mirror of
https://github.com/rancher/cli.git
synced 2026-02-07 06:48:57 +01:00
101 lines
3.1 KiB
YAML
101 lines
3.1 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*
|
|
|
|
jobs:
|
|
release:
|
|
permissions:
|
|
contents: write # needed to create/update the release with the assets
|
|
id-token: write # needed for the Vault authentication
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
|
|
|
|
- name: Load Secrets from Vault
|
|
uses: rancher-eio/read-vault-secrets@main
|
|
with:
|
|
secrets: |
|
|
secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
|
|
secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD ;
|
|
secret/data/github/repo/${{ github.repository }}/google-auth/rancher/credentials token | GOOGLE_AUTH ;
|
|
|
|
- name: Login to Docker Hub
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ env.DOCKER_USERNAME }}
|
|
password: ${{ env.DOCKER_PASSWORD }}
|
|
|
|
- name: Authenticate to Google Cloud
|
|
uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3
|
|
with:
|
|
credentials_json: "${{ env.GOOGLE_AUTH }}"
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
|
|
with:
|
|
go-version-file: go.mod
|
|
cache: false
|
|
|
|
- name: Lint
|
|
uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8
|
|
|
|
- name: Validate Go modules
|
|
run: ./scripts/validate
|
|
|
|
- name: Test
|
|
run: ./scripts/test
|
|
|
|
- name: Get Tag
|
|
if: startsWith(github.ref, 'refs/tags/v')
|
|
run: echo "GITHUB_TAG=$GITHUB_REF_NAME" >> $GITHUB_ENV
|
|
|
|
- name: Build
|
|
env:
|
|
CROSS: 1
|
|
run: ./scripts/build
|
|
|
|
- name: Package
|
|
run: |
|
|
./scripts/package
|
|
ls -lR dist/artifacts
|
|
# Stage binary for packaging step
|
|
cp -r ./bin/* ./package/
|
|
|
|
# Export the tag for the next step
|
|
source ./scripts/version
|
|
echo "VERSION=$VERSION"
|
|
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
|
|
- name: Upload Release assets
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
cd dist/artifacts/$VERSION
|
|
ls -lR
|
|
# generate sha256sum file
|
|
find . -maxdepth 1 -type f ! -name sha256sum.txt -printf '%P\0' | xargs -0 sha256sum > sha256sum.txt
|
|
gh release upload $VERSION *.txt *.xz *.gz *.zip
|
|
|
|
- name: Upload Release assets to Google Cloud
|
|
uses: google-github-actions/upload-cloud-storage@6397bd7208e18d13ba2619ee21b9873edc94427a # v3
|
|
with:
|
|
path: dist/artifacts/${{ env.VERSION }}
|
|
destination: releases.rancher.com/cli2/${{ env.VERSION }}
|
|
glob: '*.*' # copy only the files in the path folder
|
|
parent: false
|
|
process_gcloudignore: false
|
|
headers: |-
|
|
cache-control: public,max-age=3600
|
|
|
|
- name: Docker Build
|
|
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
|
|
with:
|
|
push: true
|
|
context: package
|
|
tags: rancher/cli2:${{ env.VERSION }}
|