initial commit

Change-Id: I9c68c43e939d2c1a3b95a68b71ecc5ba861a4df5

.gitea/workflows/build-push.yml

@@ -0,0 +1,141 @@
+name: Build and Push to ACR
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  workflow_dispatch: {}
+
+concurrency:
+  group: -
+  cancel-in-progress: true
+
+env:
+  AZURE_FEDERATED_TOKEN_FILE: /var/run/secrets/azure/tokens/azure-identity-token
+
+jobs:
+  build:
+    name: Build and Push
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+          cache: 'maven'
+      
+      - name: Install Maven
+        run: |
+          echo "Installing Maven..."
+          apt-get update -qq
+          apt-get install -y maven
+          mvn --version
+          echo "Maven installed"
+      
+      - name: Build with Maven
+        run: |
+          echo "Building online-boutique..."
+          mvn clean package -DskipTests -B
+          echo "Build completed"
+      
+      - name: Run tests
+        run: |
+          echo "Running tests..."
+          mvn test -B
+          echo "Tests passed"
+      
+     # ── Install Azure CLI ───────────────────────────────────────────────
+      # act runners don't include az by default — install via Microsoft's
+      # official script which works on Debian/Ubuntu without sudo.
+      - name: Install Azure CLI
+        run: |
+          if command -v az &>/dev/null; then
+            echo "Azure CLI already installed: $(az version --query '"azure-cli"' -o tsv)"
+          else
+            curl -sL https://aka.ms/InstallAzureCLIDeb | bash
+          fi
+
+      # ── Authenticate to Azure ──────────────────────────────────────────
+      - name: Azure login (OIDC)
+        run: |
+          az login \
+            --service-principal \
+            --username "$AZURE_CLIENT_ID" \
+            --tenant "$AZURE_TENANT_ID" \
+            --federated-token "$(cat $AZURE_FEDERATED_TOKEN_FILE)"
+          
+          echo "✓ Azure login successful"
+      
+      
+      - name: Get ACR details
+        id: acr
+        run: |
+          echo "Getting ACR details..."
+          ACR_NAME=$(az acr list --query "[0].name" -o tsv)
+          ACR_NAME="${ACR_NAME:-bstagecjotdevacr}"
+          ACR_LOGIN_SERVER="${ACR_NAME}.azurecr.io"
+          
+          # Validation
+          if [ -z "$ACR_NAME" ]; then
+            echo "❌ ACR_NAME is empty"
+            exit 1
+          fi
+          
+          if [ -z "$ACR_LOGIN_SERVER" ]; then
+            echo "❌ ACR_LOGIN_SERVER is empty"
+            exit 1
+          fi
+          
+          echo "ACR_NAME=$ACR_NAME" >> $GITHUB_ENV
+          echo "ACR_LOGIN_SERVER=$ACR_LOGIN_SERVER" >> $GITHUB_ENV
+          echo "✓ Using ACR: $ACR_LOGIN_SERVER"
+      
+      - name: ACR Login
+        run: |
+          echo "Logging into ACR..."
+          echo "ACR_NAME='$ACR_NAME'"
+
+          ACR_TOKEN=$(az acr login --name "$ACR_NAME" --expose-token --output tsv --query accessToken)
+          docker login "$ACR_LOGIN_SERVER" --username "$AZURE_CLIENT_ID" --password "$ACR_TOKEN"
+          
+          echo "✓ ACR login successful"
+      
+      - name: Build and Push Docker Image
+        run: |
+          IMAGE_NAME="online-boutique"
+          IMAGE_TAG=""
+          IMAGE_FULL="/$IMAGE_NAME:$IMAGE_TAG"
+          IMAGE_LATEST="/$IMAGE_NAME:latest"
+          echo "Building Docker image..."
+          docker build -t $IMAGE_NAME:$IMAGE_TAG .
+          echo "Tagging images..."
+          docker tag $IMAGE_NAME:$IMAGE_TAG $IMAGE_FULL
+          docker tag $IMAGE_NAME:$IMAGE_TAG $IMAGE_LATEST
+          echo "Pushing to ACR..."
+          docker push $IMAGE_FULL
+          docker push $IMAGE_LATEST
+          echo "Images pushed:"
+          echo "  - $IMAGE_FULL"
+          echo "  - $IMAGE_LATEST"
+          echo "IMAGE_FULL=$IMAGE_FULL" >> $GITHUB_ENV
+      
+      - name: Build Summary
+        run: |
+          echo "### Build Successful" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "- **Application**: online-boutique" >> $GITHUB_STEP_SUMMARY
+          echo "- **Commit**: " >> $GITHUB_STEP_SUMMARY
+          
+          echo "- **Image**: " >> $GITHUB_STEP_SUMMARY
+          echo "- **ACR**: " >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "Built, tested, and pushed to ACR!" >> $GITHUB_STEP_SUMMARY