Iain Sproat
51a71e26b2
* allow chart name to be customised * Calculate the chart name in github workflow * publish of helm chart allows registry & repository to be configured (Helm chart currently publishes to ghcr)
80 lines
2.8 KiB
YAML
80 lines
2.8 KiB
YAML
name: Release pipeline
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- 'hotfix.*'
|
|
- 'testing*'
|
|
tags:
|
|
- '[0-9]+.[0-9]+.[0-9]+'
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: ${{ startsWith(github.ref, 'refs/heads/testing') }} # deployments on testing* will cancel each other, prod and tags no
|
|
|
|
jobs:
|
|
get-version:
|
|
name: Get version
|
|
uses: ./.github/workflows/get-version.yml
|
|
|
|
get-chart-name:
|
|
name: Get Chart Name
|
|
uses: ./.github/workflows/get-chart-name.yml
|
|
|
|
tests:
|
|
needs: [get-version]
|
|
uses: ./.github/workflows/tests.yml
|
|
with:
|
|
IMAGE_VERSION_TAG: ${{ needs.get-version.outputs.IMAGE_VERSION_TAG }}
|
|
DOCKERHUB_USERNAME: 'speckledevops'
|
|
CONTINUE_ON_ERROR: ${{ startsWith(github.ref, 'refs/heads/testing') }} # allows releasing on testing even if test fail
|
|
DISABLE_SKIPPING: ${{ startsWith(github.ref, 'refs/heads/main') }} # disable test skip on main
|
|
secrets: inherit
|
|
|
|
builds:
|
|
needs: [get-version]
|
|
uses: ./.github/workflows/builds.yml
|
|
with:
|
|
IMAGE_VERSION_TAG: ${{ needs.get-version.outputs.IMAGE_VERSION_TAG }}
|
|
DOCKERHUB_USERNAME: 'speckledevops'
|
|
IMAGE_PREFIX: 'speckle' # without an explicit host, Docker defaults to pushing Docker Hub
|
|
PUBLISH: true # publish the sourcemaps and include the version in frontend-2 builds
|
|
PUBLISH_LATEST: ${{ startsWith(github.ref, 'refs/heads/main') }}
|
|
secrets: inherit
|
|
|
|
test-deployments:
|
|
needs: [get-version, builds]
|
|
uses: ./.github/workflows/deployment-tests.yml
|
|
with:
|
|
IMAGE_VERSION_TAG: ${{ needs.get-version.outputs.IMAGE_VERSION_TAG }}
|
|
DOCKERHUB_USERNAME: 'speckledevops'
|
|
IMAGE_PREFIX: 'speckle'
|
|
secrets: inherit
|
|
|
|
deploy:
|
|
needs: [get-version, tests, builds, test-deployments, get-chart-name]
|
|
uses: ./.github/workflows/publish.yml
|
|
with:
|
|
IMAGE_VERSION_TAG: ${{ needs.get-version.outputs.IMAGE_VERSION_TAG }}
|
|
CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
|
|
OCI_REGISTRY_DOMAIN: ghcr.io
|
|
OCI_REGISTRY_PATH: specklesystems
|
|
OCI_REGISTRY_USERNAME: ${{ github.actor }} # we are pushing helm chart to ghcr
|
|
CHART_NAME: ${{ needs.get-chart-name.outputs.CHART_NAME }}
|
|
secrets:
|
|
# we do not inherit here as we wish to configure secrets depending on the target registry
|
|
DATADOG_API_KEY: ${{ secrets.DATADOG_API_KEY }}
|
|
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
|
|
OCI_REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} # we are pushing helm chart to ghcr
|
|
GH_DEVOPS_PAT: ${{ secrets.GH_DEVOPS_PAT }}
|
|
|
|
npm:
|
|
needs: [get-version, tests, builds]
|
|
uses: ./.github/workflows/npm.yml
|
|
if: startsWith(github.ref, 'refs/tags/') # a tag triggered the workflow
|
|
with:
|
|
IMAGE_VERSION_TAG: ${{ needs.get-version.outputs.IMAGE_VERSION_TAG }}
|
|
secrets: inherit
|