build(deps): bump ubi8/openjdk-17-runtime from 1.19-4.1715070687 to 1.20-2 in /src/main/docker #772
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI build and push | |
| concurrency: | |
| group: ci-${{ github.run_id }} | |
| cancel-in-progress: true | |
| on: | |
| issue_comment: | |
| types: | |
| - created | |
| env: | |
| OPENSUSE_UNOFFICIAL_LIBCONTAINERS_KEY_URL: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/unstable/xUbuntu_22.04/Release.key" | |
| OPENSUSE_UNOFFICIAL_LIBCONTAINERS_SOURCE_URL: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/unstable/xUbuntu_22.04" | |
| jobs: | |
| check-before-build: | |
| runs-on: ubuntu-latest | |
| if: github.repository_owner == 'cryostatio' && github.event.issue.pull_request && startsWith(github.event.comment.body, '/build_test') | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Fail if needs-triage label applied | |
| if: ${{ contains(github.event.issue.labels.*.name, 'needs-triage') }} | |
| run: exit 1 | |
| - name: Show warning if permission is denied | |
| if: | | |
| !(github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER') | |
| && (!contains(github.event.issue.labels.*.name, 'safe-to-test') || github.event.issue.user.name != github.event.comment.user.name) | |
| uses: thollander/actions-comment-pull-request@v2 | |
| with: | |
| message: |- | |
| You do not have permission to run the /build_test command. Please ask @cryostatio/reviewers | |
| to resolve the issue. | |
| - name: Fail if command permission is denied | |
| if: | | |
| !(github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER') | |
| && (!contains(github.event.issue.labels.*.name, 'safe-to-test') || github.event.issue.user.name != github.event.comment.user.name) | |
| run: exit 1 | |
| - name: React to comment | |
| uses: actions/github-script@v4 | |
| with: | |
| script: | | |
| const {owner, repo} = context.issue | |
| github.reactions.createForIssueComment({ | |
| owner, | |
| repo, | |
| comment_id: context.payload.comment.id, | |
| content: "+1", | |
| }); | |
| checkout-branch: | |
| runs-on: ubuntu-latest | |
| needs: [check-before-build] | |
| outputs: | |
| PR_head_ref: ${{ fromJSON(steps.comment-branch.outputs.result).ref }} | |
| PR_head_sha: ${{ fromJSON(steps.comment-branch.outputs.result).sha }} | |
| PR_num: ${{ fromJSON(steps.comment-branch.outputs.result).num }} | |
| PR_repo: ${{ fromJSON(steps.comment-branch.outputs.result).repo }} | |
| permissions: | |
| pull-requests: read | |
| steps: | |
| - uses: actions/github-script@v4 | |
| id: comment-branch | |
| with: | |
| script: | | |
| const result = await github.pulls.get ({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| pull_number: context.issue.number | |
| }) | |
| return { repo: result.data.head.repo.full_name, num: result.data.number, sha: result.data.head.sha, ref: result.data.head.ref } | |
| start-comment: | |
| runs-on: ubuntu-latest | |
| needs: [check-before-build] | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Leave Actions Run Comment | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const runURL = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${{ github.run_id }}`; | |
| const currentTime = new Date().toLocaleString('en-US', { timeZone: 'America/Toronto' }); | |
| const commentBody = `Workflow started at ${currentTime}. [View Actions Run](${runURL}).`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); | |
| build-and-test: | |
| needs: [checkout-branch] | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| # java: [ '17', '21' ] | |
| java: ['17'] | |
| env: | |
| cache-name: cache-yarn | |
| name: Build and test Java ${{ matrix.java }} | |
| permissions: | |
| packages: write | |
| contents: read | |
| pull-requests: write | |
| statuses: write | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| repository: ${{ needs.checkout-branch.outputs.PR_repo }} | |
| ref: ${{ needs.checkout-branch.outputs.PR_head_ref }} | |
| submodules: true | |
| fetch-depth: 0 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| java-version: ${{ matrix.java }} | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - run: git submodule init && git submodule update | |
| - name: Cache yarn packages | |
| uses: actions/cache@v3 | |
| with: | |
| path: "./src/main/webui/.yarn/cache" | |
| key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-build-${{ env.cache-name }}- | |
| ${{ runner.os }}-build- | |
| ${{ runner.os }}- | |
| - name: Initialize web assets | |
| run: | | |
| cd src/main/webui | |
| yarn install && yarn yarn:frzinstall | |
| cd - | |
| - name: Install podman v4 | |
| run: | | |
| echo "deb $OPENSUSE_UNOFFICIAL_LIBCONTAINERS_SOURCE_URL/ /" | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:unstable.list | |
| curl -fsSL $OPENSUSE_UNOFFICIAL_LIBCONTAINERS_KEY_URL | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/devel_kubic_libcontainers_unstable.gpg > /dev/null | |
| sudo apt -y purge podman | |
| sudo apt update && sudo apt -y install podman | |
| - name: Emulate docker with podman | |
| run: | | |
| mkdir -p $HOME/.bin | |
| cat <(echo '#!/usr/bin/env bash') <(echo 'exec podman "$@"') > $HOME/.bin/docker | |
