ci: refactor (#108)

InseeFr · Aug 7, 2024 · 6e5c5f8 · 6e5c5f8
1 parent 31f8670
commit 6e5c5f8
Show file tree

Hide file tree

Showing 7 changed files with 311 additions and 281 deletions.
diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
diff --git a/.github/workflows/create-release.yaml b/.github/workflows/create-release.yaml
@@ -0,0 +1,147 @@
+name: Public-Enemy Back Office release
+
+on:
+  push:
+    branches:
+      - "main"
+    paths-ignore:
+      ["docs/**", "Dockerfile", "LICENSE", "CHANGELOG.md", "README.md"]
+
+jobs:
+  check-version:
+    runs-on: ubuntu-latest
+    outputs:
+      release-version: ${{ steps.version-step.outputs.version }}
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "21"
+
+      - name: Checkout Public-Enemy Back Office repo
+        uses: actions/checkout@v4
+
+      - name: Get Version
+        id: version-step
+        run: echo "version=$(mvn -f pom.xml help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_OUTPUT
+
+      - name: Print Version
+        run: echo ${{ steps.version-step.outputs.version }}
+
+      - uses: mukunku/[email protected]
+        name: Check tag existence
+        id: check-tag-exists
+        with:
+          tag: ${{ steps.version-step.outputs.version }}
+
+      - name: Tag verification
+        id: check-tag
+        run: |
+          if [[ "${{ steps.check-tag-exists.outputs.exists }}" == "true" ]]; then
+            echo "Nothing to tag/release, the tag ${{ steps.version-step.outputs.version }} already exists"
+            exit 1
+          fi
+
+          if ! [[ "${{ steps.version-step.outputs.version }}" =~ ^[0-9]+.[0-9]+.[0-9]+$ ]]; then
+            echo "Nothing to tag/release, the tag ${{ steps.version-step.outputs.version }} is not in correct format X.Y.Z"
+            exit 1
+          fi
+
+  build-sources:
+    needs: check-version
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "21"
+
+      - uses: actions/checkout@v4
+      - name: Build Public-Enemy Back Office with Maven
+        run: mvn clean package -B -V --file pom.xml --no-transfer-progress
+
+      - name: Upload jar
+        uses: actions/upload-artifact@v4
+        with:
+          name: jar
+          path: target/*.jar
+
+  create-release:
+    needs: [check-version, build-sources]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Get previous release tag
+        id: previousTag
+        run: echo "previousTag=$(git --no-pager tag --sort=creatordate --merged ${{ github.ref_name }} | grep "^[0-9]\+\.[0-9]\+\.[0-9]\+$" | tail -1)" >> $GITHUB_OUTPUT
+
+      - name: Create tag
+        uses: rickstaa/action-create-tag@v1
+        with:
+          tag: ${{ needs.check-version.outputs.release-version }}
+
+      - name: Create release note
+        id: changelog
+        uses: requarks/changelog-action@v1
+        with:
+          fromTag: ${{ needs.check-version.outputs.release-version }}
+          toTag: ${{ steps.previousTag.outputs.previousTag}}
+          excludeTypes: docs,style,chore,other
+          token: ${{ secrets.GITHUB_TOKEN }}
+          writeToFile: true
+          changelogFilePath: "CHANGELOG.md"
+
+      - name: Commit changelog file
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          branch: 'main'
+          commit_message: 'docs(changelog): ${{ needs.check-version.outputs.release-version }} update [skip ci]'
+          file_pattern: 'CHANGELOG.md'
+
+      - name: Download jar
+        id: download
+        uses: actions/download-artifact@v4
+        with:
+          name: jar
+          path: target/
+
+      - name: Create GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ needs.check-version.outputs.release-version }}
+          target_commitish: ${{ github.head_ref || github.ref }}
+          name: ${{ needs.check-version.outputs.release-version }}
+          body: ${{steps.changelog.outputs.changes}}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  publish-docker:
+    needs: [check-version, create-release]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download jar
