-
Notifications
You must be signed in to change notification settings - Fork 4.4k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Backport of ci: increase ENT runner size for xl to match OSS. have bu…
…ild-distros use xl to match CircleCI into release/1.15.x (#16924) * no-op commit due to failed cherry-picking * increase ENT runner size for xl to match OSS. have guild-distros use xl to match CircleCI (#16920) * ci: Add success jobs. make go-test-enterprise conditional. build-distros and go-tests trigger on push to main and release branches (#16905) * Add go-tests-success job and make go-test-enterprise conditional * fixing lint-32bit reference * fixing reference to -go-test-troubleshoot * add all jobs that fan out. * fixing success job to need set up * add echo to success job * adding success jobs to build-artifacts, build-distros, and frontend. * changing the name of the job in verify ci to be consistent with other workflows * enable go-tests, build-distros, and verify-ci to run on merge to main and release branches because they currently do not with just the pull_request trigger --------- Co-authored-by: temp <temp@hashicorp.com> Co-authored-by: John Murret <john.murret@hashicorp.com>
- Loading branch information
3 people
committed
Apr 7, 2023
1 parent
3c35238
commit fa2dda7
Showing
6 changed files
with
205 additions
and
7 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,123 @@ | ||
| # Copyright (c) HashiCorp, Inc. | ||
| # SPDX-License-Identifier: MPL-2.0 | ||
|
|
||
| # This workflow builds a dev binary and distributes a Docker image on every push to the main branch. | ||
| name: build-artifacts | ||
|
|
||
| on: | ||
| push: | ||
| branches: | ||
| - main | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| env: | ||
| GOPRIVATE: github.com/hashicorp | ||
|
|
||
| jobs: | ||
| setup: | ||
| name: Setup | ||
| runs-on: ubuntu-latest | ||
| outputs: | ||
| compute-small: ${{ steps.setup-outputs.outputs.compute-small }} | ||
| compute-medium: ${{ steps.setup-outputs.outputs.compute-medium }} | ||
| compute-large: ${{ steps.setup-outputs.outputs.compute-large }} | ||
| compute-xl: ${{ steps.setup-outputs.outputs.compute-xl }} | ||
| steps: | ||
| - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # pin@v3.3.0 | ||
| - id: setup-outputs | ||
| name: Setup outputs | ||
| run: ./.github/scripts/get_runner_classes.sh | ||
|
|
||
| dev-build-push: | ||
| needs: setup | ||
| runs-on: ${{ fromJSON(needs.setup.outputs.compute-large) }} | ||
| permissions: | ||
| id-token: write # NOTE: this permission is explicitly required for Vault auth. | ||
| contents: read | ||
| steps: | ||
| # NOTE: ENT specific step as we store secrets in Vault. | ||
| - name: Authenticate to Vault | ||
| if: ${{ endsWith(github.repository, '-enterprise') }} | ||
| id: vault-auth | ||
| run: vault-auth | ||
|
|
||
| # NOTE: ENT specific step as we store secrets in Vault. | ||
| - name: Fetch Secrets | ||
| if: ${{ endsWith(github.repository, '-enterprise') }} | ||
| id: secrets | ||
| uses: hashicorp/vault-action@v2.5.0 | ||
| with: | ||
| url: ${{ steps.vault-auth.outputs.addr }} | ||
| caCertificate: ${{ steps.vault-auth.outputs.ca_certificate }} | ||
| token: ${{ steps.vault-auth.outputs.token }} | ||
| secrets: | | ||
| kv/data/github/${{ github.repository }}/dockerhub username | DOCKERHUB_USERNAME; | ||
| kv/data/github/${{ github.repository }}/dockerhub token | DOCKERHUB_TOKEN; | ||
| - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # pin@v3.3.0 | ||
|
|
||
| # NOTE: ENT specific step as we need to set elevated GitHub permissions. | ||
| - name: Setup Git | ||
| if: ${{ endsWith(github.repository, '-enterprise') }} | ||
| run: git config --global url."https://${{ secrets.ELEVATED_GITHUB_TOKEN }}:@github.com".insteadOf "https://github.com" | ||
|
|
||
| - uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # pin@v3.5.0 | ||
| with: | ||
| go-version-file: 'go.mod' | ||
|
|
||
| - name: Build dev binary | ||
| run: make dev | ||
|
|
||
| - name: Set env vars | ||
| run: | | ||
| echo "SHORT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV | ||
| echo "GITHUB_BUILD_URL=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" >> $GITHUB_ENV | ||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@f03ac48505955848960e80bbb68046aa35c7b9e7 # pin@v2.4.1 | ||
|
|
||
| # NOTE: conditional specific logic as we store secrets in Vault in ENT and use GHA secrets in OSS. | ||
| - name: Login to Docker Hub | ||
| uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a # pin@v2.1.0 | ||
| with: | ||
| username: ${{ endsWith(github.repository, '-enterprise') && steps.secrets.outputs.DOCKERHUB_USERNAME || secrets.DOCKERHUB_USERNAME }} | ||
| password: ${{ endsWith(github.repository, '-enterprise') && steps.secrets.outputs.DOCKERHUB_TOKEN || secrets.DOCKERHUB_TOKEN }} | ||
|
|
||
| - name: Docker build and push | ||
| uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 # pin@v4.0.0 | ||
| with: | ||
| context: ./bin | ||
| file: ./build-support/docker/Consul-Dev.dockerfile | ||
| labels: COMMIT_SHA=${{ github.sha }},GITHUB_BUILD_URL=${{ env.GITHUB_BUILD_URL }} | ||
| push: true | ||
| tags: | | ||
| hashicorpdev/${{ github.event.repository.name }}:${{ env.SHORT_SHA }} | ||
| hashicorpdev/${{ github.event.repository.name }}:latest | ||
| # This is job is required for branch protection as a required gihub check | ||
| # because GitHub actions show up as checks at the job level and not the | ||
| # workflow level. This is currently a feature request: | ||
| # https://github.com/orgs/community/discussions/12395 | ||
| # | ||
| # This job must: | ||
| # - be placed after the fanout of a workflow so that everything fans back in | ||
| # to this job. | ||
| # - "need" any job that is part of the fan out / fan in | ||
| # - implement the if logic because we have conditional jobs | ||
| # (go-test-enteprise) that this job needs and this would potentially get | ||
| # skipped if a previous job got skipped. So we use the if clause to make | ||
| # sure it does not get skipped. | ||
|
|
||
| build-artifacts-success: | ||
| needs: | ||
| - setup | ||
| - dev-build-push | ||
| runs-on: ${{ fromJSON(needs.setup.outputs.compute-small) }} | ||
| if: | | ||
| (always() && ! cancelled()) && | ||
| !contains(needs.*.result, 'failure') && | ||
| !contains(needs.*.result, 'cancelled') | ||
| steps: | ||
| - run: echo "build-artifacts succeeded" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters