706136a454
This PR was automatically generated by the update-native-provider-workflows workflow in the pulumi/ci-mgmt repo, from commit 36cb726549926a647ec654cce5548a346edd0b64.
700 lines
26 KiB
YAML
700 lines
26 KiB
YAML
# WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt
|
|
|
|
name: release
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*.*.*
|
|
- "!v*.*.*-**"
|
|
env:
|
|
AZURE_SIGNING_CLIENT_ID: ${{ secrets.AZURE_SIGNING_CLIENT_ID }}
|
|
AZURE_SIGNING_CLIENT_SECRET: ${{ secrets.AZURE_SIGNING_CLIENT_SECRET }}
|
|
AZURE_SIGNING_TENANT_ID: ${{ secrets.AZURE_SIGNING_TENANT_ID }}
|
|
AZURE_SIGNING_KEY_VAULT_URI: ${{ secrets.AZURE_SIGNING_KEY_VAULT_URI }}
|
|
SKIP_SIGNING: ${{ secrets.AZURE_SIGNING_CLIENT_ID == '' &&
|
|
secrets.AZURE_SIGNING_CLIENT_SECRET == '' && secrets.AZURE_SIGNING_TENANT_ID
|
|
== '' && secrets.AZURE_SIGNING_KEY_VAULT_URI == '' }}
|
|
GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
|
|
PROVIDER: docker-build
|
|
PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
|
|
PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
|
|
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }}
|
|
PYPI_USERNAME: __token__
|
|
PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
|
|
TRAVIS_OS_NAME: linux
|
|
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
|
|
PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
|
|
PUBLISH_REPO_USERNAME: ${{ secrets.OSSRH_USERNAME }}
|
|
PUBLISH_REPO_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
|
|
SIGNING_KEY_ID: ${{ secrets.JAVA_SIGNING_KEY_ID }}
|
|
SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
|
|
SIGNING_PASSWORD: ${{ secrets.JAVA_SIGNING_PASSWORD }}
|
|
GOVERSION: 1.21.x
|
|
NODEVERSION: 20.x
|
|
PYTHONVERSION: "3.11"
|
|
DOTNETVERSION: 8.0.x
|
|
JAVAVERSION: "11"
|
|
AWS_REGION: us-west-2
|
|
PULUMI_API: https://api.pulumi-staging.io
|
|
ARM_CLIENT_ID: 30e520fa-12b4-4e21-b473-9426c5ac2e1e
|
|
ARM_SUBSCRIPTION_ID: 0282681f-7a9e-424b-80b2-96babd57a8a1
|
|
ARM_TENANT_ID: 706143bc-e1d4-4593-aee2-c9dc60ab9be7
|
|
ARM_CLIENT_SECRET: ${{ secrets.ARM_CLIENT_SECRET }}
|
|
AZURE_LOCATION: westus
|
|
DIGITALOCEAN_TOKEN: ${{ secrets.DIGITALOCEAN_TOKEN }}
|
|
GOOGLE_CI_SERVICE_ACCOUNT_EMAIL: pulumi-ci@pulumi-ci-gcp-provider.iam.gserviceaccount.com
|
|
GOOGLE_CI_WORKLOAD_IDENTITY_POOL: pulumi-ci
|
|
GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER: pulumi-ci
|
|
GOOGLE_PROJECT: pulumi-ci-gcp-provider
|
|
GOOGLE_PROJECT_NUMBER: 895284651812
|
|
GOOGLE_REGION: us-central1
|
|
GOOGLE_ZONE: us-central1-a
|
|
DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
|
|
jobs:
|
|
prerequisites:
|
|
runs-on: ubuntu-latest
|
|
name: prerequisites
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0
|
|
- if: github.event_name == 'pull_request'
|
|
name: Install Schema Tools
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/schema-tools
|
|
- name: Build codegen binaries
|
|
run: make codegen
|
|
- name: Build Schema
|
|
run: make generate_schema
|
|
- if: github.event_name == 'pull_request'
|
|
name: Check Schema is Valid
|
|
run: >-
|
|
echo 'SCHEMA_CHANGES<<EOF' >> $GITHUB_ENV
|
|
|
|
schema-tools compare -p ${{ env.PROVIDER }} -o ${{ github.event.repository.default_branch }} -n --local-path=provider/cmd/pulumi-resource-${{ env.PROVIDER }}/schema.json >> $GITHUB_ENV
