86 lines
4.5 KiB
YAML
86 lines
4.5 KiB
YAML
name: '[CI/CD] CD Pipeline Run'
|
|
run-name: "${{ format('[CI/CD] CD Publish {0}',github.event.workflow_run.display_title) }}"
|
|
on: # rebuild any PRs and main branch changes
|
|
workflow_run:
|
|
workflows:
|
|
- '\[CI/CD\] CD Prepare'
|
|
types:
|
|
- 'completed'
|
|
permissions:
|
|
actions: read
|
|
env:
|
|
CSP_API_URL: https://console.cloud.vmware.com
|
|
CSP_API_TOKEN: ${{ secrets.CSP_API_TOKEN }}
|
|
VIB_PUBLIC_URL: https://cp.bromelia.vmware.com
|
|
jobs:
|
|
get-metadata:
|
|
runs-on: ubuntu-latest
|
|
name: Get modified containers path
|
|
if: ${{ github.event.workflow_run.conclusion == 'success' }}
|
|
outputs:
|
|
packages_json_url: ${{ steps.get-artifacts.outputs.packages_json_url }}
|
|
containers: ${{ steps.get-artifacts.outputs.containers }}
|
|
steps:
|
|
- id: get-artifacts
|
|
name: Get modified containers path
|
|
env:
|
|
PREPARE_WORKFLOW_ARTIFACTS_URL: ${{ github.event.workflow_run.artifacts_url }}
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
curl -sSL -o artifacts.json -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: Bearer $GITHUB_TOKEN" $PREPARE_WORKFLOW_ARTIFACTS_URL
|
|
publish_metadata_url="$(jq -r '.artifacts[] | select(.name == "publish-metadata.json") | .archive_download_url' artifacts.json)"
|
|
curl -sSL -o publish-metadata.json.zip -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: Bearer $GITHUB_TOKEN" $publish_metadata_url
|
|
unzip publish-metadata.json.zip
|
|
containers=$(cat publish-metadata.json | jq -c)
|
|
packages_json_url="$(jq -r '.artifacts[] | select(.name == "packages.json") | .archive_download_url' artifacts.json)"
|
|
echo "packages_json_url=${packages_json_url}" >> $GITHUB_OUTPUT
|
|
echo "containers=${containers}" >> $GITHUB_OUTPUT
|
|
|
|
vib-publish:
|
|
runs-on: ubuntu-latest
|
|
needs: get-metadata
|
|
name: Publish
|
|
strategy:
|
|
fail-fast: false
|
|
max-parallel: 2
|
|
matrix:
|
|
container: ${{ fromJSON(needs.get-metadata.outputs.containers) }}
|
|
steps:
|
|
- name: Checkout Repository
|
|
uses: actions/checkout@v3
|
|
# Full history is not required anymore
|
|
with:
|
|
ref: ${{ matrix.container.sha }}
|
|
fetch-depth: 1
|
|
- id: get-registry-credentials
|
|
name: Get marketplace's registry credentials
|
|
run: |
|
|
csp_auth_token=$(curl -s -H 'Content-Type: application/x-www-form-urlencoded' -X POST -d "grant_type=refresh_token&api_token=${{ secrets.PROD_MARKETPLACE_API_TOKEN }}" https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize | jq -re .access_token)
|
|
repo_info=$(curl -s -X POST -H "Content-Type: application/json" -H "csp-auth-token:$csp_auth_token" -d '{"withCredentials":true, "storageType":"OCI"}' https://gtw.marketplace.cloud.vmware.com/api/v1/repositories/transient)
|
|
marketplace_user=$(echo "$repo_info" | jq -re .response.repodetails.username)
|
|
marketplace_passwd=$(echo "$repo_info" | jq -re .response.repodetails.token)
|
|
echo "::add-mask::${marketplace_user}"
|
|
echo "::add-mask::${marketplace_passwd}"
|
|
echo "marketplace_user=${marketplace_user}" >> $GITHUB_OUTPUT
|
|
echo "marketplace_passwd=${marketplace_passwd}" >> $GITHUB_OUTPUT
|
|
- uses: vmware-labs/vmware-image-builder-action@v0
|
|
name: 'Publish ${{ matrix.container.name }}: ${{ matrix.container.tag }}'
|
|
with:
|
|
pipeline: ${{ matrix.container.dsl_path }}/vib-publish.json
|
|
env:
|
|
# Path with docker resources
|
|
VIB_ENV_PATH: "${{ matrix.container.path }}"
|
|
# Container name
|
|
VIB_ENV_CONTAINER: "${{ matrix.container.name }}"
|
|
VIB_ENV_CONTAINER_URL: "${{ matrix.container.sha_url }}"
|
|
VIB_ENV_PACKAGES_JSON_URL: "${{ needs.get-metadata.outputs.packages_json_url }}"
|
|
VIB_ENV_APP_VERSION: "${{ matrix.container.app_version }}"
|
|
VIB_ENV_OS_FLAVOUR: "${{ matrix.container.os_flavour }}"
|
|
VIB_ENV_GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
|
|
VIB_ENV_TAG: "${{ matrix.container.tag }}"
|
|
VIB_ENV_ROLLING_TAGS: "${{ toJSON(matrix.container.rolling_tags) }}"
|
|
VIB_ENV_REGISTRY_URL: "${{ secrets.PROD_MARKETPLACE_REGISTRY_URL }}"
|
|
VIB_ENV_REGISTRY_USERNAME: "${{ steps.get-registry-credentials.outputs.marketplace_user }}"
|
|
VIB_ENV_REGISTRY_PASSWORD: "${{ steps.get-registry-credentials.outputs.marketplace_passwd }}"
|
|
VIB_ENV_BOSSD_RELEASE_ID: "${{ secrets.BOSSD_RELEASE_ID }}"
|