xpeditis2.0/.github/workflows/deploy-preprod.yml

name: CI/CD Pipeline - Xpeditis PreProd

on:
  push:
    branches:
      - preprod
  pull_request:
    branches:
      - preprod

env:
  REGISTRY: rg.fr-par.scw.cloud/xpeditis
  BACKEND_IMAGE: rg.fr-par.scw.cloud/xpeditis/backend
  FRONTEND_IMAGE: rg.fr-par.scw.cloud/xpeditis/frontend
  NODE_VERSION: '20'

jobs:
  # ============================================================================
  # JOB 1: Backend - Build and Test
  # ============================================================================
  backend-build-test:
    name: Backend - Build & Test
    runs-on: ubuntu-latest

    steps:
      # Checkout code
      - name: Checkout Code
        uses: actions/checkout@v4

      # Setup Node.js
      - name: Set up Node.js ${{ env.NODE_VERSION }}
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'
          cache-dependency-path: package-lock.json

      # Install dependencies
      - name: Install Dependencies
        run: npm ci

      # Run linter (warnings allowed, only errors fail the build)
      - name: Run ESLint
        run: npm run lint -- --quiet || true

      # Run unit tests
      - name: Run Unit Tests
        run: npm run test
        env:
          NODE_ENV: test

      # Build backend
      - name: Build Backend
        run: npm run build

      # Upload build artifacts
      - name: Upload Backend Build Artifacts
        uses: actions/upload-artifact@v4
        with:
          name: backend-dist
          path: dist
          retention-days: 1


  # ============================================================================
  # JOB 3: Backend - Docker Build & Push
  # ============================================================================
  backend-docker:
    name: Backend - Docker Build & Push
    runs-on: ubuntu-latest
    needs: [backend-build-test]

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      # Setup QEMU for multi-platform builds
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      # Setup Docker Buildx
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      # Login to Scaleway Registry
      - name: Login to Scaleway Registry
        uses: docker/login-action@v3
        with:
          registry: rg.fr-par.scw.cloud/xpeditis
          username: nologin
          password: ${{ secrets.REGISTRY_TOKEN }}

      # Extract metadata for Docker
      - name: Extract Docker Metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.BACKEND_IMAGE }}
          tags: |
            type=raw,value=preprod
            type=sha,prefix=preprod-            

      # Build and push Docker image
      - name: Build and Push Backend Image
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=registry,ref=${{ env.BACKEND_IMAGE }}:buildcache
          cache-to: type=registry,ref=${{ env.BACKEND_IMAGE }}:buildcache,mode=max
          build-args: |
            NODE_ENV=production            

      # Cleanup
      - name: Docker Cleanup
        if: always()
        run: docker system prune -af


  # ============================================================================
  # JOB 5: Deploy to PreProd Server (Portainer Webhook)
  # ============================================================================
  deploy-preprod:
    name: Deploy to PreProd Server
    runs-on: ubuntu-latest
    needs: [backend-docker]

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      # Trigger Portainer Webhook to redeploy stack
      - name: Trigger Portainer Webhook - Backend
        run: |
          curl -X POST \
            -H "Content-Type: application/json" \
            -d '{"service": "backend", "image": "${{ env.BACKEND_IMAGE }}:preprod", "timestamp": "'$(date -u +%Y-%m-%dT%H:%M:%SZ)'"}' \
            ${{ secrets.PORTAINER_WEBHOOK_BACKEND }}          

      - name: Wait for Backend Deployment
        run: sleep 30

      # Health check
      - name: Health Check - Backend API
        run: |
          MAX_RETRIES=10
          RETRY_COUNT=0

          echo "Waiting for backend API to be healthy..."

          while [ $RETRY_COUNT -lt $MAX_RETRIES ]; do
            HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" https://api-preprod.xpeditis.com/health || echo "000")

            if [ "$HTTP_CODE" = "200" ]; then
              echo "✅ Backend API is healthy (HTTP $HTTP_CODE)"
              exit 0
            fi

