image.yml

name: Docker Image

on:
  push:
    branches:
      - main

jobs:
  build-and-push-image:
    name: "Synchro Image"
    runs-on: ubuntu-latest

    permissions:
      contents: read
      id-token: write

    steps:
      - uses: actions/checkout@v4

      - name: GCP Workload Identity Auth
        id: auth
        uses: google-github-actions/auth@v2
        with:
          workload_identity_provider: projects/791837997629/locations/global/workloadIdentityPools/github-actions-pool/providers/gha-id-pool-provider
          service_account: github-actions@surface-420608.iam.gserviceaccount.com

      - name: "Auth to AR"
        run: gcloud auth configure-docker us-east4-docker.pkg.dev

      - name: Inspect GOOGLE_GHA_CREDS_PATH JSON
        run: |
          if [ -f "$GOOGLE_GHA_CREDS_PATH" ]; then
            echo "Found the credentials file at $GOOGLE_GHA_CREDS_PATH"
            cat $GOOGLE_GHA_CREDS_PATH | jq .
          else
            echo "No credentials file found at $GOOGLE_GHA_CREDS_PATH"
          fi

      - name: "Build Docker Image"
        run: |
          docker build . \
            -f Dockerfile \
            -t us-east4-docker.pkg.dev/surface-420608/stable/synchro-kotlin:${GITHUB_SHA::6} \
            -t us-east4-docker.pkg.dev/surface-420608/stable/synchro-kotlin:latest

      - name: "Push Docker Image to AR"
        run: |
          docker push us-east4-docker.pkg.dev/surface-420608/stable/synchro-kotlin:${GITHUB_SHA::6}
          docker push us-east4-docker.pkg.dev/surface-420608/stable/synchro-kotlin:latest