4f4417bd95
This PR was automatically generated by the update-native-provider-workflows workflow in the pulumi/ci-mgmt repo, from commit f96fe3787b1f8929df4710c19ce2bb436777adce.
647 lines
24 KiB
YAML
647 lines
24 KiB
YAML
# WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt
|
|
|
|
name: release
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*.*.*
|
|
- "!v*.*.*-**"
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
|
|
PROVIDER: docker-build
|
|
PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
|
|
PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
|
|
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }}
|
|
PYPI_USERNAME: __token__
|
|
PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
|
|
TRAVIS_OS_NAME: linux
|
|
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
|
|
PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
|
|
PUBLISH_REPO_USERNAME: ${{ secrets.OSSRH_USERNAME }}
|
|
PUBLISH_REPO_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
|
|
SIGNING_KEY_ID: ${{ secrets.JAVA_SIGNING_KEY_ID }}
|
|
SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
|
|
SIGNING_PASSWORD: ${{ secrets.JAVA_SIGNING_PASSWORD }}
|
|
GOVERSION: 1.21.x
|
|
NODEVERSION: 20.x
|
|
PYTHONVERSION: "3.11"
|
|
DOTNETVERSION: |
|
|
6.0.x
|
|
3.1.301
|
|
JAVAVERSION: "11"
|
|
AWS_REGION: us-west-2
|
|
PULUMI_API: https://api.pulumi-staging.io
|
|
ARM_CLIENT_ID: 30e520fa-12b4-4e21-b473-9426c5ac2e1e
|
|
ARM_SUBSCRIPTION_ID: 0282681f-7a9e-424b-80b2-96babd57a8a1
|
|
ARM_TENANT_ID: 706143bc-e1d4-4593-aee2-c9dc60ab9be7
|
|
ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
|
|
AZURE_LOCATION: westus
|
|
DIGITALOCEAN_TOKEN: ${{ secrets.DIGITALOCEAN_TOKEN }}
|
|
GOOGLE_CI_SERVICE_ACCOUNT_EMAIL: pulumi-ci@pulumi-ci-gcp-provider.iam.gserviceaccount.com
|
|
GOOGLE_CI_WORKLOAD_IDENTITY_POOL: pulumi-ci
|
|
GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER: pulumi-ci
|
|
GOOGLE_PROJECT: pulumi-ci-gcp-provider
|
|
GOOGLE_PROJECT_NUMBER: 895284651812
|
|
GOOGLE_REGION: us-central1
|
|
GOOGLE_ZONE: us-central1-a
|
|
DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
|
|
jobs:
|
|
prerequisites:
|
|
runs-on: ubuntu-latest
|
|
name: prerequisites
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6.0.0
|
|
- if: github.event_name == 'pull_request'
|
|
name: Install Schema Tools
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/schema-tools
|
|
- name: Build codegen binaries
|
|
run: make codegen
|
|
- name: Build Schema
|
|
run: make generate_schema
|
|
- if: github.event_name == 'pull_request'
|
|
name: Check Schema is Valid
|
|
run: >-
|
|
echo 'SCHEMA_CHANGES<<EOF' >> $GITHUB_ENV
|
|
|
|
schema-tools compare -p ${{ env.PROVIDER }} -o ${{ github.event.repository.default_branch }} -n --local-path=provider/cmd/pulumi-resource-${{ env.PROVIDER }}/schema.json >> $GITHUB_ENV
|
|
|
|
echo 'EOF' >> $GITHUB_ENV
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
|
|
- if: github.event_name == 'pull_request'
|
|
name: Comment on PR with Details of Schema Check
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
with:
|
|
message: |
|
|
${{ env.SCHEMA_CHANGES }}
|
|
comment-tag: schemaCheck
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
- if: contains(env.SCHEMA_CHANGES, 'Looking good! No breaking changes found.') &&
|
|
github.actor == 'pulumi-bot'
|
|
name: Add label if no breaking changes
|
|
uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3
|
|
with:
|
|
labels: impact/no-changelog-required
|
|
number: ${{ github.event.issue.number }}
|
|
github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Build Provider
|
|
run: make provider
|
|
- name: Check worktree clean
|
|
id: worktreeClean
|
|
uses: pulumi/git-status-check-action@54000b91124a8dd9fd6a872cb41f5dd246a46e7c # v1.1.1
|
|
with:
|
|
allowed-changes: |-
|
|
sdk/**/pulumi-plugin.json
|
|
sdk/dotnet/Pulumi.*.csproj
|
|
sdk/go/**/pulumiUtilities.go
|
|
sdk/nodejs/package.json
|
|
