.gitlab-ci.yml

include:
  - 'https://codebase.helmholtz.cloud/m-team/tools/ci-voodoo/-/raw/master/ci-include/github-status-sync.yml'
  - "https://codebase.helmholtz.cloud/m-team/tools/ci-voodoo/raw/master/ci-include/pipeline-jobs-publish-to-repo.yml"


variables:
  USE_GORELEASER: "true"
  UPSTREAM_PROJECT: oidc-mytoken/server

image: golang:1.24
stages:
  - build
  - test
  - lint
  - package
  - publish
  - deploy

default:
  tags:
    - linux
  cache:
    paths:
      - .cache


before_script:
  - mkdir -p .cache
  - export GOPATH=${CI_PROJECT_DIR}/.cache

test:
  stage: test
  script:
    - go test -v ./...

test_race:
  stage: test
  script:
    - go test -race -v ./...

staticcheck:
  stage: lint
  before_script:
    - go install honnef.co/go/tools/cmd/staticcheck@latest
  script:
    - staticcheck ./...

vet:
  stage: lint
  script:
    - go vet -structtag=false ./...

build_server:
  stage: build
  script:
    - go build github.com/oidc-mytoken/server/cmd/mytoken-server

build_setup:
  stage: build
  script:
    - go build github.com/oidc-mytoken/server/cmd/mytoken-server/mytoken-setup

package:
  stage: package
  image:
    name: goreleaser/goreleaser
    entrypoint: [ "" ]
  services:
    - docker:dind
#  only:
#    refs:
#      - tags
#      - prerel
  variables:
    GIT_STRATEGY: clone
    GIT_DEPTH: 0
    REPO_HOST: repo.data.kit.edu
    REPO_USER: cicd
    DOCKER_REGISTRY: https://index.docker.io/v1/
  before_script:
    - echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin "$DOCKER_REGISTRY"
  script:
    - |
      [[ "$CI_COMMIT_BRANCH" == "${PREREL_BRANCH_NAME}" ]] && {
          echo "Running set-prerel-version"
          .gitlab-ci-scripts/set-prerel-version.sh
      }
      [[ "$CI_COMMIT_BRANCH" != "${PREREL_BRANCH_NAME}" ]] && {
          [[ "$CI_COMMIT_BRANCH" != "${CI_DEFAULT_BRANCH}" ]] && {
              # we're on a devel branch
              echo "Running set-devel-version"
              .gitlab-ci-scripts/set-prerel-version.sh --devstring dev
          }
      }
      .gitlab-ci-scripts/goreleaser.sh

  artifacts:
    paths:
      - "results/*"
  after_script:
    - curl -d "repo=github.com/oidc-mytoken/server" https://goreportcard.com/checks

deploy-prerel:
  stage: deploy
  only:
    refs:
      - prerel
  before_script:
    - mkdir -p /root/.ssh
    - cp $KNOWN_HOSTS /root/.ssh/known_hosts
    - cp $DEPLOYMENT_SSH_KEY /root/.ssh/id_ed25519 && chmod 0600 /root/.ssh/id_ed25519
  script:
    - ssh -4 mytoken.data.kit.edu