Install packages via apt
        run: |
          apt update --yes
          apt install --yes curl ca-certificates curl gnupg jq s3cmd

      - name: Install helm
        env:
          # renovate: datasource=docker depName=alpine/helm
          HELM_VERSION: "3.19.0"
        run: |
          curl --fail --location --output /dev/stdout --silent --show-error https://get.helm.sh/helm-v${HELM_VERSION}-linux-$(dpkg --print-architecture).tar.gz | tar --extract --gzip --file /dev/stdin
          mv linux-$(dpkg --print-architecture)/helm /usr/local/bin/
          rm --force --recursive linux-$(dpkg --print-architecture) helm-v${HELM_VERSION}-linux-$(dpkg --print-architecture).tar.gz
          helm version

      - name: Install yq
        env:
          YQ_VERSION: v4.45.4 # renovate: datasource=github-releases depName=mikefarah/yq
        run: |
          curl --fail --location --output /dev/stdout --silent --show-error https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}/yq_linux_$(dpkg --print-architecture).tar.gz | tar --extract --gzip --file /dev/stdin
          mv yq_linux_$(dpkg --print-architecture) /usr/local/bin
          rm --force --recursive yq_linux_$(dpkg --print-architecture) yq_linux_$(dpkg --print-architecture).tar.gz
          yq --version

      - name: Install docker-ce via apt
        run: |
          install -m 0755 -d /etc/apt/keyrings
          curl --fail --location --silent --show-error https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
          chmod a+r /etc/apt/keyrings/docker.gpg
          echo "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
          apt update --yes
          apt install --yes python3 python3-pip apt-transport-https docker-ce-cli

      - name: Import GPG key
        id: import_gpg
        uses: https://github.com/crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
          passphrase: ${{ secrets.GPGSIGN_PASSPHRASE }}
          fingerprint: CCCDAD206FCE593128D2C7A22781E520334944DD

      - name: Add Artifacthub.io annotations
        run: |
          NEW_TAG="$(git tag --sort=-version:refname | head --lines 1)"
          OLD_TAG="$(git tag --sort=-version:refname | head --lines 2 | tail --lines 1)"
          .gitea/scripts/add-annotations.sh "${OLD_TAG}" "${NEW_TAG}"

      - name: Print Chart.yaml
        run: cat Chart.yaml

      # Using helm gpg plugin as 'helm package --sign' has issues with gpg2: https://github.com/helm/helm/issues/2843
      - name: package chart
        run: |
          # FIXME: use upstream after https://github.com/technosophos/helm-gpg/issues/1 is solved
          helm plugin install https://github.com/pat-s/helm-gpg
          helm dependency build
          helm package --version "${GITHUB_REF#refs/tags/v}" ./
          mkdir gitea
          mv gitea*.tgz gitea/
          curl --fail --location --output gitea/index.yaml --silent --show-error https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/index.yaml
          helm repo index gitea/ --url https://weyma-s3.infra.dubyatp.xyz/helm-bucket-ea34bc44-ef19-480d-a16a-1e583991f123/charts/ --merge gitea/index.yaml

      - name: Copy files to S3 and clear cache
        run: |
          cat > /root/.s3cfg << EOF
          [default]
          access_key = ${{ secrets.S3_ACCESS_KEY }}
          secret_key = ${{ secrets.S3_SECRET_KEY }}
          host_base = weyma-s3.infra.dubyatp.xyz
          host_bucket = weyma-s3.infra.dubyatp.xyz
          use_https = True
          EOF
          s3cmd sync --recursive --acl-public gitea/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/

  release-gitea:
    needs: generate-chart-publish
    runs-on: ubuntu-latest
    container: docker.io/thegeeklab/git-sv:2.0.9
    steps:
      - name: install tools
        run: |
          apk add -q --update --no-cache nodejs
      - uses: actions/checkout@v6
        with:
          fetch-tags: true
          fetch-depth: 0

      - name: Create changelog
        run: |
          git sv current-version
          git sv release-notes -t ${GITHUB_REF#refs/tags/} -o CHANGELOG.md
          sed -i '1,2d' CHANGELOG.md # remove version
          cat CHANGELOG.md

      - name: Release
        uses: https://github.com/akkuman/gitea-release-action@v1
        with:
          body_path: CHANGELOG.md
          token: "${{ secrets.RELEASE_TOKEN }}"