sdk/python/pyproject.toml
|
|
- run: git status --porcelain
|
|
- name: Tar provider binaries
|
|
run: tar -zcf ${{ github.workspace }}/bin/provider.tar.gz -C ${{
|
|
github.workspace}}/bin/ pulumi-resource-${{ env.PROVIDER }}
|
|
pulumi-gen-${{ env.PROVIDER}}
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
|
|
with:
|
|
name: pulumi-${{ env.PROVIDER }}-provider.tar.gz
|
|
path: ${{ github.workspace }}/bin/provider.tar.gz
|
|
- name: Test Provider Library
|
|
run: make test_provider
|
|
- name: Upload coverage reports to Codecov
|
|
uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
|
|
env:
|
|
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in building provider prerequisites
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
build_sdks:
|
|
needs: prerequisites
|
|
runs-on: pulumi-ubuntu-8core
|
|
strategy:
|
|
fail-fast: true
|
|
matrix:
|
|
language:
|
|
- nodejs
|
|
- python
|
|
- dotnet
|
|
- go
|
|
- java
|
|
name: build_sdks
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6.0.0
|
|
- name: Setup Node
|
|
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
|
|
with:
|
|
node-version: ${{ env.NODEVERSION }}
|
|
registry-url: https://registry.npmjs.org
|
|
- name: Setup DotNet
|
|
uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0
|
|
with:
|
|
dotnet-version: ${{ env.DOTNETVERSION }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
|
|
with:
|
|
python-version: ${{ env.PYTHONVERSION }}
|
|
- name: Setup Java
|
|
uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
|
|
with:
|
|
java-version: ${{ env.JAVAVERSION }}
|
|
distribution: temurin
|
|
cache: gradle
|
|
- name: Setup Gradle
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
with:
|
|
gradle-version: "7.6"
|
|
- name: Download provider + tfgen binaries
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: pulumi-${{ env.PROVIDER }}-provider.tar.gz
|
|
path: ${{ github.workspace }}/bin
|
|
- name: UnTar provider binaries
|
|
run: tar -zxf ${{ github.workspace }}/bin/provider.tar.gz -C ${{
|
|
github.workspace}}/bin
|
|
- name: Restore Binary Permissions
|
|
run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print
|
|
-exec chmod +x {} \;
|
|
- name: Generate SDK
|
|
run: make generate_${{ matrix.language }}
|
|
- name: Build SDK
|
|
run: make build_${{ matrix.language }}
|
|
- name: Check worktree clean
|
|
id: worktreeClean
|
|
uses: pulumi/git-status-check-action@54000b91124a8dd9fd6a872cb41f5dd246a46e7c # v1.1.1
|
|
with:
|
|
allowed-changes: |-
|
|
sdk/**/pulumi-plugin.json
|
|
sdk/dotnet/Pulumi.*.csproj
|
|
sdk/go/**/pulumiUtilities.go
|
|
sdk/nodejs/package.json
|
|
sdk/python/pyproject.toml
|
|
- name: Commit ${{ matrix.language }} SDK changes for Renovate
|
|
if: failure() && steps.worktreeClean.outcome == 'failure' &&
|
|
contains(github.actor, 'renovate')
|
|
shell: bash
|
|
run: >
|
|
git config --global user.email "bot@pulumi.com"
|
|
|
|
git config --global user.name "pulumi-bot"
|
|
|
|
# Stash local changes and check out the PR's branch directly.
|
|
|
|
git stash
|
|
|
|
git fetch
|
|
|
|
git checkout "origin/$HEAD_REF"
|
|
|
|
|
|
# Apply and add our changes, but don't commit any files we expect to
|
|
|
|
# always change due to versioning.
|
|
|
|
git stash pop
|
|
|
|
git add sdk
|
|
|
|
git reset sdk/python/*/pulumi-plugin.json sdk/dotnet/Pulumi.*.csproj sdk/go/*/internal/pulumiUtilities.go sdk/nodejs/package.json sdk/python/pyproject.toml
|
|
|
|
git commit -m 'Commit ${{ matrix.language }} SDK for Renovate'
|
|
|
|
|
|
# Push with pulumi-bot credentials to trigger a re-run of the
|
|
|
|
# workflow. https://github.com/orgs/community/discussions/25702
|
|
|
|
git push https://pulumi-bot:${{ secrets.PULUMI_BOT_TOKEN }}@github.com/${{ github.repository }} "HEAD:$HEAD_REF"
|
|
env:
|
|
HEAD_REF: ${{ github.head_ref }}
|
|
- run: git status --porcelain
|
|
- name: Tar SDK folder
|
|
run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} .
