stages:
  - build
  - test
  - validate
  - runway_staging
  - runway_production

variables:
  CHANGE_LOCK_OVERRIDE: true
  CONTAINER_IMAGE_COMMIT: $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA

include:
  - project: 'gitlab-com/gl-infra/platform/runway/runwayctl'
    file: 'ci-tasks/service-project/runway.yml'
    rules:
      - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
    inputs:
      runway_service_id: authzd
      image: "$CONTAINER_IMAGE_COMMIT"
      runway_version: v3.66.2

build image:
  image: docker:28
  interruptible: true
  stage: build
  services:
    - docker:28-dind
  before_script:
    - docker login -u gitlab-ci-token -p $CI_JOB_TOKEN $CI_REGISTRY
  script:
    - docker build --tag $CONTAINER_IMAGE_COMMIT .
    - docker push $CONTAINER_IMAGE_COMMIT

unit:
  image: rust:latest
  stage: test
  needs: []
  script:
    - make test

lint:
  image: rust:latest
  stage: test
  needs: []
  before_script:
    - rustup component add clippy rustfmt
    - cargo install --locked cedar-policy-cli
  script:
    - make lint