|
|
|
|
echo 'EOF' >> $GITHUB_ENV
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
|
|
- if: github.event_name == 'pull_request' && github.actor != 'dependabot[bot]'
|
|
name: Comment on PR with Details of Schema Check
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
with:
|
|
message: |
|
|
${{ env.SCHEMA_CHANGES }}
|
|
comment-tag: schemaCheck
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
- if: contains(env.SCHEMA_CHANGES, 'Looking good! No breaking changes found.') &&
|
|
github.actor == 'pulumi-bot'
|
|
name: Add label if no breaking changes
|
|
uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3
|
|
with:
|
|
labels: impact/no-changelog-required
|
|
number: ${{ github.event.issue.number }}
|
|
github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Build Provider
|
|
run: make provider
|
|
- name: Check worktree clean
|
|
id: worktreeClean
|
|
uses: pulumi/git-status-check-action@54000b91124a8dd9fd6a872cb41f5dd246a46e7c # v1.1.1
|
|
with:
|
|
allowed-changes: |-
|
|
sdk/**/pulumi-plugin.json
|
|
sdk/dotnet/Pulumi.*.csproj
|
|
sdk/go/**/pulumiUtilities.go
|
|
sdk/nodejs/package.json
|
|
sdk/python/pyproject.toml
|
|
- name: Commit ${{ matrix.language }} SDK changes for Renovate
|
|
if: failure() && steps.worktreeClean.outcome == 'failure' &&
|
|
contains(github.actor, 'renovate') && github.event_name ==
|
|
'pull_request'
|
|
shell: bash
|
|
run: >
|
|
git diff --quiet -- sdk && echo "no changes to sdk" && exit
|
|
|
|
git config --global user.email "bot@pulumi.com"
|
|
|
|
git config --global user.name "pulumi-bot"
|
|
|
|
# Stash local changes and check out the PR's branch directly.
|
|
|
|
git stash
|
|
|
|
git fetch
|
|
|
|
git checkout "origin/$HEAD_REF"
|
|
|
|
|
|
# Apply and add our changes, but don't commit any files we expect to
|
|
|
|
# always change due to versioning.
|
|
|
|
git stash pop
|
|
|
|
git add sdk
|
|
|
|
git reset sdk/python/*/pulumi-plugin.json sdk/python/pyproject.toml sdk/dotnet/pulumi-plugin.json sdk/dotnet/Pulumi.*.csproj sdk/go/*/pulumi-plugin.json sdk/go/*/internal/pulumiUtilities.go sdk/nodejs/package.json
|
|
|
|
git commit -m 'Commit ${{ matrix.language }} SDK for Renovate'
|
|
|
|
|
|
# Push with pulumi-bot credentials to trigger a re-run of the
|
|
|
|
# workflow. https://github.com/orgs/community/discussions/25702
|
|
|
|
git push https://pulumi-bot:${{ secrets.PULUMI_BOT_TOKEN }}@github.com/${{ github.repository }} "HEAD:$HEAD_REF"
|
|
env:
|
|
HEAD_REF: ${{ github.head_ref }}
|
|
- run: git status --porcelain
|
|
- name: Tar provider binaries
|
|
run: tar -zcf ${{ github.workspace }}/bin/provider.tar.gz -C ${{
|
|
github.workspace}}/bin/ pulumi-resource-${{ env.PROVIDER }}
|
|
pulumi-gen-${{ env.PROVIDER}}
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
|
with:
|
|
name: pulumi-${{ env.PROVIDER }}-provider.tar.gz
|
|
path: ${{ github.workspace }}/bin/provider.tar.gz
|
|
- name: Test Provider Library
|
|
run: make test_provider
|
|
- name: Upload coverage reports to Codecov
|
|
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
|
|
env:
|
|
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in building provider prerequisites
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
build_sdks:
|
|
needs: prerequisites
|
|
runs-on: pulumi-ubuntu-8core
|
|
