chore: add parallel generation to CHANGELOG.md. (#1946) #61
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2023 Terramate GmbH | |
| # SPDX-License-Identifier: MPL-2.0 | |
| name: ci | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - v*.x # backporting branches. | |
| jobs: | |
| build_test: | |
| name: Build and Test | |
| runs-on: ${{ matrix.os.value }} | |
| permissions: | |
| id-token: write | |
| contents: read | |
| pull-requests: write | |
| checks: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: | |
| - name: ubuntu-focal | |
| value: "ubuntu-20.04" | |
| - name: macos-ventura | |
| value: "macos-13" | |
| go: ["1.21"] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.head_ref }} | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: ${{ matrix.go }} | |
| - uses: opentofu/setup-opentofu@v1 | |
| with: | |
| tofu_version: 1.6.2 | |
| tofu_wrapper: false | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| - uses: hashicorp/setup-terraform@v3 | |
| with: | |
| terraform_version: "1.7.5" | |
| terraform_wrapper: false | |
| - name: Install Terramate | |
| uses: terramate-io/terramate-action@i4k-fix-macos | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: build Terramate | |
| run: make build && cp -v ./bin/terramate /usr/local/bin/terramate-bin | |
| - name: make generate | |
| run: make generate | |
| ### Check for changed stacks | |
| - name: List changed Go packages | |
| id: list_go_packages | |
| run: terramate list --tags golang --changed --git-change-base HEAD^ | |
| - name: List changed e2e tests packages | |
| id: list_e2e_packages | |
| run: terramate list --tags e2etests --changed --git-change-base HEAD^ | |
| ### Linting | |
| - name: linting code | |
| if: ${{ steps.list_go_packages.outputs.stdout || steps.list_e2e_packages }} | |
| run: make lint | |
| - name: checking go mod tidyness | |
| if: ${{ steps.list_go_packages.outputs.stdout || steps.list_e2e_packages }} | |
| run: make mod/check | |
| - name: checking license on source code | |
| if: ${{ steps.list_go_packages.outputs.stdout || steps.list_e2e_packages }} | |
| run: make license/check | |
| - name: Check Terramate formatting | |
| run: terramate fmt --check | |
| - name: Check Terraform formatting | |
| if: ${{ steps.list_go_packages.outputs.stdout || steps.list_e2e_packages }} | |
| run: terraform fmt -recursive -check -diff | |
| ### Run the Terramate tests and create a Cloud deployment | |
| - name: Run Terraform deployment on changed packages | |
| if: ${{ steps.list_go_packages.outputs.stdout }} | |
| timeout-minutes: 30 | |
| run: terramate script run --changed --git-change-base HEAD^ --tags golang --continue-on-error --target ${{ matrix.os.name }}-go-packages --parallel 12 deploy | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| TM_TEST_TERRAFORM_REQUIRED_VERSION: "1.7.5" | |
| - name: Run all e2e tests if any Go packages changed | |
| if: ${{ steps.list_go_packages.outputs.stdout }} | |
| timeout-minutes: 30 | |
| run: terramate script run --tags e2etests --target ${{ matrix.os.name }}-e2e --parallel 12 deploy | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| TM_TEST_TERRAFORM_REQUIRED_VERSION: "1.7.5" | |
| - name: Else only run the changed e2e packages | |
| if: ${{ !steps.list_e2e_packages.outputs.stdout && steps.list_e2e_packages.outputs.stdout }} | |
| timeout-minutes: 30 | |
| run: terramate script run --tags e2etests --changed --git-change-base HEAD^ --target "${{ matrix.os.name }}-e2e" --parallel 12 deploy | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| TM_TEST_TERRAFORM_REQUIRED_VERSION: "1.7.5" | |
| release_dry_run: | |
| name: Release Dry Run | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: ${{github.event.pull_request.head.ref}} | |
| repository: ${{github.event.pull_request.head.repo.full_name}} | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.21' | |
| - name: install cosign | |
| run: go install github.com/sigstore/cosign/v2/cmd/[email protected] | |
| - name: install goreleaser | |
| run: | | |
| curl -sL https://github.com/goreleaser/goreleaser-pro/releases/download/v1.14.0-pro/goreleaser-pro_Linux_x86_64.tar.gz -o /tmp/goreleaser.tar.gz | |
| cd /tmp && tar -xzf goreleaser.tar.gz && chmod +x goreleaser | |
| sudo mv /tmp/goreleaser /usr/local/bin/ | |
| - name: Create cosign.pub file | |
| run: echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub | |
| - name: release dry run | |
| run: make release/dry-run | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GORELEASER_KEY: ${{ secrets.GORELEASER_API_KEY }} | |
| FURY_TOKEN: ${{ secrets.FURY_TOKEN}} | |
| COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD}} | |
| COSIGN_PRIVATE_KEY: ${{secrets.COSIGN_PRIVATE_KEY }} | |
| - name: Locate checksum file | |
| id: find_checksum | |
| run: | | |
| if [ -z "$(ls dist/*checksums.txt)" ]; then | |
| echo "Error: Checksum file not found." | |
| exit 1 | |
| fi | |
| echo "CHECKSUM_FILE=$(ls dist/*checksums.txt)" >> $GITHUB_ENV | |
| - name: Locate signature file | |
| id: find_signature | |
| run: | | |
| if [ -z "$(ls dist/*checksum*.txt.sig)" ]; then | |
| echo "Error: Signature file not found." | |
| exit 1 | |
| fi | |
| echo "SIGNATURE_FILE=$(ls dist/*checksum*.txt.sig)" >> $GITHUB_ENV | |
| - name: Verify checksums with cosign | |
| run: | | |
| cosign verify-blob --key cosign.pub --signature ${{ env.SIGNATURE_FILE }} ${{ env.CHECKSUM_FILE }} | |
| ci: | |
| needs: | |
| - build_test | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - run: echo "All jobs ran successfully" |