build-authentik.yml

name: Build-Authentik
run-name: Build Authentik for ${{ inputs.environment }} environment from ${{ github.ref_name }} branch

permissions:
  id-token: write
  contents: read

on:
  workflow_dispatch:
    inputs:
      environment:
        description: Select the Environment for Building the Image
        required: true
        options:
          - dev
          - dev2
          - ci
          - test
          - staging
        type: choice
      with-sbom:
        type: boolean
        default: true
        description: Build with SBOM?
  workflow_call:
    inputs:
      environment:
        type: string
        required: true
jobs:
  # Build-Authentik:
  #   name: Build Authentik Image
  #   runs-on: ubuntu-latest
  #   environment: ${{ inputs.environment }}
  #   env:
  #     ENVIRONMENT: ${{ inputs.environment }}
  #   steps:
  #     - name: Checkout
  #       uses: actions/checkout@v4

  #     - name: Configure AWS credentials
  #       uses: aws-actions/configure-aws-credentials@v4
  #       with:
  #         role-to-assume: ${{ secrets.SCRIBE2_GITHUB_ROLE }}
  #         role-session-name: Github
  #         aws-region: ${{ secrets.AWS_REGION }}

  #     - name: Login to Amazon ECR
  #       id: login-ecr
  #       uses: aws-actions/amazon-ecr-login@v2
  #       with:
  #         mask-password: 'true'

  #     - name: Build, Tag and Push Authentik Image to Amazon ECR
  #       id: build-image
  #       run: |
  #         DOCKER_BUILDKIT=1 docker build -t ${{ steps.login-ecr.outputs.registry }}/authentik:${{ github.sha }} .
  #         docker push ${{ steps.login-ecr.outputs.registry }}/authentik:${{ github.sha }}

  Update-Environment-Variable:
    if: ${{ always() && (needs.Build-Authentik.result == 'success') }}
    name: Update Environment Variable with Docker Image Tag
    runs-on: ubuntu-latest
    # needs: [Build-Authentik]
    steps:
      - name: Update Environment Variable
        run: |
          ENV=${{ inputs.environment }}
          curl -X PATCH \
            -H "Accept: application/vnd.github+json" \
            -H "Authorization: Bearer ${{ secrets.K8S_GH_TOKEN }}" \
            -H "X-GitHub-Api-Version: 2022-11-28" \
            "https://api.github.com/repos/scribe-security/scribe2/actions/variables/AUTHENTIK_TAG_${ENV^^}" \
            -d '{"name":"AUTHENTIK_TAG_'${ENV^^}'","value":"${{ github.sha }}"}'