name: Build and Deploy to Kubernetes

on:
  push:
    branches:
      - kub-stage

env:
  REGISTRY: 194.5.195.53:30080
  IMAGE_NAME: admin/cms

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    container:
      image: docker:latest
      options: --privileged
    steps:
      - name: Install dependencies
        run: |
          apk add --no-cache git curl
          
          # Install kubectl with fixed version (no need to fetch stable.txt)
          KUBECTL_VERSION="v1.31.0"
          curl -LO "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
          chmod +x kubectl
          mv kubectl /usr/local/bin/

      - name: Start Docker daemon with insecure registry
        run: |
          mkdir -p /etc/docker
          cat > /etc/docker/daemon.json << 'DAEMON'
          {
            "insecure-registries": ["194.5.195.53:30080", "194.5.195.53:32500", "gitea-svc:3000"],
            "dns": ["0.0.0.0"]
          }
          DAEMON
          
          # بدون اینترنت - فقط از cached images
          dockerd &
          for i in $(seq 1 30); do
            docker info >/dev/null 2>&1 && break || sleep 2
          done
          docker info
          
          # بررسی وجود cached images
          echo "📊 Available Docker images:"
          docker images --format "table {{.Repository}}:{{.Tag}}\t{{.Size}}" | head -20
          
          echo ""
          if docker images | grep -q "mcr.microsoft.com/dotnet"; then
            echo "✅ .NET images found"
          else
            echo "⚠️  WARNING: .NET images not found - build may fail"
          fi
    
      - name: Checkout code
        run: |
          git clone --depth 1 --branch kub-stage http://gitea-svc:3000/admin/CMS.git .
          git log -1 --format="%H %s"
      - name: Build Docker Image
        run: |
          # استفاده از cached base images (بدون دانلود)
          DOCKER_BUILDKIT=0 docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }} \
                       -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest \
                       .

      - name: Push to Registry
        run: |
          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u admin --password-stdin
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
          
      - name: Deploy to Kubernetes
        run: |
          # Setup kubeconfig
          mkdir -p ~/.kube
          echo "${{ secrets.KUBECONFIG }}" | base64 -d > ~/.kube/config
          
          # Restart deployment to pull new image
          kubectl rollout restart deployment/cms || echo "Deployment doesn't exist yet"
          
          # Wait for rollout to complete
          kubectl rollout status deployment/cms --timeout=5m || echo "Deployment rollout pending"