main.yaml

name: hauler-workflow
on:
   push:
     tags:
       - '*'

jobs:
  rancher-airgap-hauler:
    name: Rancher Airgap Build Hauler Job
    runs-on: [self-hosted, linux, X64, general]
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v3
        with:
          ref: main
          token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}

      - name: Pre-Build Setup/Checks
        run: |
          pwd && ls -la

      - name: Rancher Airgap - Build Hauler
        run: |
          sh hauler/scripts/hauler/hauler-hauler.sh
          mv /opt/rancher/hauler/hauler/hauler hauler/hauler/hauler
          mv /opt/rancher/hauler/rancher-airgap-hauler.tar.zst hauler/hauler/rancher-airgap-hauler.tar.zst
          pwd && ls -la hauler/hauler

      - name: Rancher Airgap - Build Helm
        run: |
          sh hauler/scripts/helm/hauler-helm.sh
          mv /opt/rancher/hauler/helm/rancher-airgap-helm.yaml hauler/helm/rancher-airgap-helm.yaml
          mv /opt/rancher/hauler/helm/rancher-airgap-helm.tar.zst hauler/helm/rancher-airgap-helm.tar.zst
          pwd && ls -la hauler/helm

      - name: Rancher Airgap - Build Cosign
        run: |
          sh hauler/scripts/cosign/hauler-cosign.sh
          mv /opt/rancher/hauler/cosign/rancher-airgap-cosign.yaml hauler/cosign/rancher-airgap-cosign.yaml
          mv /opt/rancher/hauler/cosign/rancher-airgap-cosign.tar.zst hauler/cosign/rancher-airgap-cosign.tar.zst
          pwd && ls -la hauler/cosign

      - name: Rancher Airgap - Build RKE2
        run: |
          sh hauler/scripts/rke2/hauler-rke2.sh
          mv /opt/rancher/hauler/rke2/rancher-airgap-rke2.yaml hauler/rke2/rancher-airgap-rke2.yaml
          mv /opt/rancher/hauler/rke2/rancher-airgap-rke2.tar.zst hauler/rke2/rancher-airgap-rke2.tar.zst
          pwd && ls -la hauler/rke2

      - name: Rancher Airgap - Build Rancher
        run: |
          sh hauler/scripts/rancher/hauler-rancher.sh
          mv /opt/rancher/hauler/rancher/rancher-airgap-rancher.yaml hauler/rancher/rancher-airgap-rancher.yaml
          mv /opt/rancher/hauler/rancher/rancher-airgap-rancher.tar.zst hauler/rancher/rancher-airgap-rancher.tar.zst
          pwd && ls -la hauler/rancher

      - name: Rancher Airgap - Build Longhorn
        run: |
          sh hauler/scripts/longhorn/hauler-longhorn.sh
          mv /opt/rancher/hauler/longhorn/rancher-airgap-longhorn.yaml hauler/longhorn/rancher-airgap-longhorn.yaml
          mv /opt/rancher/hauler/longhorn/rancher-airgap-longhorn.tar.zst hauler/longhorn/rancher-airgap-longhorn.tar.zst
          pwd && ls -la hauler/longhorn

      - name: Rancher Airgap - Build NeuVector
        run: |
          sh hauler/scripts/neuvector/hauler-neuvector.sh
          mv /opt/rancher/hauler/neuvector/rancher-airgap-neuvector.yaml hauler/neuvector/rancher-airgap-neuvector.yaml
          mv /opt/rancher/hauler/neuvector/rancher-airgap-neuvector.tar.zst hauler/neuvector/rancher-airgap-neuvector.tar.zst
          pwd && ls -la hauler/neuvector

      - name: Rancher Airgap - Build Harvester
        run: |
          sh hauler/scripts/harvester/hauler-harvester.sh
          mv /opt/rancher/hauler/harvester/rancher-airgap-harvester.yaml hauler/harvester/rancher-airgap-harvester.yaml
          pwd && ls -la hauler/harvester

      - name: Setup AWS Credentials and CLI
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Upload Assets to AWS S3 Bucket
        run: |
          aws s3 ls s3://rancher-airgap/
          aws s3 cp hauler s3://rancher-airgap/${GITHUB_REF##*/}/hauler --recursive
          aws s3 ls s3://rancher-airgap/${GITHUB_REF##*/}/hauler

      - name: Commit and Push Repository
        continue-on-error: true
        run: |
          pwd && ls -la
          git status
          git config --global user.name "${GITHUB_ACTOR}"
          git config --global user.email "${GITHUB_ACTOR}@users.noreply.github.com"
          git add hauler/hauler/hauler hauler/helm/helm hauler/cosign/cosign *.yaml
          git commit -a -m "updated rancher airgap assets [github-actions]"
          git push

  rancher-airgap-testing:
    name: Rancher Airgap Test and Lint Job
    runs-on: [self-hosted, linux, X64, general]
    needs: [rancher-airgap-hauler]
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v3
        with:
          ref: main
          token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}

      - name: Pre-Build Setup/Checks
        run: |
          pwd && ls -la

      - name: Rancher Airgap - Test/Lint Helm
        run: |
          cd /opt/rancher/hauler/helm
          hauler store info
          rm -rf /opt/rancher/hauler/helm