strategy:
|
|
fail-fast: ${{ ! contains(github.actor, 'renovate') }}
|
|
matrix:
|
|
language:
|
|
- nodejs
|
|
- python
|
|
- dotnet
|
|
- go
|
|
- java
|
|
name: build_sdks
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0
|
|
- name: Setup Node
|
|
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
|
|
with:
|
|
node-version: ${{ env.NODEVERSION }}
|
|
registry-url: https://registry.npmjs.org
|
|
- name: Setup DotNet
|
|
uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
|
|
with:
|
|
dotnet-version: ${{ env.DOTNETVERSION }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
|
|
with:
|
|
python-version: ${{ env.PYTHONVERSION }}
|
|
- name: Setup Java
|
|
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
|
|
with:
|
|
java-version: ${{ env.JAVAVERSION }}
|
|
distribution: temurin
|
|
cache: gradle
|
|
- name: Setup Gradle
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
with:
|
|
gradle-version: "7.6"
|
|
- name: Download provider + tfgen binaries
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: pulumi-${{ env.PROVIDER }}-provider.tar.gz
|
|
path: ${{ github.workspace }}/bin
|
|
- name: UnTar provider binaries
|
|
run: tar -zxf ${{ github.workspace }}/bin/provider.tar.gz -C ${{
|
|
github.workspace}}/bin
|
|
- name: Restore Binary Permissions
|
|
run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print
|
|
-exec chmod +x {} \;
|
|
- name: Generate SDK
|
|
run: make generate_${{ matrix.language }}
|
|
- name: Build SDK
|
|
run: make build_${{ matrix.language }}
|
|
- name: Check worktree clean
|
|
id: worktreeClean
|
|
uses: pulumi/git-status-check-action@54000b91124a8dd9fd6a872cb41f5dd246a46e7c # v1.1.1
|
|
with:
|
|
allowed-changes: |-
|
|
sdk/**/pulumi-plugin.json
|
|
sdk/dotnet/Pulumi.*.csproj
|
|
sdk/go/**/pulumiUtilities.go
|
|
sdk/nodejs/package.json
|
|
sdk/python/pyproject.toml
|
|
- name: Commit ${{ matrix.language }} SDK changes for Renovate
|
|
if: failure() && steps.worktreeClean.outcome == 'failure' &&
|
|
contains(github.actor, 'renovate') && github.event_name ==
|
|
'pull_request'
|
|
shell: bash
|
|
run: >
|
|
git diff --quiet -- sdk && echo "no changes to sdk" && exit
|
|
|
|
git config --global user.email "bot@pulumi.com"
|
|
|
|
git config --global user.name "pulumi-bot"
|
|
|
|
# Stash local changes and check out the PR's branch directly.
|
|
|
|
git stash
|
|
|
|
git fetch
|
|
|
|
git checkout "origin/$HEAD_REF"
|
|
|
|
|
|
# Apply and add our changes, but don't commit any files we expect to
|
|
|
|
# always change due to versioning.
|
|
|
|
git stash pop
|
|
|
|
git add sdk
|
|
|
|
git reset sdk/python/*/pulumi-plugin.json sdk/python/pyproject.toml sdk/dotnet/pulumi-plugin.json sdk/dotnet/Pulumi.*.csproj sdk/go/*/pulumi-plugin.json sdk/go/*/internal/pulumiUtilities.go sdk/nodejs/package.json
|
|
|
|
git commit -m 'Commit ${{ matrix.language }} SDK for Renovate'
|
|
|
|
|
|
# Push with pulumi-bot credentials to trigger a re-run of the
|
|
|
|
# workflow. https://github.com/orgs/community/discussions/25702
|
|
|
|
git push https://pulumi-bot:${{ secrets.PULUMI_BOT_TOKEN }}@github.com/${{ github.repository }} "HEAD:$HEAD_REF"
|
|
env:
|
|
HEAD_REF: ${{ github.head_ref }}
|
|
- run: git status --porcelain
|
|
- name: Tar SDK folder
|
|
run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} .