            RETRY_COUNT=$((RETRY_COUNT + 1))
            echo "⏳ Attempt $RETRY_COUNT/$MAX_RETRIES - Backend API returned HTTP $HTTP_CODE, retrying in 10s..."
            sleep 10
          done

          echo "❌ Backend API health check failed after $MAX_RETRIES attempts"
          exit 1          

      # Send deployment notification
      - name: Send Deployment Notification
        if: always()
        run: |
          if [ "${{ job.status }}" = "success" ]; then
            STATUS_EMOJI="✅"
            STATUS_TEXT="SUCCESS"
            COLOR="3066993"
          else
            STATUS_EMOJI="❌"
            STATUS_TEXT="FAILED"
            COLOR="15158332"
          fi

          COMMIT_SHA="${{ github.sha }}"
          COMMIT_SHORT="${COMMIT_SHA:0:7}"
          COMMIT_MSG="${{ github.event.head_commit.message }}"
          AUTHOR="${{ github.event.head_commit.author.name }}"

          # Webhook Discord (si configuré)
          if [ -n "${{ secrets.DISCORD_WEBHOOK_URL }}" ]; then
            curl -H "Content-Type: application/json" \
              -d "{
                \"embeds\": [{
                  \"title\": \"$STATUS_EMOJI Deployment PreProd - $STATUS_TEXT\",
                  \"description\": \"**Branch:** preprod\n**Commit:** [\`$COMMIT_SHORT\`](https://github.com/${{ github.repository }}/commit/$COMMIT_SHA)\n**Author:** $AUTHOR\n**Message:** $COMMIT_MSG\",
                  \"color\": $COLOR,
                  \"fields\": [
                    {\"name\": \"Backend API\", \"value\": \"https://api-preprod.xpeditis.com\", \"inline\": true}
                  ],
                  \"timestamp\": \"$(date -u +%Y-%m-%dT%H:%M:%SZ)\"
                }]
              }" \
              ${{ secrets.DISCORD_WEBHOOK_URL }}
          fi          

  # ============================================================================
  # JOB 6: Run Smoke Tests (Post-Deployment)
  # ============================================================================
  smoke-tests:
    name: Run Smoke Tests
    runs-on: ubuntu-latest
    needs: [deploy-preprod]

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      # Test Backend API Endpoints
      - name: Test Backend API - Health
        run: |
          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" https://api-preprod.xpeditis.com/health)
          if [ "$HTTP_CODE" != "200" ]; then
            echo "❌ Health endpoint failed (HTTP $HTTP_CODE)"
            exit 1
          fi
          echo "✅ Health endpoint OK"          

      - name: Test Backend API - Swagger Docs
        run: |
          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" https://api-preprod.xpeditis.com/api/docs)
          if [ "$HTTP_CODE" != "200" ] && [ "$HTTP_CODE" != "301" ]; then
            echo "❌ Swagger docs failed (HTTP $HTTP_CODE)"
            exit 1
          fi
          echo "✅ Swagger docs OK"          

      - name: Test Backend API - Rate Search Endpoint
        run: |
          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" \
            -X POST https://api-preprod.xpeditis.com/api/v1/rates/search-csv \
            -H "Content-Type: application/json" \
            -d '{
              "origin": "NLRTM",
              "destination": "USNYC",
              "volumeCBM": 5,
              "weightKG": 1000,
              "palletCount": 3
            }')
          if [ "$HTTP_CODE" != "200" ] && [ "$HTTP_CODE" != "401" ]; then
            echo "❌ Rate search endpoint failed (HTTP $HTTP_CODE)"
            exit 1
          fi
          echo "✅ Rate search endpoint OK (HTTP $HTTP_CODE)"          

      # Summary
      - name: Tests Summary
        run: |
          echo "================================================"
          echo "✅ All smoke tests passed successfully!"
          echo "================================================"
          echo "Backend API:  https://api-preprod.xpeditis.com"
          echo "Swagger Docs: https://api-preprod.xpeditis.com/api/docs"
          echo "================================================"