.prow.yaml

presubmits:
  - name: pre-commit
    decorate: true
    skip_report: false
    always_run: true
    context: pre-commit
    spec:
      containers:
        - image: quay.io/thoth-station/thoth-precommit-py38:v0.13.0
          command:
            - "pre-commit"
            - "run"
            - "--all-files"
  - name: peribolos
    decorate: true
    run_if_changed: github-config.yaml
    skip_report: false
    context: peribolos
    spec:
      containers:
        - image: gcr.io/k8s-prow/peribolos:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/peribolos --config-path github-config.yaml \
                --github-endpoint=http://ghproxy \
                --github-endpoint=https://api.github.com \
                --github-token-path /etc/github/oauth \
                --min-admins=2 \
                --maximum-removal-delta=0.15 \
                --require-self=true \
                --fix-org \
                --fix-org-members \
                --fix-repos \
                --fix-teams \
                --fix-team-members \
                --fix-team-repos \
                --allow-repo-archival
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: oauth-token
  - name: labels
    decorate: true
    run_if_changed: labels.yaml
    skip_report: false
    context: labels
    spec:
      containers:
        - image: gcr.io/k8s-prow/label_sync:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/label_sync \
              --config=labels.yaml \
              --orgs=open-services-group \
              --endpoint=http://ghproxy \
              --endpoint=https://api.github.com \
              --token=/etc/github/oauth
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: oauth-token
  - name: community-tools
    decorate: true
    run_if_changed: sigs.yaml
    skip_report: false
    context: community-tools
    spec:
      containers:
        - image: quay.io/open-services-group/community-tooling:v0.1.0-dev
          command:
            - /generator
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: oauth-token

postsubmits:
  - name: peribolos
    decorate: true
    run_if_changed: ^github-config\.yaml$
    skip_report: false
    context: peribolos
    branches:
      - ^main$
    spec:
      containers:
        - image: gcr.io/k8s-prow/peribolos:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/peribolos --config-path github-config.yaml \
                --github-endpoint=http://ghproxy \
                --github-endpoint=https://api.github.com \
                --github-token-path /etc/github/oauth \
                --min-admins=2 \
                --maximum-removal-delta=0.15 \
                --require-self=true \
                --fix-org \
                --fix-org-members \
                --fix-repos \
                --fix-teams \
                --fix-team-members \
                --fix-team-repos \
                --allow-repo-archival \
                --confirm
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: oauth-token
  - name: labels
    decorate: true
    run_if_changed: ^(github-config|labels)\.yaml$
    skip_report: false
    context: labels
    branches:
      - ^main$
    spec:
      containers:
        - image: gcr.io/k8s-prow/label_sync:latest
          command:
            - /bin/sh
          args:
            - -c
            - |
              set -ex
              /ko-app/label_sync \
              --config=labels.yaml \
              --orgs=open-services-group \
              --endpoint=http://ghproxy \
              --endpoint=https://api.github.com \
              --token=/etc/github/oauth \
              --confirm
          volumeMounts:
            - name: github-oauth
              mountPath: /etc/github
      volumes:
        - name: github-oauth
          secret:
            secretName: oauth-token