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
|
with:
|
|
name: ${{ matrix.language }}-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure while building SDKs
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
test:
|
|
runs-on: pulumi-ubuntu-8core
|
|
needs:
|
|
- build_sdks
|
|
strategy:
|
|
fail-fast: true
|
|
matrix:
|
|
language:
|
|
- nodejs
|
|
- python
|
|
- dotnet
|
|
- go
|
|
- java
|
|
name: test
|
|
permissions:
|
|
contents: read
|
|
id-token: write
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0
|
|
- name: Setup Node
|
|
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
|
|
with:
|
|
node-version: ${{ env.NODEVERSION }}
|
|
registry-url: https://registry.npmjs.org
|
|
- name: Setup DotNet
|
|
uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
|
|
with:
|
|
dotnet-version: ${{ env.DOTNETVERSION }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
|
|
with:
|
|
python-version: ${{ env.PYTHONVERSION }}
|
|
- name: Setup Java
|
|
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
|
|
with:
|
|
java-version: ${{ env.JAVAVERSION }}
|
|
distribution: temurin
|
|
cache: gradle
|
|
- name: Setup Gradle
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
with:
|
|
gradle-version: "7.6"
|
|
- name: Download provider + tfgen binaries
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: pulumi-${{ env.PROVIDER }}-provider.tar.gz
|
|
path: ${{ github.workspace }}/bin
|
|
- name: UnTar provider binaries
|
|
run: tar -zxf ${{ github.workspace }}/bin/provider.tar.gz -C ${{
|
|
github.workspace}}/bin
|
|
- name: Restore Binary Permissions
|
|
run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print
|
|
-exec chmod +x {} \;
|
|
- name: Download SDK
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: ${{ matrix.language }}-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: UnTar SDK folder
|
|
run: tar -zxf ${{ github.workspace}}/sdk/${{ matrix.language}}.tar.gz -C ${{
|
|
github.workspace}}/sdk/${{ matrix.language}}
|
|
- name: Update path
|
|
run: echo "${{ github.workspace }}/bin" >> $GITHUB_PATH
|
|
- name: Install Node dependencies
|
|
run: yarn global add typescript
|
|
- run: dotnet nuget add source ${{ github.workspace }}/nuget
|
|
- name: Install Python deps
|
|
run: |-
|
|
pip3 install virtualenv==20.0.23
|
|
pip3 install pipenv
|
|
- name: Install dependencies
|
|
run: make install_${{ matrix.language}}_sdk
|
|
- name: Generate Pulumi Access Token
|
|
id: generate_pulumi_token
|
|
uses: pulumi/auth-actions@1c89817aab0c66407723cdef72b05266e7376640 # v1.0.1
|
|
with:
|
|
organization: pulumi
|
|
requested-token-type: urn:pulumi:token-type:access_token:organization
|
|
export-environment-variables: false
|
|
- name: Export AWS Credentials
|
|
uses: pulumi/esc-action@41fd832f44f4820124b5350b5f84a00f741f234e # v1.3.0
|
|
env:
|
|
PULUMI_ACCESS_TOKEN: ${{ steps.generate_pulumi_token.outputs.pulumi-access-token }}
|
|
with:
|
|
environment: logins/pulumi-ci
|
|
- name: Authenticate to Google Cloud
|
|
uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
|
|
with:
|
|
workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER
|
|
}}/locations/global/workloadIdentityPools/${{
|
|
env.GOOGLE_CI_WORKLOAD_IDENTITY_POOL }}/providers/${{
|
|
env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }}
|
|
service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }}
|
|
- name: Setup gcloud auth
|
|
uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a # v2.1.4
|
|
with:
|
|
install_components: gke-gcloud-auth-plugin
|
|
- name: Install gotestfmt
|
|
uses: GoTestTools/gotestfmt-action@v2
|
|
with:
|
|
version: v2.5.0
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Run tests
|
|
run: >-
|
|
set -euo pipefail
|
|
|
|
cd examples && go test -count=1 -cover -timeout 2h -tags=${{ matrix.language }} -parallel 4 .
