ci.yaml

# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
#
# Generated on 2024-04-18T16:22:00Z by kres 92eef68-dirty.

name: default
concurrency:
  group: ${{ github.head_ref || github.run_id }}
  cancel-in-progress: true
"on":
  push:
    branches:
      - main
      - release-*
    tags:
      - v*
  pull_request:
    branches:
      - main
      - release-*
jobs:
  default:
    permissions:
      actions: read
      contents: write
      issues: read
      packages: write
      pull-requests: read
    runs-on:
      - self-hosted
      - generic
    if: (!startsWith(github.head_ref, 'renovate/') && !startsWith(github.head_ref, 'dependabot/'))
    outputs:
      labels: ${{ steps.retrieve-pr-labels.outputs.result }}
    services:
      buildkitd:
        image: moby/buildkit:v0.13.1
        options: --privileged
        ports:
          - 1234:1234
        volumes:
          - /var/lib/buildkit/${{ github.repository }}:/var/lib/buildkit
          - /usr/etc/buildkit/buildkitd.toml:/etc/buildkit/buildkitd.toml
    steps:
      - name: checkout
        uses: actions/checkout@v4
      - name: Unshallow
        run: |
          git fetch --prune --unshallow
      - name: Set up Docker Buildx
        id: setup-buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: remote
          endpoint: tcp://127.0.0.1:1234
        timeout-minutes: 10
      - name: Set secrets for job
        run: |
          sops -d .secrets.yaml | yq '.secrets | to_entries[] | .key + "=" + .value' >> "$GITHUB_ENV"
      - name: mask secrets
        run: |
          echo -e "$(yq -r '.secrets | keys | to_entries[] | "::add-mask::" + .value' secrets.yaml)"
      - name: base-d
        run: |
          echo "${FOO}"
      - name: base
        run: |
          make base
      - name: unit-tests
        run: |
          make unit-tests
      - name: unit-tests-race
        run: |
          make unit-tests-race
      - name: coverage
        run: |
          make coverage
      - name: roller-derby
        run: |
          make roller-derby
      - name: lint
        run: |
          make lint
      - name: Login to registry
        if: github.event_name != 'pull_request'
        uses: docker/login-action@v3
        with:
          password: ${{ secrets.GITHUB_TOKEN }}
          registry: ghcr.io
          username: ${{ github.repository_owner }}
      - name: image-roller-derby
        run: |
          make image-roller-derby
      - name: push-roller-derby
        if: github.event_name != 'pull_request'
        env:
          PLATFORM: linux/amd64,linux/arm64
          PUSH: "true"
        run: |
          make image-roller-derby
      - name: push-roller-derby-latest
        if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
        env:
          PLATFORM: linux/amd64,linux/arm64
          PUSH: "true"
        run: |
          make image-roller-derby IMAGE_TAG=latest
      - name: dummy
        run: |
          make dummy
      - name: Retrieve PR labels
        id: retrieve-pr-labels
        uses: actions/github-script@v7
        with:
          retries: "3"
          script: |
            if (context.eventName != "pull_request") { return "[]" }

            const resp = await github.rest.issues.get({
                issue_number: context.issue.number,
                owner: context.repo.owner,
                repo: context.repo.repo,
            })

            return resp.data.labels.map(label => label.name)
      - name: Generate Checksums
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          sha256sum _out/roller-derby-* > _out/sha256sum.txt
          sha512sum _out/roller-derby-* > _out/sha512sum.txt
      - name: release-notes
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          make release-notes
      - name: Release
        if: startsWith(github.ref, 'refs/tags/')
        uses: crazy-max/ghaction-github-release@v2
        with:
          body_path: _out/RELEASE_NOTES.md
          draft: "true"
          files: |-
            _out/roller-derby-*
            _out/sha*.txt
  dummy:
    runs-on:
      - self-hosted
    if: contains(fromJSON(needs.default.outputs.labels), 'integration/e2e') || contains(fromJSON(needs.default.outputs.labels), 'integration/dummy')
    needs:
      - default
    services:
      buildkitd:
        image: moby/buildkit:v0.13.1
        options: --privileged
        ports:
          - 1234:1234
        volumes:
          - /var/lib/buildkit/${{ github.repository }}:/var/lib/buildkit
          - /usr/etc/buildkit/buildkitd.toml:/etc/buildkit/buildkitd.toml
    steps:
      - name: checkout
        uses: actions/checkout@v4
      - name: Unshallow
        run: |
          git fetch --prune --unshallow
      - name: Set up Docker Buildx
        id: setup-buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: remote
          endpoint: tcp://127.0.0.1:1234
        timeout-minutes: 10
      - name: dummy
        run: |
          make dummy
  dummy-a:
    runs-on:
      - self-hosted
    if: contains(fromJSON(needs.default.outputs.labels), 'integration/e2e') || contains(fromJSON(needs.default.outputs.labels), 'integration/dummy-a')
    needs:
      - default
    services:
      buildkitd:
        image: moby/buildkit:v0.13.1
        options: --privileged
        ports:
          - 1234:1234
        volumes:
          - /var/lib/buildkit/${{ github.repository }}:/var/lib/buildkit
          - /usr/etc/buildkit/buildkitd.toml:/etc/buildkit/buildkitd.toml
    steps:
      - name: checkout
        uses: actions/checkout@v4
      - name: Unshallow
        run: |
          git fetch --prune --unshallow
      - name: Set up Docker Buildx
        id: setup-buildx
        uses: docker/setup-buildx-action@v3
        with:
          driver: remote
          endpoint: tcp://127.0.0.1:1234
        timeout-minutes: 10
      - name: dummy
        run: |
          make dummy