release.yml

name: Release

on:
  push:
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+"

permissions:
  contents: write # publishing releases

env:
  PROJECT_DIR: falcon-operator
  IMAGE_NAME: falcon-operator
  IMAGE_TAG: latest
  IMAGE_REGISTRY: quay.io
  IMAGE_NAMESPACE: crowdstrike
  RELEASE_TAG: ${{ github.ref_name }}

jobs:
  bump_release:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout full repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Install dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libgpgme-dev libbtrfs-dev libdevmapper-dev

      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - name: Get Event branch
        id: event_branch
        run: |
          BASEREF=${{ github.event.base_ref }}
          REFBRANCH=${BASEREF#refs/heads/}

          echo "REFBRANCH=${REFBRANCH}" >> $GITHUB_ENV
          echo $REFBRANCH

      - name: Checkout tagged branch
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: ${{ env.REFBRANCH }}

      - name: Configure Git
        id: config_git
        run: |
          git config user.name github-actions
          git config user.email github-actions@github.com

          VERSION=${{ env.RELEASE_TAG }}
          NEWVERSION=${VERSION:1}

          echo "NEWVERSION=${NEWVERSION}" >> $GITHUB_ENV

      - name: Generate Changelog
        id: changelog
        run: |
          release=${{ env.NEWVERSION }}
          cl=CHANGELOG.md
          today=$(date +%F)
          header=$(head -n7 ${cl})
          older=$(tail -n+7 ${cl})

          # get all commits on head since the latest tag
          changes=$(git log --no-merges --pretty=format:"- %s" $(git describe --tags --abbrev=0 HEAD^)..HEAD)

          echo "${header}" > ${cl}
          echo "" >> ${cl}
          echo "## [${release}] - ${today}" >> ${cl}
          echo "" >> ${cl}
          echo "### Changed" >> ${cl}
          echo "" >> ${cl}
          echo "${changes}" >> ${cl}
          echo "${older}" >> ${cl}
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

      - name: Update release changes
        id: git_commit
        run: |
          OLDVERSION=$(grep ^VERSION Makefile | awk '{print $NF}')
          sed -i "s/$OLDVERSION/${{ env.NEWVERSION }}/g" -i Makefile
          mkdir -p $HOME/go/bin
          export PATH=$HOME/go/bin:$PATH
          make operator-sdk
          make manifests bundle non-olm IMG=${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/${{ env.IMAGE_NAME }}:${{ env.NEWVERSION }}
          git add -u
          git commit -m "Bumping to version ${{ env.NEWVERSION }}"
          git push
          git tag -f "${GITHUB_REF#refs/tags/}"
          git push origin "${GITHUB_REF#refs/tags/}" --force

  create_release:
    runs-on: ubuntu-latest
    needs: bump_release
    steps:
      - name: Checkout full repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Get Event branch
        id: event_branch
        run: |
          BASEREF=${{ github.event.base_ref }}
          REFBRANCH=${BASEREF#refs/heads/}

          echo "REFBRANCH=${REFBRANCH}" >> $GITHUB_ENV
          git checkout $REFBRANCH

      - name: Getting latest release version and version setup
        id: latest_version
        run: |
          if ! gh api repos/$GITHUB_REPOSITORY/releases/latest -q .tag_name > /dev/null 2>&1 ; then
              LATESTREL="v0.0.0"
          else
              LATESTREL=$(gh api repos/$GITHUB_REPOSITORY/releases/latest -q .tag_name)
          fi

          echo "LATESTRELEASE=${LATESTREL}" >> $GITHUB_ENV
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

      - name: Generate Notes
        id: notes
        run: |
          echo "tag-name=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
          gh api repos/$GITHUB_REPOSITORY/releases/generate-notes \
            -f tag_name="${GITHUB_REF#refs/tags/}" \
            -f target_commitish=${{ env.REFBRANCH }} \
            -q .body > NOTES.md
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

      - name: Create release
        id: create_release
        if: env.LATESTRELEASE != env.RELEASE_TAG
        run: |
          gh api repos/$GITHUB_REPOSITORY/releases \
          -f tag_name="${GITHUB_REF#refs/tags/}" \
          -f target_commitish=${{ env.REFBRANCH }} \
          -f name="${GITHUB_REF#refs/tags/}" \
          -F generate_release_notes=true
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

      - name: Updating release
        id: update_release
        if: env.LATESTRELEASE == env.RELEASE_TAG
        run: |
          gh release edit "${GITHUB_REF#refs/tags/}" \
          --title ${GITHUB_REF#refs/tags/} \
          --tag ${GITHUB_REF#refs/tags/} \
          --target ${{ env.REFBRANCH }} \
          --notes-file NOTES.md
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

      - name: Upload release assets
        id: upload_manifest
        run: |
          gh release upload "${GITHUB_REF#refs/tags/}" deploy/falcon-operator.yaml
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

  build-multiarch-operator:
    name: Build multi-architecture image
    needs: create_release
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        go-version: [1.21.x]

    steps:
      - name: Install qemu dependency
        run: |
          sudo apt-get update
          sudo apt-get install -y qemu-user-static

      - name: Set up Go ${{ matrix.go-version }}
        uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
        id: go

      # Checkout falcon-operator github repository
      - name: Checkout falcon-operator project
        uses: actions/checkout@v4

      - name: Create proper tag version
        id: set_version
        run: |
          VERSION=${{ env.RELEASE_TAG }}
          IMAGE_REPOSITORY=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')

          echo "VERSION=${VERSION:1}" >> $GITHUB_ENV
          echo "IMAGE_REPOSITORY=${IMAGE_REPOSITORY}" >> $GITHUB_ENV

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          platforms: linux/arm64,linux/amd64,linux/s390x,linux/ppc64le

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          registry: ${{ env.IMAGE_REGISTRY }}
          username: ${{ secrets.REGISTRY_LOGIN }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Setup Cross Compile Dockerfile
        run: sed -e '1 s/\(^FROM\)/FROM --platform=$\{BUILDPLATFORM\}/; t' -e ' 1,// s//FROM --platform=$\{BUILDPLATFORM\}/' Dockerfile > Dockerfile.cross

      - name: Build and push
        id: build_image_multiarch
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile.cross
          platforms: linux/arm64,linux/amd64,linux/s390x,linux/ppc64le
          push: true
          tags: |
            ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_REPOSITORY }}:${{ env.VERSION }}
          build-args: |
            VERSION=${{ env.VERSION }}

      - name: Check manifest
        run: |
          docker buildx imagetools inspect ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_REPOSITORY }}:${{ env.VERSION }}