bitnami-containers/.github/workflows/ci-pipeline.yaml

93 lines
4.5 KiB
YAML

name: CI Pipeline
on: # rebuild any PRs and main branch changes
pull_request_target:
types:
- opened
- reopened
- synchronize
- labeled
branches:
- main
- bitnami:main
env:
CSP_API_URL: https://console.cloud.vmware.com
CSP_API_TOKEN: ${{ secrets.CSP_API_TOKEN }}
VIB_PUBLIC_URL: https://cp.bromelia.vmware.com
jobs:
get-container:
runs-on: ubuntu-latest
name: Get modified containers
outputs:
container: ${{ steps.get-container.outputs.container }}
result: ${{ steps.get-container.outputs.result }}
flavors: ${{ steps.get-container.outputs.flavors }}
steps:
- id: get-container
name: Get modified containers
run: |
# Using the Github API to detect the files changed as git merge-base stops working when the branch is behind
# and jitterbit/get-changed-files does not support pull_request_target
URL="https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/files"
files_changed_data=$(curl -s --header 'authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' -X GET -G "$URL")
files_changed="$(echo $files_changed_data | jq -r '.[] | .filename')"
# Adding || true to avoid "Process exited with code 1" errors
containers_dirs_changed="$(echo "$files_changed" | xargs dirname | grep -o "containers/[^/]*" | sort | uniq || true)"
flavors=($(echo "$files_changed" | xargs dirname | grep -o "containers/[^/]*/[^/]*/[^/]*" | sort | uniq || true))
flavors_json=$(printf "%s\n" "${flavors[@]}" | jq -R . | jq -cs .)
# Using grep -c as a better alternative to wc -l when dealing with empty strings."
num_containers_changed="$(echo "$containers_dirs_changed" | grep -c "containers" || true)"
if [[ "$num_containers_changed" -eq "1" ]]; then
# Changes done in only one container -> OK
container_name=$(echo "$containers_dirs_changed" | sed "s|containers/||g")
echo "::set-output name=result::ok"
echo "::set-output name=container::${container_name}"
echo "::set-output name=flavors::${flavors_json}"
elif [[ "$num_containers_changed" -le "0" ]]; then
# Changes done in the containers/ folder but not inside a container subfolder -> SKIP
echo "::set-output name=error::No changes detected in containers. The rest of the tests will be skipped."
echo "::set-output name=result::skip"
else
# Changes done in more than container -> SKIP
echo -e "::set-output name=error::Changes detected in more than one container directory:\n${containers_dirs_changed}\nIt is strongly advised to change only one container in a PR. The rest of the tests will be skipped."
echo "::set-output name=result::skip"
fi
# Using actions/github-scripts because using exit 1 in the script above would not provide any output
# Source: https://github.community/t/no-output-on-process-completed-with-exit-code-1/123821/3
- id: show-error
name: Show error
if: ${{ steps.get-container.outputs.result == 'fail' }}
uses: actions/github-script@v3
with:
script: |
core.setFailed('${{ steps.get-container.outputs.error }}')
vib-verify:
runs-on: ubuntu-latest
needs: get-container
if: ${{ needs.get-container.outputs.result == 'ok' && contains(github.event.pull_request.labels.*.name, 'verify') }}
name: Verify
strategy:
fail-fast: false
matrix:
flavor: ${{ fromJSON(needs.get-container.outputs.flavors) }}
steps:
- uses: actions/checkout@v3
name: Checkout Repository
# Required to search the latest commit with the tag
with:
fetch-depth: 0
- id: get-tag
name: Get latest image tag
run: |
tag="$(git log --pretty=tformat:"%s" -n 1 --grep=" release$" --author bitnami-bot@vmware.com --author containers@bitnami.com --author containers-bot@bitnami.com -- ${{ matrix.flavor }} | awk '{print $1}')"
echo "::set-output name=tag::${tag}"
- uses: vmware-labs/vmware-image-builder-action@main
name: Verify ${{ needs.get-container.outputs.container }}
with:
pipeline: vib-verify.json
env:
# Path with docker resources
VIB_ENV_PATH: ${{ matrix.flavor }}
# Container name
VIB_ENV_CONTAINER: ${{ needs.get-container.outputs.container }}
VIB_ENV_TAG: ${{ steps.get-tag.outputs.tag }}