build-java.yml

name: Build Java

on:
  push:
    branches:
      - main
    paths:
    - "generated/java/**"
    - ".github/workflows/build-java.yml"
  pull_request:
    branches:
      - main
    paths:
    - "generated/java/**"
    - ".github/workflows/build-java.yml"

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write

    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK 21
        uses: actions/setup-java@v4
        with:
          java-version: 21
          distribution: zulu

      - name: Authenticate to Google Cloud
        id: auth
        uses: google-github-actions/auth@v2.0.1
        with:
          workload_identity_provider: "projects/${{ secrets.GAR_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/gh-actions/providers/gh-actions"
          service_account: "gh-actions-dapla-platform@${{ secrets.GAR_PROJECT_ID }}.iam.gserviceaccount.com"
          token_format: access_token

      - name: Cache Maven packages
        uses: actions/cache@v3
        with:
          path: ~/.m2
          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
          restore-keys: ${{ runner.os }}-m2

      - name: Build with Maven and deploy to Artifact Registry
        run: |
            pushd generated/java/dapla-kuben-resource-model
            ./mvnw --batch-mode -P ssb deploy