generated from pulumi/pulumi-tf-provider-boilerplate
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[internal] Update GitHub Actions workflow files (#246)
- Loading branch information
1 parent
2f3b4d3
commit 57b0757
Showing
5 changed files
with
199 additions
and
278 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,175 @@ | ||
| # WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt | ||
| name: Publish | ||
|
|
||
| on: | ||
| workflow_call: | ||
| inputs: | ||
| version: | ||
| required: true | ||
| type: string | ||
| isPrerelease: | ||
| required: true | ||
| type: boolean | ||
| skipGoSdk: | ||
| default: false | ||
| type: boolean | ||
| description: Skip publishing & verifying the Go SDK | ||
|
|
||
| env: | ||
| IS_PRERELEASE: ${{ inputs.isPrerelease }} | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} | ||
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | ||
| NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }} | ||
| PUBLISH_REPO_PASSWORD: ${{ secrets.OSSRH_PASSWORD }} | ||
| PUBLISH_REPO_USERNAME: ${{ secrets.OSSRH_USERNAME }} | ||
| PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }} | ||
| PULUMI_API: https://api.pulumi-staging.io | ||
| PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/.. | ||
| PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget | ||
| PULUMI_MISSING_DOCS_ERROR: true | ||
| PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }} | ||
| PYPI_USERNAME: __token__ | ||
| SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }} | ||
| SIGNING_KEY_ID: ${{ secrets.JAVA_SIGNING_KEY_ID }} | ||
| SIGNING_PASSWORD: ${{ secrets.JAVA_SIGNING_PASSWORD }} | ||
| TF_APPEND_USER_AGENT: pulumi | ||
| XYZ_REGION: us-west-2 | ||
|
|
||
| jobs: | ||
| publish: | ||
| name: publish | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Validate prerelease | ||
| if: inputs.isPrerelease == false && (contains(inputs.version, '-') || contains(inputs.version, '+')) | ||
| run: echo "Can't publish a prerelease version as a stable release. This is likely a bug in the calling workflow." && exit 1 | ||
| - name: Validate skipGoSdk | ||
| if: inputs.skipGoSdk && inputs.isPrerelease == false | ||
| run: echo "Can't skip Go SDK for stable releases. This is likely a bug in the calling workflow." && exit 1 | ||
| - name: Free Disk Space (Ubuntu) | ||
| uses: jlumbroso/free-disk-space@v1.3.1 | ||
| with: | ||
| # this might remove tools that are actually needed, | ||
| # if set to "true" but frees about 6 GB | ||
| tool-cache: false | ||
| swap-storage: false | ||
| - name: Checkout Repo | ||
| uses: actions/checkout@v4 | ||
| - name: Setup tools | ||
| uses: ./.github/actions/setup-tools | ||
| with: | ||
| tools: pulumictl, pulumicli, go | ||
| - name: Configure AWS Credentials | ||
| uses: aws-actions/configure-aws-credentials@v4 | ||
| with: | ||
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | ||
| aws-region: us-east-2 | ||
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | ||
| role-duration-seconds: 7200 | ||
| role-external-id: upload-pulumi-release | ||
| role-session-name: xyz@githubActions | ||
| role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }} | ||
| - name: Run GoReleaser | ||
| if: inputs.isPrerelease == false | ||
| uses: goreleaser/goreleaser-action@v5 | ||
| env: | ||
| GORELEASER_CURRENT_TAG: v${{ inputs.version }} | ||
| PROVIDER_VERSION: ${{ inputs.version }} | ||
| with: | ||
| args: -p 3 release --rm-dist --timeout 60m0s | ||
| version: latest | ||
| - name: Run GoReleaser (prerelease) | ||
| if: inputs.isPrerelease == true | ||
| uses: goreleaser/goreleaser-action@v5 | ||
| env: | ||
| GORELEASER_CURRENT_TAG: v${{ inputs.version }} | ||
| PROVIDER_VERSION: ${{ inputs.version }} | ||
| with: | ||
| args: -p 3 -f .goreleaser.prerelease.yml --rm-dist --skip-validate --timeout | ||
| 60m0s | ||
| version: latest | ||
|
|
||
| publish_sdk: | ||
| name: publish_sdk | ||
| needs: publish | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout Repo | ||
| uses: actions/checkout@v4 | ||
| - name: Setup tools | ||
| uses: ./.github/actions/setup-tools | ||
| with: | ||
| tools: pulumictl, pulumicli, go, node, dotnet, python, java | ||
| - name: Publish SDKs | ||
| uses: pulumi/pulumi-package-publisher@v0.0.19 | ||
| with: | ||
| sdk: all | ||
| version: ${{ inputs.version }} | ||
| - name: Download Go SDK | ||
| uses: ./.github/actions/download-sdk | ||
| with: | ||
| language: go | ||
| - uses: pulumi/publish-go-sdk-action@v1 | ||
| if: inputs.skipGoSdk == false | ||
| with: | ||
| repository: ${{ github.repository }} | ||
| base-ref: ${{ github.sha }} | ||
| source: sdk | ||
| path: sdk | ||
| version: ${{ inputs.version }} | ||
| additive: false | ||
| # Avoid including other language SDKs & artifacts in the commit | ||
| files: | | ||
| go.* | ||
| go/** | ||
| !*.tar.gz | ||
| create_docs_build: | ||
| name: create_docs_build | ||
| needs: publish_sdk | ||
| # Only run for non-prerelease, if the publish_go_sdk job was successful or skipped | ||
| if: inputs.isPrerelease == false | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Dispatch Metadata build | ||
| uses: peter-evans/repository-dispatch@v3 | ||
| with: | ||
| token: ${{ secrets.PULUMI_BOT_TOKEN }} | ||
| repository: pulumi/registry | ||
| event-type: resource-provider | ||
| client-payload: |- | ||
| { | ||
| "project": "${{ github.repository }}", | ||
| "project-shortname": "xyz", | ||
| "ref": "${{ github.ref_name }}" | ||
| } | ||
| clean_up_release_labels: | ||
| name: Clean up release labels | ||
| # Only run for non-prerelease, if the publish_go_sdk job was successful or skipped | ||
| if: inputs.isPrerelease == false | ||
| needs: create_docs_build | ||
|
|
||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout Repo | ||
| uses: actions/checkout@v4 | ||
| - name: Clean up release labels | ||
| uses: pulumi/action-release-by-pr-label@main | ||
| with: | ||
| command: "clean-up-release-labels" | ||
| repo: ${{ github.repository }} | ||
| commit: ${{ github.sha }} | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
|
|
||
| verify_release: | ||
| name: verify_release | ||
| needs: publish_sdk | ||
| uses: ./.github/workflows/verify-release.yml | ||
| secrets: inherit | ||
| with: | ||
| providerVersion: ${{ inputs.version }} | ||
| # Prelease is run often but we only have 5 concurrent macos runners, so we only test after the stable release. | ||
| enableMacosRunner: ${{ inputs.isPrerelease == false }} | ||
| skipGoSdk: ${{ inputs.skipGoSdk }} |
Oops, something went wrong.