name: Release Node Docker Image

# cancel-in-progress is false to avoid orphaning blobs mid-push; see RELEASES.md.
concurrency:
  group: retag-node-${{ inputs.repository }}-${{ github.ref }}
  cancel-in-progress: false

on:
  workflow_dispatch:
    inputs:
      source-tag:
        description: "Source image tag to retag for release (e.g., 'main-abc1234')"
        required: true
        type: string
      release-tag:
        description: "Release tag for the image (e.g., '3.0.4')"
        required: true
        type: string
      repository:
        description: "Target repository name (default: 'mpc-node-gcp')"
        required: false
        type: string
        default: mpc-node-gcp
  workflow_call:
    inputs:
      source-tag:
        required: true
        type: string
      release-tag:
        required: true
        type: string
      repository:
        required: true
        type: string

jobs:
  retag-node-image:
    name: "Retag node image for release"
    runs-on: warp-ubuntu-2404-x64-2x
    environment: production
    permissions:
      contents: read

    steps:
      - name: Login to Docker Hub
        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          username: ${{ secrets.DOCKERHUB_USER }}
          password: ${{ secrets.DOCKERHUB_PAT }}

      - name: Install skopeo
        run: |
          sudo apt-get update
          sudo apt-get install -y skopeo

      - name: Verify source image exists
        env:
          SOURCE_TAG: ${{ inputs.source-tag }}
          REPOSITORY: ${{ inputs.repository }}
        run: |
          if ! skopeo inspect docker://nearone/$REPOSITORY:$SOURCE_TAG > /dev/null 2>&1; then
            echo "Source image nearone/$REPOSITORY:$SOURCE_TAG does not exist"
            exit 1
          fi

      - name: Retag image
        env:
          SOURCE_TAG: ${{ inputs.source-tag }}
          REPOSITORY: ${{ inputs.repository }}
          RELEASE_TAG: ${{ inputs.release-tag }}
        run: |
          skopeo copy \
            docker://nearone/$REPOSITORY:$SOURCE_TAG \
            docker://nearone/$REPOSITORY:$RELEASE_TAG