publish_image.yml

name: publish_image

on:
  push:
    branches:
      - chore/demo-deploy
  workflow_dispatch:
    inputs:
      tag:
        type: string
        description: Image tag
        required: true
        default: latest
      deploy_to_demo:
        type: boolean
        description: Deploy new image to demo?
        default: true

concurrency:
  group: ${{ github.workflow }}

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: aifoundry-org/nekko-api

jobs:
  build-image:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
      attestations: write
      id-token: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          submodules: recursive
      - name: Log in to the container registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Extract metadata for Docker
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: |
            type=raw,value=${{ inputs.tag }}
            type=ref,event=branch
            type=ref,event=workflow_dispatch
            type=sha
      - name: Build and push image
        id: push
        uses: docker/build-push-action@v6
        with:
          context: .
          file: docker/simple/Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}

  deploy-to-demo:
    runs-on: ubuntu-latest
    if: ${{ inputs.tag && secrets.DEMO_USER && secrets.DEMO_HOST && secrets.DEMO_APP_DIR }}
    needs: [build-image]
    permissions:
      contents: read
      packages: read
      attestations: read
      id-token: read
    steps:
      - name: Deploy to demo
        run: >
          ssh ${{ secrets.DEMO_USER }}@${{ secrets.DEMO_HOST }}
          'cd ${{ secrets.DEMO_APP_DIR }} &&
          echo "NEKKO_IMAGE=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}" > .env &&
          sudo docker-compose pull &&
          sudo docker-compose up --force-recreate -d'