name: Build operator manually

on:
  workflow_dispatch:
    inputs:
      imageTag:
        description: "Container image tag."
        required: false
      ref:
        type: string
        description: "Git ref to checkout"
        required: false
      release:
        type: boolean
        description: "Is this a release build?"
        required: false
        default: false
  workflow_call:
    inputs:
      imageTag:
        type: string
        description: "Container image tag"
        required: true
      ref:
        type: string
        description: "Git ref to checkout"
        required: false
      release:
        type: boolean
        description: "Is this a release build?"
        required: true

jobs:
  build-operator-manual:
    runs-on: ubuntu-22.04
    permissions:
      contents: read
      packages: write
    steps:
      - name: Check out repository
        id: checkout
        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
        with:
          ref: ${{ inputs.ref || github.head_ref }}

      - name: Setup Go environment
        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
        with:
          go-version: "1.20.3"

      - name: Build and upload constellation-node-operator container image
        uses: ./.github/actions/build_operator
        with:
          name: node-operator
          sourceDir: operators/constellation-node-operator
          githubToken: ${{ secrets.GITHUB_TOKEN }}
          pushTag: ${{ inputs.imageTag }}
          cosignPublicKey: ${{ inputs.release && secrets.COSIGN_PUBLIC_KEY || secrets.COSIGN_DEV_PUBLIC_KEY }}
          cosignPrivateKey: ${{ inputs.release && secrets.COSIGN_PRIVATE_KEY || secrets.COSIGN_DEV_PRIVATE_KEY }}
          cosignPassword: ${{ inputs.release && secrets.COSIGN_PASSWORD || secrets.COSIGN_DEV_PASSWORD }}