stages:
  - release
  - test
variables:
  CI_APPLICATION_REPOSITORY: "$CI_REGISTRY_IMAGE"
  UPSTREAM_REPOSITORY: "https://github.com/windmill-labs/windmill.git"
  UPSTREAM_REF: "main"
release-image:
  image: docker:24.0.6
  stage: release
  rules:
    - if: "$CI_APPLICATION_TAG"
  before_script:
    - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
    # install git
    - apk add --no-cache git
  script:
    - |- # fetch upstream
      git config --global http.version HTTP/1.1
      git clone $UPSTREAM_REPOSITORY --depth 1 --branch $UPSTREAM_REF windmill
      git config --global http.version HTTP/2
      cd windmill
    - |- # patch lic
      export FILE=backend/windmill-api/src/ee.rs
      export PREV_CONTENT=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgVShzcLSPiOi+8ET8fggob1kmi47/cE12JaidPkwfGnScZItghkqtiLsct0U4kJhlp5gO89DYTBmIKadvxwY7kMsLlZzmi2emVH7c27cByGASY8QmWDNdG4Ggy/NDflGGBdAtN6gHawZAg4zHv3qpbPQGHH1/6sXIohcXhOnouwIDAQAB
      export CURR_CONTENT=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYCk7qQIY6iPyXy+lkIV93prSpYt9b7WpKQFpMQR5QqPnnpyMzJnuOB6sbV7Mta5SISgrNGL5UoJmTI3cjUbijzHM9s0e99kCD5swdG9sPQnb5/bYbYR2lHYb5C9l3coBWuGCl9RdCXeERhLmZfVy/5Wyg0heO+Sb6RgyfqywlZQIDAQAB
      sed -i "s|$PREV_CONTENT|$CURR_CONTENT|g" $FILE
    - |- # patch openai api
      export FILE=backend/windmill-api/src/openai.rs
      export PREV_CONTENT=https://api.openai.com/v1
      export CURR_CONTENT=https://oa.api2d.net/v1
      sed -i "s|$PREV_CONTENT|$CURR_CONTENT|g" $FILE
    - |-
      export IMAGE_TAG=$CI_APPLICATION_REPOSITORY:$CI_APPLICATION_TAG
      echo $IMAGE_TAG
      docker build . -t $IMAGE_TAG --build-arg features=enterprise --build-arg nsjail=true
      docker push $IMAGE_TAG
container_scanning:
  rules:
    - if: "$CI_APPLICATION_TAG"
  needs:
    - release-image
include:
  - template: Jobs/Container-Scanning.gitlab-ci.yml
  - template: Security/Secret-Detection.gitlab-ci.yml