---
name: Upload rpk connect plugin to S3
on:
  push:
    branches: [main]
    tags:
      # All runs triggered by tag will really push to S3.
      # Take care when adding more patterns here.
      - 'v[0-9]+.[0-9]+.[0-9]+'
      - 'v[0-9]+.[0-9]+.[0-9]+-rc[0-9]+'
  pull_request:
    # Keep CI snappy for unrelated PRs
    paths:
      - 'resources/plugin_uploader/**'
      - '.github/workflows/upload_plugin.yml'
      - '.github/actions/upload_managed_plugin/**'
      - '.goreleaser.yml'
  workflow_dispatch: {}
env:
  # Do dry run in most cases, UNLESS the triggering event was a "tag".
  DRY_RUN: ${{ github.ref_type != 'tag' }}
jobs:
  upload_rpk_connect_plugin:
    # Let's make this fast by using a beefy runner.
    runs-on: ubuntu-latest-32
    if: ${{ github.repository == 'redpanda-data/connect' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'redpanda-data/connect') }}
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ vars.RP_AWS_CRED_REGION }}
          role-to-assume: arn:aws:iam::${{ secrets.RP_AWS_CRED_ACCOUNT_ID }}:role/${{ vars.RP_AWS_CRED_BASE_ROLE_NAME }}${{ github.event.repository.name }}
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: 1.22.x
          check-latest: true
      - name: Write telemetry private key
        env:
          CONNECT_TELEMETRY_PRIV_KEY: ${{ secrets.TELEMETRY_PRIVATE_KEY }}
        run: |
          git update-index --skip-worktree ./internal/telemetry/key.pem
          echo "$CONNECT_TELEMETRY_PRIV_KEY" > ./internal/telemetry/key.pem
      - name: Build binaries (dry run / snapshot mode)
        if: ${{ env.DRY_RUN != 'false' }}
        uses: goreleaser/goreleaser-action@v6
        with:
          args: build --snapshot
      - name: Build binaries
        # Only one way to not dry run - see 'false'. All other cases, conservatively assume --dry-run
        if: ${{ env.DRY_RUN == 'false' }}
        uses: goreleaser/goreleaser-action@v6
        with:
          args: build
      - name: Upload connect plugin to S3
        uses: ./.github/actions/upload_managed_plugin
        with:
          aws_region: "us-west-2"
          aws_s3_bucket: "rpk-plugins-repo"
          project_root_dir: ${{ github.workspace }}
          artifacts_file: ${{ github.workspace }}/target/dist/artifacts.json
          metadata_file: ${{ github.workspace }}/target/dist/metadata.json
          plugin_name: "connect"
          goos: linux,darwin
          goarch: amd64,arm64
          repo_hostname: rpk-plugins.igiven.com
          dry_run: ${{ env.DRY_RUN != 'false' }}