deploy.yml

name: Deploy Worklow

on:
  push:
    tags:
    - v*

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}

jobs:
  deploy:
    runs-on: ubuntu-latest

    # Sets the permissions granted to the `GITHUB_TOKEN` for the actions in this job.
    permissions:
      contents: read
      packages: write

    steps:
    - name: Checkout repository
      uses: actions/checkout@v6

    - name: Log in to the Container registry
      uses: docker/login-action@v4
      with:
        registry: ${{ env.REGISTRY }}
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    - name: Log in to the Helm OCI registry
      run: |
        echo ${{ secrets.GITHUB_TOKEN }} | helm registry login ${{ env.REGISTRY }} -u  ${{ github.actor }} --password-stdin

    - name: Extract metadata (tags, labels) for Docker
      id: meta
      uses: docker/metadata-action@v5
      with:
        images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

    - name: Build and push
      id: push
      uses: docker/build-push-action@v6
      with:
        context: .
        push: true
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}

    - name: Package and push Helm chart
      working-directory: helm
      run: |
        HELM_VERSION="$(echo "${{ github.ref_name }}" | sed 's/^v//')"
        helm package designate-certmanager-webhook --version "$HELM_VERSION" --app-version ${{ github.ref_name }}
        helm push *.tgz oci://${{ env.REGISTRY }}/${{ github.repository_owner }}/charts