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
|
|
with:
|
|
name: ${{ matrix.language }}-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure while building SDKs
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
test:
|
|
runs-on: pulumi-ubuntu-8core
|
|
needs:
|
|
- build_sdks
|
|
strategy:
|
|
fail-fast: true
|
|
matrix:
|
|
language:
|
|
- nodejs
|
|
- python
|
|
- dotnet
|
|
- go
|
|
- java
|
|
name: test
|
|
permissions:
|
|
contents: read
|
|
id-token: write
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6.0.0
|
|
- name: Setup Node
|
|
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
|
|
with:
|
|
node-version: ${{ env.NODEVERSION }}
|
|
registry-url: https://registry.npmjs.org
|
|
- name: Setup DotNet
|
|
uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0
|
|
with:
|
|
dotnet-version: ${{ env.DOTNETVERSION }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
|
|
with:
|
|
python-version: ${{ env.PYTHONVERSION }}
|
|
- name: Setup Java
|
|
uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
|
|
with:
|
|
java-version: ${{ env.JAVAVERSION }}
|
|
distribution: temurin
|
|
cache: gradle
|
|
- name: Setup Gradle
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
with:
|
|
gradle-version: "7.6"
|
|
- name: Download provider + tfgen binaries
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: pulumi-${{ env.PROVIDER }}-provider.tar.gz
|
|
path: ${{ github.workspace }}/bin
|
|
- name: UnTar provider binaries
|
|
run: tar -zxf ${{ github.workspace }}/bin/provider.tar.gz -C ${{
|
|
github.workspace}}/bin
|
|
- name: Restore Binary Permissions
|
|
run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print
|
|
-exec chmod +x {} \;
|
|
- name: Download SDK
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: ${{ matrix.language }}-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: UnTar SDK folder
|
|
run: tar -zxf ${{ github.workspace}}/sdk/${{ matrix.language}}.tar.gz -C ${{
|
|
github.workspace}}/sdk/${{ matrix.language}}
|
|
- name: Update path
|
|
run: echo "${{ github.workspace }}/bin" >> $GITHUB_PATH
|
|
- name: Install Node dependencies
|
|
run: yarn global add typescript
|
|
- run: dotnet nuget add source ${{ github.workspace }}/nuget
|
|
- name: Install Python deps
|
|
run: |-
|
|
pip3 install virtualenv==20.0.23
|
|
pip3 install pipenv
|
|
- name: Install dependencies
|
|
run: make install_${{ matrix.language}}_sdk
|
|
- name: Configure AWS Credentials
|
|
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
|
|
with:
|
|
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
aws-region: ${{ env.AWS_REGION }}
|
|
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
role-duration-seconds: 3600
|
|
role-session-name: ${{ env.PROVIDER }}@githubActions
|
|
role-to-assume: ${{ secrets.AWS_CI_ROLE_ARN }}
|
|
- name: Authenticate to Google Cloud
|
|
uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2.1.7
|
|
with:
|
|
workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER
|
|
}}/locations/global/workloadIdentityPools/${{
|
|
env.GOOGLE_CI_WORKLOAD_IDENTITY_POOL }}/providers/${{
|
|
env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }}
|
|
service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }}
|
|
- name: Setup gcloud auth
|
|
uses: google-github-actions/setup-gcloud@6189d56e4096ee891640bb02ac264be376592d6a # v2.1.2
|
|
with:
|
|
install_components: gke-gcloud-auth-plugin
|
|
- name: Install gotestfmt
|
|
uses: GoTestTools/gotestfmt-action@v2
|
|
with:
|
|
version: v2.5.0
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Run tests
|
|
run: >-
|
|
set -euo pipefail
|
|
|
|
cd examples && go test -count=1 -cover -timeout 2h -tags=${{ matrix.language }} -parallel 4 .
