[controller] automate builds via GA

Author: luisguzman-adfa

.github/workflows/android-release-build.yml

@@ -0,0 +1,58 @@
+name: Build and Sign IIAB APKs
+
+on:
+  push:
+    branches: [ "main", "master" ]
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build Release APKs
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      # We use Java 17, in sync with build.gradle
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'zulu'
+          java-version: '17'
+          cache: 'gradle'
+
+      - name: Grant execute permission for gradlew
+        run: chmod +x gradlew
+
+      - name: Decode Keystore
+        env:
+          ENCODED_STRING: ${{ secrets.KEYSTORE_BASE64 }}
+        run: |
+          # Decode the Base64 string back into a temporary physical .jks file
+          echo $ENCODED_STRING | base64 -d > keystore.jks
+
+      - name: Build and Sign Release APKs
+        env:
+          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
+          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
+          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
+        # Run assembleRelease injecting the signature, skipping store.properties
+        run: |
+          ./gradlew assembleRelease \
+            -Pandroid.injected.signing.store.file=$(pwd)/keystore.jks \
+            -Pandroid.injected.signing.store.password=$KEYSTORE_PASSWORD \
+            -Pandroid.injected.signing.key.alias=$KEY_ALIAS \
+            -Pandroid.injected.signing.key.password=$KEY_PASSWORD
+
+      - name: Upload APK Artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: iiab-apks-release
+          # The asterisk (*) will catch the 3 files: universal, arm64-v8a and armeabi-v7a
+          path: app/build/outputs/apk/release/*.apk
+          retention-days: 7
+
+      - name: Cleanup Keystore
+        if: always()
+        run: rm -f keystore.jks