feat(infrastructure): automatic deploy

.github/workflows/deploy-pr.yaml

@@ -9,6 +9,17 @@ permissions:
   pull-requests: write
 
 jobs:
+  build:
+    if: github.event.action != 'closed'
+    name: Build and push image (reusable)
+    uses: ./.github/workflows/build-image.yaml
+    with:
+      mode: pr
+      image_repo: lukastrkan/cc-app-demo
+      context: 7project/backend
+      pr_number: ${{ github.event.pull_request.number }}
+    secrets: inherit
+
   deploy:
     if: github.event.action != 'closed'
     name: Helm upgrade/install (PR preview)
@@ -16,6 +27,7 @@ jobs:
     concurrency:
       group: pr-${{ github.event.pull_request.number }}
       cancel-in-progress: false
+    needs: [build]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -36,45 +48,13 @@ jobs:
           echo "$KUBE_CONFIG" > ~/.kube/config
           chmod 600 ~/.kube/config
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
-      - name: Set up Docker Buildx
-        id: buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKER_USER }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
-
-      - name: Compute image repo and tags (PR)
-        run: |
-          IMAGE_REPO="${IMAGE_REPO:-lukastrkan/cc-app-demo}"
-          echo "IMAGE_REPO=$IMAGE_REPO" >> $GITHUB_ENV
-          PR=${{ github.event.pull_request.number }}
-          SHA_SHORT="${GITHUB_SHA::12}"
-          echo "TAG1=pr-$PR" >> $GITHUB_ENV
-          echo "TAG2=pr-$PR-$SHA_SHORT" >> $GITHUB_ENV
-
-      - name: Build and push image
-        id: build
-        uses: docker/build-push-action@v5
-        with:
-          context: 7project/backend
-          push: true
-          tags: |
-            ${{ env.IMAGE_REPO }}:${{ env.TAG1 }}
-            ${{ env.IMAGE_REPO }}:${{ env.TAG2 }}
-          platforms: linux/amd64
-
       - name: Helm upgrade/install PR preview
         env:
           DEV_BASE_DOMAIN: ${{ secrets.BASE_DOMAIN }}
           RABBITMQ_PASSWORD: ${{ secrets.RABBITMQ_PASSWORD }}
           DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
-          IMAGE_REPO: ${{ env.IMAGE_REPO }}
+          IMAGE_REPO: ${{ needs.build.outputs.image_repo }}
+          DIGEST: ${{ needs.build.outputs.digest }}
         run: |
           PR=${{ github.event.pull_request.number }}
           if [ -z "$PR" ]; then echo "PR number missing"; exit 1; fi
@@ -84,7 +64,6 @@ jobs:
           RELEASE=myapp-pr-$PR
           NAMESPACE=pr-$PR
           DOMAIN=pr-$PR.$DEV_BASE_DOMAIN
-          DIGEST='${{ steps.build.outputs.digest }}'
           if [ -z "$IMAGE_REPO" ]; then IMAGE_REPO="lukastrkan/cc-app-demo"; fi
           helm upgrade --install "$RELEASE" ./7project/charts/myapp-chart \
             -n "$NAMESPACE" --create-namespace \