+        id: download
+        uses: actions/download-artifact@v4
+        with:
+          name: jar
+          path: target/
+
+      - name: Publish to Docker Hub
+        uses: elgohr/Publish-Docker-Github-Action@v5
+        with:
+          name: inseefr/public-enemy-back-office
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          default_branch: ${{ github.ref }}
+          tags: "latest,${{ needs.check-version.outputs.release-version }}"
diff --git a/.github/workflows/create-snapshot.yaml b/.github/workflows/create-snapshot.yaml
@@ -0,0 +1,136 @@
+name: Public-Enemy Back Office snapshot
+
+# This action is triggered when the 'deploy-snapshot' tag is put in a pull request.
+on:
+  pull_request:
+    types: [labeled]
+    paths-ignore:
+      - 'logo/**'
+      - 'docs/**'
+      - 'CHANGELOG.md'
+      - 'README**.md'
+      - 'Dockerfile'
+      - '.github/**'
+
+jobs:
+
+  remove-deploy-label:
+    if: ${{ contains(github.event.pull_request.labels.*.name, 'deploy-snapshot') }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions-ecosystem/action-remove-labels@v1
+        with:
+          labels: 'deploy-snapshot'
+
+  check-version:
+    needs: remove-deploy-label
+    runs-on: ubuntu-latest
+    outputs:
+      snapshot-version: ${{ steps.version-step.outputs.version }}
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+
+      - name: Checkout Public-Enemy Back-Office repo
+        uses: actions/checkout@v4
+
+      - name: Get Version
+        id: version-step
+        run: echo "version=$(mvn -f pom.xml help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_OUTPUT
+
+      - name: Print Version
+        run: echo ${{ steps.version-step.outputs.version }}
+
+      - uses: mukunku/[email protected]
+        name: Check tag existence
+        id: check-tag-exists
+        with:
+          tag: ${{ steps.version-step.outputs.version }}
+
+      - name: Tag verification
+        id: check-tag
+        run: |
+          if [[ "${{ steps.check-tag-exists.outputs.exists }}" == "true" ]]; then
+            echo "Nothing to tag/release, the tag ${{ steps.version-step.outputs.version }} already exists"
+            exit 1
+          fi
+
+          if ! [[ "${{ steps.version-step.outputs.version }}" =~ ^[0-9]+.[0-9]+.[0-9]+-SNAPSHOT.?[0-9]*$ ]]; then
+            echo "Nothing to tag/release, the tag ${{ steps.version-step.outputs.version }} is not in correct format X.Y.Z-SNAPSHOT"
+            exit 1
+          fi
+
+  build-sources:
+    needs: check-version
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+
+      - uses: actions/checkout@v4
+      - name: Build Public-Enemy Back-Office with Maven
+        run: mvn clean package -B -V --file pom.xml --no-transfer-progress
+
+      - name: Upload jar
+        uses: actions/upload-artifact@v4
+        with:
+          name: jar
+          path: target/*.jar
+
+  create-tag:
+    needs: [ check-version, build-sources ]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create tag
+        uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.git.createRef({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              ref: 'refs/tags/${{ needs.check-version.outputs.snapshot-version }}',
+              sha: context.sha
+            })
+
+  publish-docker:
+    needs: [ check-version, create-tag ]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download jar
+        id: download
+        uses: actions/download-artifact@v4
+        with:
+          name: jar
+          path: target/
+
+      - name: Publish to Docker Hub
+        uses: elgohr/Publish-Docker-Github-Action@v5
+        with:
+          name: inseefr/public-enemy-back-office
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          default_branch: ${{ github.ref }}
+          tags: ${{ needs.check-version.outputs.snapshot-version }}
+
+  write-comment:
+    needs: [ check-version, publish-docker ]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: '👋 Version ${{ needs.check-version.outputs.snapshot-version }} deployed on docker hub'
+            })