kuksa_databroker_build.yml

# /********************************************************************************
# * Copyright (c) 2022 Contributors to the Eclipse Foundation
# *
# * See the NOTICE file(s) distributed with this work for additional
# * information regarding copyright ownership.
# *
# * This program and the accompanying materials are made available under the
# * terms of the Apache License 2.0 which is available at
# * http://www.apache.org/licenses/LICENSE-2.0
# *
# * SPDX-License-Identifier: Apache-2.0
# ********************************************************************************/

name: kuksa_databroker_build

on:
  push:
    branches: [ master ]
  pull_request:
    paths:
      - ".github/workflows/kuksa_databroker_build.yml"
      - "kuksa_databroker/**"
      - "proto/**"
      - "Cargo.*"
      - "Cross.toml"
  workflow_call:
  workflow_dispatch:


jobs:
  lint:
    name: Lint
    runs-on: ubuntu-latest

    steps:
      - name: Installing JVM
        run: sudo apt update && sudo apt-get install -y default-jre
      - uses: actions/checkout@v3
      - name: cargo fmt
        working-directory: ${{github.workspace}}
        run: cargo fmt -- --check
      - name: cargo clippy
        working-directory: ${{github.workspace}}
        run: cargo clippy --all-targets -- -W warnings -D warnings

      - name: "Createbom: License check and Dash output generation"
        working-directory: ${{github.workspace}}/kuksa_databroker/createbom
        run: |
         cargo install cargo-license
         python3 createbom.py --dash ${{github.workspace}}/dash-databroker-deps ../databroker

      - name: Dash license check
        uses: ./.github/actions/check-dash
        with:
          dashinput: ${{github.workspace}}/dash-databroker-deps

  test:
    name: Test
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3
      - uses: dtolnay/rust-toolchain@stable
      - name: Install dependencies
        run: |
          cargo install cargo-tarpaulin
      - name: Show toolchain information
        working-directory: ${{github.workspace}}
        run: |
          rustup toolchain list
          cargo --version

      - name: Run tests and report code coverage
        run: |
          cargo tarpaulin -o Xml

      - name: Upload coverage report
        uses: actions/upload-artifact@v3
        with:
          name: Code coverage report
          path: cobertura.xml

      # - name: Publish coverage report as comment
      #   uses: 5monkeys/cobertura-action@v12
      #   if: github.event_name == 'pull_request'
      #   with:
      #     path: cobertura.xml
      #     repo_token: ${{ secrets.GITHUB_TOKEN }}
      #     minimum_coverage: 40


  checkrights:
    uses: ./.github/workflows/check_push_rights.yml
    secrets: inherit

# Run on selfhosted, because our runner has native ARM build in a remote
# builder (no need for qemu)
  build-container:
    runs-on: [ self-hosted ]
    needs: checkrights

    steps:
    - uses: actions/checkout@v3
      with:
        submodules: recursive

    - name: Docker meta
      id: meta
      uses: docker/metadata-action@v4
      with:
        # list of Docker images to use as base name for tags
        images: |
          ghcr.io/eclipse/kuksa.val/databroker
        # generate Docker tags based on the following events/attributes
        tags: |
          type=ref,event=branch
          type=ref,event=pr
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}

    # only needed for runners without buildx setup, will be slow
    #- name: Set up QEMU
    #  uses: docker/setup-qemu-action@v2

    #- name: Set up Docker Buildx
    #  id: buildx
    #  uses: docker/setup-buildx-action@v2

    - name: Log in to the Container registry
      if: needs.checkrights.outputs.have_secrets == 'true'
      uses: docker/login-action@v2
      with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}

    - name: Build kuksa.val databroker container container and push to ghcr.io (and ttl.sh)
      id: ghcr-build
      if: ${{ needs.checkrights.outputs.have_secrets == 'true' && github.event_name != 'pull_request' }}
      uses: docker/build-push-action@v4
      with:
        platforms: |
          linux/amd64
          linux/arm64
        file: ./kuksa_databroker/Dockerfile
        context: .
        push: true
        tags: |
          ${{ steps.meta.outputs.tags }}
          ttl.sh/kuksa.val/kuksa-databroker-${{github.sha}}
        labels: ${{ steps.meta.outputs.labels }}

    - name: Build ephemereal kuksa.val databroker container and push to ttl.sh
      if: ${{ needs.checkrights.outputs.have_secrets == 'false' || github.event_name == 'pull_request' }}
      id: tmp-build
      uses: docker/build-push-action@v4
      with:
        platforms: |
          linux/amd64
          linux/arm64
        file: ./kuksa_databroker/Dockerfile
        context: .
        push: true
        tags: "ttl.sh/kuksa.val/kuksa-databroker-${{github.sha}}"
        labels: ${{ steps.meta.outputs.labels }}

    - name: Posting message
      uses: ./.github/actions/post-container-location
      with:
        image: ttl.sh/kuksa.val/kuksa-databroker-${{github.sha}}

    - name:  Extracting ARM64 binaries
      uses: ./.github/actions/copy-from-oci
      with:
        platform: linux/arm64
        id: databroker-arm64
        image: ttl.sh/kuksa.val/kuksa-databroker-${{github.sha}}
        src: /app/
        export: true
        transform: s/app/databroker/


    - name:  Extracting AMD64 binaries
      uses: ./.github/actions/copy-from-oci
      with:
        platform: linux/amd64
        id: databroker-amd64
        image: ttl.sh/kuksa.val/kuksa-databroker-${{github.sha}}
        src: /app/
        export: true
        transform: s/app/databroker/

  integration-test:
    name: Run integration test
    runs-on: ubuntu-latest
    needs: [build-container]

    steps:

      - uses: actions/checkout@v3

      - name: Run integration test
        env:
          DATABROKER_IMAGE: ttl.sh/kuksa.val/kuksa-databroker-${{github.sha}}
        run: |
          ${{github.workspace}}/kuksa_databroker/integration_test/run.sh