name: Push To Yandex Cloud CR
on:
  pull_request:
  push:
    branches:
      - 'master'

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2

      - name: Login to Yandex Cloud Container Registry
        id: login-cr
        uses: yc-actions/yc-cr-login@v1
        with:
          yc-sa-json-credentials: ${{ secrets.YC_SA_JSON_CREDENTIALS }}

      - name: Build, tag, and push image to Yandex Cloud Container Registry
        env:
          CR_REGISTRY: crp7gp50nf1pitkpk3hq
          CR_REPOSITORY: mtg-price-bot
          IMAGE_TAG: ${{ github.sha }}
        run: |
          docker build -t cr.yandex/$CR_REGISTRY/$CR_REPOSITORY:$IMAGE_TAG .
          docker push cr.yandex/$CR_REGISTRY/$CR_REPOSITORY:$IMAGE_TAG

      - name: Deploy Serverless Container
        id: deploy-sls-container
        uses: yc-actions/yc-sls-container-deploy@v2
        env:
          secret: e6qb3muh98m0as2r1r4b
          revision: e6q2tsf58jo5qtpjqkf5
        with:
          yc-sa-json-credentials: ${{ secrets.YC_SA_JSON_CREDENTIALS }}
          container-name: mtg-price-bot
          folder-id: b1g97q1g0epou1o6bu24
          revision-service-account-id: ajeomjp59v0jb9uiiq3k
          revision-cores: 1
          revision-memory: 128Mb
          revision-core-fraction: 100
          revision-concurrency: 1
          revision-image-url: cr.yandex/crp7gp50nf1pitkpk3hq/mtg-price-bot:${{ github.sha }}
          revision-execution-timeout: 10
          revision-secrets: |
            TELOXIDE_TOKEN=$secret/$revision/TELOXIDE_TOKEN
            VK_TOKEN=$secret/$revision/VK_TOKEN
            VK_GROUP_ID=$secret/$revision/VK_GROUP_ID
            VK_SECRET=$secret/$revision/VK_SECRET
            VK_CONFIRMATION_STRING=$secret/$revision/VK_CONFIRMATION_STRING
            TG_SECRET=$secret/$revision/TG_SECRET
            SCG_CLIENT_GUID=$secret/$revision/SCG_CLIENT_GUID

      - name: Deploy API Gateway
        id: deploy-gateway
        uses: yc-actions/yc-api-gateway-deploy@v2.0.0
        with:
          yc-sa-json-credentials: ${{ secrets.YC_SA_JSON_CREDENTIALS }}
          gateway-name: mtg-price-bot
          folder-id: b1g97q1g0epou1o6bu24
          spec-file: apigw.yaml