| chmod +x $HOME/.bin/docker | |
| echo "PATH=$HOME/.bin:$PATH" >> "$GITHUB_ENV" | |
| - name: Set up testcontainers for podman | |
| run: | | |
| echo ryuk.container.privileged=true > ~/.testcontainers.properties | |
| echo docker.client.strategy=org.testcontainers.dockerclient.UnixSocketClientProviderStrategy >> ~/.testcontainers.properties | |
| echo testcontainers.reuse.enable=false >> ~/.testcontainers.properties | |
| - name: Start Podman API | |
| run: systemctl --user enable --now podman.socket | |
| - name: Set DOCKER_HOST environment variable | |
| run: echo "DOCKER_HOST=unix:///run/user/$(id -u)/podman/podman.sock" >> "$GITHUB_ENV" | |
| - name: Build application | |
| run: ./mvnw -B -U clean verify | |
| continue-on-error: ${{ matrix.java != '17' }} | |
| - name: Add workflow result as comment on PR | |
| uses: actions/github-script@v6 | |
| if: always() | |
| with: | |
| script: | | |
| const name = '${{github.workflow}}'; | |
| const url = '${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}'; | |
| const success = '${{ job.status }}' === 'success'; | |
| const javaVersion = '${{matrix.java}}'; | |
| const body = `${name}: ${success ? 'All tests pass ✅' : 'At least one test failed ❌'} (JDK${javaVersion})\n${url}`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: body | |
| }) | |
| - name: Set latest commit status as ${{ job.status }} | |
| uses: myrotvorets/set-commit-status-action@master | |
| if: always() | |
| with: | |
| sha: ${{ needs.checkout-branch.outputs.PR_head_sha}} | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| status: ${{ job.status }} | |
| update-schemas: | |
| needs: [checkout-branch] | |
| runs-on: ubuntu-latest | |
| outputs: | |
| OPENAPI_STATUS: ${{ steps.schema-update.outputs.openapi_status }} | |
| OPENAPI_DIFF_FILE: ${{ steps.schema-update.outputs.openapi_diff_file }} | |
| GRAPHQL_STATUS: ${{ steps.schema-update.outputs.graphql_status }} | |
| GRAPHQL_DIFF_FILE: ${{ steps.schema-update.outputs.graphql_diff_file }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| repository: ${{ needs.checkout-branch.outputs.PR_repo }} | |
| ref: ${{ needs.checkout-branch.outputs.PR_head_ref }} | |
| submodules: true | |
| fetch-depth: 0 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| cache: 'maven' | |
| - run: git submodule init && git submodule update | |
| - name: Cache yarn packages | |
| uses: actions/cache@v3 | |
| with: | |
| path: "./src/main/webui/.yarn/cache" | |
| key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-build-${{ env.cache-name }}- | |
| ${{ runner.os }}-build- | |
| ${{ runner.os }}- | |
| - name: Initialize web assets | |
| run: | | |
| cd src/main/webui | |
| yarn install && yarn yarn:frzinstall | |
| cd - | |
| - name: Update schemas | |
| id: schema-update | |
| run: | | |
| set -x | |
| mkdir "${HOME}/bin" | |
| wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 -O "${HOME}/bin/yq" | |
| chmod +x "${HOME}/bin/yq" | |
| export PATH="${HOME}/bin:${PATH}" | |
| bash /home/runner/work/cryostat3/cryostat3/schema/update.bash 90 15 | |
| set +e | |
| git diff -U10 --exit-code /home/runner/work/cryostat3/cryostat3/schema/openapi.yaml > /home/runner/work/openapi.diff | |
| echo "openapi_status=$?" >> "$GITHUB_OUTPUT" | |
| echo "openapi_diff_file=openapi.diff" >> "$GITHUB_OUTPUT" | |
| git diff -U10 --exit-code /home/runner/work/cryostat3/cryostat3/schema/schema.graphql > /home/runner/work/graphql.diff | |
| echo "graphql_status=$?" >> "$GITHUB_OUTPUT" | |
| echo "graphql_diff_file=graphql.diff" >> "$GITHUB_OUTPUT" | |
| - uses: actions/upload-artifact@v3 | |
| with: | |
| name: openapi-diff | |
| path: /home/runner/work/openapi.diff | |
| - uses: actions/upload-artifact@v3 | |
| with: | |
| name: graphql-diff | |
| path: /home/runner/work/graphql.diff | |
| compare-openapi-schema: | |
| needs: [update-schemas] | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: openapi-diff | |
| - name: Comment schema check result | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const diffFmt = s => { | |
| return "```diff\n" + s + "\n```"; | |
| }; | |
| const commentBody = ${{ needs.update-schemas.outputs.OPENAPI_STATUS }} == '0' | |
| ? `No OpenAPI schema changes detected.` | |
| : `OpenAPI schema change detected:\n\n${diffFmt(require('fs').readFileSync('${{ needs.update-schemas.outputs.OPENAPI_DIFF_FILE }}'))}`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); | |
| compare-graphql-schema: | |
| needs: [update-schemas] | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - uses: actions/download-artifact@v3 | |
| with: | |
| name: graphql-diff | |
| - name: Comment schema check result | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const diffFmt = s => { | |
| return "```diff\n" + s + "\n```"; | |
| }; | |
| const commentBody = ${{ needs.update-schemas.outputs.GRAPHQL_STATUS }} == '0' | |
| ? `No GraphQL schema changes detected.` | |
| : `GraphQL schema change detected:\n\n${diffFmt(require('fs').readFileSync('${{ needs.update-schemas.outputs.GRAPHQL_DIFF_FILE }}'))}`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); |