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in SDK tests
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
publish:
|
|
runs-on: ubuntu-latest
|
|
needs: test
|
|
name: publish
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Clear GitHub Actions Ubuntu runner disk space
|
|
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
|
|
with:
|
|
tool-cache: false
|
|
dotnet: false
|
|
android: true
|
|
haskell: true
|
|
swap-storage: true
|
|
large-packages: false
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6.0.0
|
|
- name: Configure AWS Credentials
|
|
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
|
|
with:
|
|
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
aws-region: us-east-2
|
|
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
role-duration-seconds: 7200
|
|
role-session-name: ${{ env.PROVIDER }}@githubActions
|
|
role-external-id: upload-pulumi-release
|
|
role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }}
|
|
- name: Run GoReleaser
|
|
uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5.1.0
|
|
env:
|
|
GORELEASER_CURRENT_TAG: v${{ steps.version.outputs.version }}
|
|
with:
|
|
args: -p 3 release --clean --timeout 60m0s
|
|
version: latest
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in publishing binaries
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
publish_sdk:
|
|
runs-on: ubuntu-latest
|
|
needs: publish
|
|
name: publish_sdks
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Checkout Scripts Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
path: ci-scripts
|
|
repository: pulumi/scripts
|
|
- run: echo "ci-scripts" >> .git/info/exclude
|
|
- name: Install Go
|
|
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6.0.0
|
|
- name: Setup Node
|
|
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
|
|
with:
|
|
node-version: ${{ env.NODEVERSION }}
|
|
registry-url: https://registry.npmjs.org
|
|
- name: Setup DotNet
|
|
uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25 # v4.1.0
|
|
with:
|
|
dotnet-version: ${{ env.DOTNETVERSION }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
|
|
with:
|
|
python-version: ${{ env.PYTHONVERSION }}
|
|
- name: Download python SDK
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: python-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress python SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/python.tar.gz -C
|
|
${{github.workspace}}/sdk/python
|
|
- name: Download dotnet SDK
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: dotnet-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress dotnet SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/dotnet.tar.gz -C
|
|
${{github.workspace}}/sdk/dotnet
|
|
- name: Download nodejs SDK
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: nodejs-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress nodejs SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/nodejs.tar.gz -C
|
|
${{github.workspace}}/sdk/nodejs
|
|
- name: Install Twine
|
|
run: python -m pip install twine==5.0.0
|
|
- name: Publish SDKs
|
|
run: ./ci-scripts/ci/publish-tfgen-package ${{ github.workspace }}
|
|
env:
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
PYPI_PUBLISH_ARTIFACTS: all
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in publishing SDK
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
publish_java_sdk:
|
|
runs-on: ubuntu-latest
|
|
continue-on-error: true
|
|
needs: publish
|
|
name: publish_java_sdk
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6.0.0
|
|
- name: Setup Java
|
|
uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
|
|
with:
|
|
java-version: ${{ env.JAVAVERSION }}
|
|
distribution: temurin
|
|
cache: gradle
|
|
- name: Setup Gradle
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
with:
|
|
gradle-version: "7.6"
|
|
- name: Download java SDK
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: java-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress java SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/java.tar.gz -C
|
|
${{github.workspace}}/sdk/java
|
|
- name: Publish Java SDK
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
env:
|
|
PACKAGE_VERSION: ${{ env.PROVIDER_VERSION }}
|
|
with:
|
|
arguments: publishToSonatype closeAndReleaseSonatypeStagingRepository
|
|
build-root-directory: ./sdk/java
|
|
gradle-version: 7.4.1
|
|
publish_go_sdk:
|
|
runs-on: ubuntu-latest
|
|
name: publish-go-sdk
|
|
needs: publish_sdk
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@0391d47b9b0d865d33dd0a295b1fcf9f7021dd4c # v1.5.3
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Download go SDK
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: go-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress go SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/go.tar.gz -C
|
|
${{github.workspace}}/sdk/go
|
|
- name: Publish Go SDK
|
|
uses: pulumi/publish-go-sdk-action@v1
|
|
with:
|
|
repository: ${{ github.repository }}
|
|
base-ref: ${{ github.sha }}
|
|
source: sdk/go/dockerbuild
|
|
path: sdk/go/dockerbuild
|
|
version: ${{ steps.version.outputs.version }}
|
|
additive: false
|
|
files: "**"
|
|
dispatch_docs_build:
|
|
runs-on: ubuntu-latest
|
|
needs: publish_go_sdk
|
|
steps:
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@cd6b2b78ad38bdd294341cda064ec0692b06215b # v1.14.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Dispatch Event
|
|
run: pulumictl create docs-build pulumi-${{ env.PROVIDER }}
|
|
${GITHUB_REF#refs/tags/}
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
|
|
name: dispatch_docs_build
|