fix on-tags.yml final commits #11
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: vendor-add-blob-create-dev-release | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - release-* | |
| # See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#filter-pattern-cheat-sheet | |
| # *: Matches zero or more characters, but does not match the / character. For example, Octo* matches Octocat. | |
| # **: Matches zero or more of any character. | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| # TODO: add caching for cli downloads, see https://github.com/marketplace/actions/cache | |
| - name: Install bosh-cli | |
| #See https://github.com/marketplace/actions/install-a-binary-from-github-releases | |
| uses: jaxxstorm/[email protected] | |
| with: | |
| repo: cloudfoundry/bosh-cli | |
| tag: v7.4.0 | |
| extension-matching: disable | |
| chmod: 0755 | |
| rename-to: bosh | |
| # searching for bosh-cli-7.4.0-linux-amd64 with (linux|x86_64|x64|amd64).*(linux|x86_64|x64|amd64).*.(tar.gz|zip) | |
| # bosh-cli-7.4.0-linux-amd64 | |
| - name: Install vendir cli | |
| #See https://github.com/marketplace/actions/install-a-binary-from-github-releases | |
| uses: jaxxstorm/[email protected] | |
| with: | |
| repo: carvel-dev/vendir | |
| tag: v0.34.6 | |
| extension-matching: disable | |
| chmod: 0755 | |
| rename-to: vendir | |
| - name: Install yq cli | |
| #See https://github.com/marketplace/actions/install-a-binary-from-github-releases | |
| uses: jaxxstorm/[email protected] | |
| with: | |
| repo: mikefarah/yq | |
| tag: v4.34.2 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # reduce potential rate limiting | |
| - name: vendor-add-blob | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| AWS_BOSH_ACCES_KEY_ID: ${{ secrets.AWS_BOSH_ACCES_KEY_ID }} | |
| AWS_BOSH_SECRET_ACCES_KEY: ${{ secrets.AWS_BOSH_SECRET_ACCES_KEY }} | |
| run: | | |
| set -x # enable traces | |
| #pwd | |
| #find . | |
| # configure git | |
| git config --global user.name "actions/k3s-boshrelease" | |
| git config --global user.email "<>" | |
| git config --global --add safe.directory /github/workspace | |
| export VENDIR_GITHUB_API_TOKEN="${GITHUB_TOKEN}" | |
| ./vendor.sh | |
| echo "State after vendir:" | |
| tree -s src | |
| git add vendir.lock | |
| # FIXME: optimize for idempotency | |
| ./addblob.sh | |
| remote_repo="https://${GITHUB_ACTOR}:${GITHUB_TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" | |
| git add config/blobs.yml | |
| git status | |
| if git commit -a --dry-run 2>&1 >/dev/null;then | |
| git commit -a -m "updating blobs" && \ | |
| git push ${remote_repo} HEAD:${GITHUB_REF_NAME} | |
| else | |
| echo "Nothing to commit" | |
| fi | |
| echo "Resulting State:" | |
| tree -s src | |
| if [ -d blobs ];then # The blobs dir is only present when a blob is modified or has not yet been published. | |
| tree -s blobs | |
| fi | |
| # TODO: optimize to only create a dev release if the blobs.yaml file has some changes | |
| # Possibly by setting an env var and checking it into next step | |
| # See https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-an-environment-variable | |
| # and if clause https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsif | |
| - name: create bosh dev release | |
| id: create-bosh-release | |
| uses: orange-cloudfoundry/bosh-release-action@v2 # will create dev release when pushed git ref is not a tag | |
| with: | |
| target_branch: ${{github.ref_name}} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| AWS_BOSH_ACCES_KEY_ID: ${{ secrets.AWS_BOSH_ACCES_KEY_ID }} | |
| AWS_BOSH_SECRET_ACCES_KEY: ${{ secrets.AWS_BOSH_SECRET_ACCES_KEY }} | |
| # See https://docs.github.com/en/actions/using-workflows/storing-workflow-data-as-artifacts | |
| # This creates a zip file containing the k3s-master.tgz file | |
| # See https://github.com/actions/upload-artifact#zipped-artifact-downloads | |
| # > There is currently no way to download artifacts after a workflow run finishes in a format other than a zip or | |
| # > to download artifact contents individually. One of the consequences of this limitation is that if a zip is | |
| # > uploaded during a workflow run and then downloaded from the UI, there will be a double zip created. | |
| - name: Archive bosh dev release tgz | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: archive-bosh-dev-release-tgz | |
| path: | | |
| k3s-*.tgz |