name: Immutable QuickStack OCI deployment

on:
  push:
  pull_request:
  workflow_dispatch:

concurrency:
  group: quickstack-oci-${{ gitea.repository }}-${{ gitea.ref }}
  cancel-in-progress: false

jobs:
  build_and_deploy:
    name: Build once and deploy exact digest
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: Checkout consuming repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 2

      - name: Build and deploy declared QuickStack targets
        uses: vadimenovikau/Platform-CI/.gitea/actions/quickstack-oci@main
        with:
          config-path: .quickstack/deploy.json
        env:
          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
          REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
          QUICKSTACK_API_TOKEN: ${{ secrets.QUICKSTACK_API_TOKEN }}
          QUICKSTACK_BASE_URL: https://server.nuvisphere.de