      - name: Rancher Airgap - Test/Lint Cosign
        run: |
          cd /opt/rancher/hauler/cosign
          hauler store info
          rm -rf /opt/rancher/hauler/cosign

      - name: Rancher Airgap - Test/Lint RKE2
        run: |
          cd /opt/rancher/hauler/rke2
          hauler store info
          rm -rf /opt/rancher/hauler/rke2

      - name: Rancher Airgap - Test/Lint Rancher
        run: |
          cd /opt/rancher/hauler/rancher
          hauler store info
          rm -rf /opt/rancher/hauler/rancher

      - name: Rancher Airgap - Test/Lint Longhorn
        run: |
          cd /opt/rancher/hauler/longhorn
          hauler store info
          rm -rf /opt/rancher/hauler/longhorn

      - name: Rancher Airgap - Test/Lint NeuVector
        run: |
          cd /opt/rancher/hauler/neuvector
          hauler store info
          rm -rf /opt/rancher/hauler/neuvector

      - name: Rancher Airgap - Test/Lint Harvester
        run: |
          cd /opt/rancher/hauler/harvester
          hauler store info
          rm -rf /opt/rancher/hauler/harvester

  rancher-airgap-release:
    name: Rancher Airgap Release Workflow Job
    runs-on: [self-hosted, linux, X64, general]
    needs: [rancher-airgap-testing]
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v3
        with:
          ref: main
          token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}

      - name: Pre-Build Setup/Checks
        run: |
          pwd && ls -la

      - name: Rancher Airgap - Create Release Notes
        run: |
          echo -e "# Rancher Airgap Release ${GITHUB_REF##*/}\nLatest Release Notes and Asset URLs. We are excited about this latest release of Rancher Airgap! Please review all of the releases notes below and always ensure to download the correct assets. Please utilize GitHub Issues, Forks, and Pull Requests to submit any issues, updates, or fixes! Thank you.\n\nThese Release Notes were generated automatically by [github-actions](https://github.com/apps/github-actions).\n\n## Upgrade Steps\n* No upgrade steps for this release.\n\n## Breaking Changes\n* No breaking changes for this release.\n\n## Features and Improvements\n* No features or improvements for this release.\n\n## Bug Fixes and Additional Notes\n* No bug fixes or additional notes for this release.\n\n## Release Assets for the Rancher Airgap\n\n### Hauler (by Rancher Government Solutions)\n* **TAR ->** [s3://rancher-airgap-hauler.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/hauler/rancher-airgap-hauler.tar.zst)\n\n### Helm (by the CNCF)\n* **Hauler Manifest ->** [s3://rancher-airgap-helm.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/helm/rancher-airgap-helm.yaml)\n* **TAR ->** [s3://rancher-airgap-helm.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/helm/rancher-airgap-helm.tar.zst)\n\n### Cosign (by Sigstore)\n* **Hauler Manifest ->** [s3://rancher-airgap-cosign.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/cosign/rancher-airgap-cosign.yaml)\n* **TAR ->** [s3://rancher-airgap-rke2.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/cosign/rancher-airgap-cosign.tar.zst)\n\n### Rancher Kubernetes Engine 2 (by Rancher)\n* **Hauler Manifest ->** [s3://rancher-airgap-rke2.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/rke2/rancher-airgap-rke2.yaml)\n* **TAR ->** [s3://rancher-airgap-rke2.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/rke2/rancher-airgap-rke2.tar.zst)\n\n### Rancher Multi-Cluster-Manager (by Rancher)\n* **Hauler Manifest ->** [s3://rancher-airgap-rancher.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/rancher/rancher-airgap-rancher.yaml)\n* **TAR ->** [s3://rancher-airgap-rancher.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/rancher/rancher-airgap-rancher.tar.zst)\n\n### Rancher Longhorn (by Rancher)\n* **Hauler Manifest ->** [s3://rancher-airgap-longhorn.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/longhorn/rancher-airgap-longhorn.yaml)\n* **TAR ->** [s3://rancher-airgap-longhorn.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/longhorn/rancher-airgap-longhorn.tar.zst)\n\n### Rancher NeuVector (by Rancher)\n* **Hauler Manifest ->** [s3://rancher-airgap-neuvector.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/neuvector/rancher-airgap-neuvector.yaml)\n* **TAR ->** [s3://rancher-airgap-neuvector.tar.zst](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/neuvector/rancher-airgap-neuvector.tar.zst)\n\n### Rancher Harvester (by Rancher)\n* **Hauler Manifest ->** [s3://rancher-airgap-harvester.yaml](https://rancher-airgap.s3.amazonaws.com/${GITHUB_REF##*/}/hauler/harvester/rancher-airgap-harvester.yaml)\n* **NO TAR** - Due to the size of files." > RELEASE-NOTES.MD
          echo Previewing Release Notes:
          cat RELEASE-NOTES.MD

      - name: Rancher Airgap - Release with Release Notes
        id: create_release
        uses: actions/create-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ github.ref }}
          release_name: Release ${{ github.ref }}
          draft: false
          prerelease: false
          body_path: RELEASE-NOTES.MD