cd-extract.yml

name: Deploy Data Extract Job

# Only run when merged changes happen in data_extract folder
on:
  push:
    branches:
      - main
    paths:
      - 'data_extract/**'
      - '.github/workflows/deploy-pipeline.yml'
  
  workflow_dispatch:

permissions:
  contents: 'read'
  id-token: 'write'

# Service configurations in GCP
env:
  REGION: us-east1
  REPO_NAME: operations-artifacts
  IMAGE_NAME: extractor
  JOB_NAME: drive-extractor

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      # Handshake to GCP
      - name: Authenticate to Google Cloud
        id: auth
        uses: google-github-actions/auth@v2
        with:
          workload_identity_provider: ${{ secrets.WIF_PROVIDER }}
          service_account: ${{ secrets.DEPLOYER_SA_EMAIL }}

      - name: Set up Cloud SDK
        uses: google-github-actions/setup-gcloud@v2

      # Handshake to Artifact registry
      - name: Configure Docker Auth
        run: gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev --quiet


      - name: Build and Push Docker Image
        run: |
          # Full image path using the Git Commit Hash (github.sha)
          IMAGE_PATH="${{ env.REGION }}-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{ env.REPO_NAME }}/${{ env.IMAGE_NAME }}:${{ github.sha }}"
          
          # Build from root to ensure COPY commands find the files
          docker build -f data_extract/Dockerfile -t $IMAGE_PATH .
          
          # Push to Artifact Registry
          docker push $IMAGE_PATH

      
      - name: Deploy to Cloud Run Job
        run: |
          IMAGE_PATH="${{ env.REGION }}-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/${{ env.REPO_NAME }}/${{ env.IMAGE_NAME }}:${{ github.sha }}"
          
          gcloud run jobs deploy ${{ env.JOB_NAME }} \
            --image $IMAGE_PATH \
            --region ${{ env.REGION }} \
            --service-account ${{ secrets.EXTRACTOR_SA_EMAIL }} \
            --memory 1Gi \
            --cpu 1 \
            --task-timeout 15m \
            --max-retries 1