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in SDK tests
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
publish:
|
|
runs-on: ubuntu-latest
|
|
needs: test
|
|
name: publish
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Clear GitHub Actions Ubuntu runner disk space
|
|
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
|
|
with:
|
|
tool-cache: false
|
|
dotnet: false
|
|
android: true
|
|
haskell: true
|
|
swap-storage: true
|
|
large-packages: false
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0
|
|
- name: Configure AWS Credentials
|
|
uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0
|
|
with:
|
|
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
|
|
aws-region: us-east-2
|
|
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
|
|
role-duration-seconds: 7200
|
|
role-session-name: ${{ env.PROVIDER }}@githubActions
|
|
role-external-id: upload-pulumi-release
|
|
role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }}
|
|
- name: Run GoReleaser
|
|
uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5.1.0
|
|
env:
|
|
GORELEASER_CURRENT_TAG: v${{ steps.version.outputs.version }}
|
|
with:
|
|
args: -p 3 release --clean --timeout 60m0s
|
|
version: latest
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in publishing binaries
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
publish_sdk:
|
|
runs-on: ubuntu-latest
|
|
needs: publish
|
|
name: publish_sdks
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Checkout Scripts Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
path: ci-scripts
|
|
repository: pulumi/scripts
|
|
- run: echo "ci-scripts" >> .git/info/exclude
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0
|
|
- name: Setup Node
|
|
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
|
|
with:
|
|
node-version: ${{ env.NODEVERSION }}
|
|
registry-url: https://registry.npmjs.org
|
|
- name: Setup DotNet
|
|
uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
|
|
with:
|
|
dotnet-version: ${{ env.DOTNETVERSION }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
|
|
with:
|
|
python-version: ${{ env.PYTHONVERSION }}
|
|
- name: Download python SDK
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: python-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress python SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/python.tar.gz -C
|
|
${{github.workspace}}/sdk/python
|
|
- name: Download dotnet SDK
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: dotnet-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress dotnet SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/dotnet.tar.gz -C
|
|
${{github.workspace}}/sdk/dotnet
|
|
- name: Download nodejs SDK
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: nodejs-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress nodejs SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/nodejs.tar.gz -C
|
|
${{github.workspace}}/sdk/nodejs
|
|
- name: Install Twine
|
|
run: python -m pip install twine==5.0.0
|
|
- name: Publish SDKs
|
|
run: ./ci-scripts/ci/publish-tfgen-package ${{ github.workspace }}
|
|
env:
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
PYPI_PUBLISH_ARTIFACTS: all
|
|
- if: failure() && github.event_name == 'push'
|
|
name: Notify Slack
|
|
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
|
|
with:
|
|
author_name: Failure in publishing SDK
|
|
fields: repo,commit,author,action
|
|
status: ${{ job.status }}
|
|
publish_java_sdk:
|
|
runs-on: ubuntu-latest
|
|
continue-on-error: true
|
|
needs: publish
|
|
name: publish_java_sdk
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Install Go
|
|
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
|
|
with:
|
|
go-version: ${{ env.GOVERSION }}
|
|
cache-dependency-path: "**/*.sum"
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Install Pulumi CLI
|
|
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0
|
|
- name: Setup Java
|
|
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
|
|
with:
|
|
java-version: ${{ env.JAVAVERSION }}
|
|
distribution: temurin
|
|
cache: gradle
|
|
- name: Setup Gradle
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
with:
|
|
gradle-version: "7.6"
|
|
- name: Download java SDK
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: java-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress java SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/java.tar.gz -C
|
|
${{github.workspace}}/sdk/java
|
|
- name: Publish Java SDK
|
|
uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
|
|
env:
|
|
PACKAGE_VERSION: ${{ env.PROVIDER_VERSION }}
|
|
with:
|
|
arguments: publishToSonatype closeAndReleaseSonatypeStagingRepository
|
|
build-root-directory: ./sdk/java
|
|
gradle-version: 7.4.1
|
|
publish_go_sdk:
|
|
runs-on: ubuntu-latest
|
|
name: publish-go-sdk
|
|
needs: publish_sdk
|
|
steps:
|
|
- name: Checkout Repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
lfs: true
|
|
- id: version
|
|
name: Set Provider Version
|
|
uses: pulumi/provider-version-action@f96d032a2758fdda7939e5728eff6c0d980ae894 # v1.6.0
|
|
with:
|
|
set-env: PROVIDER_VERSION
|
|
- name: Download go SDK
|
|
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
|
|
with:
|
|
name: go-sdk.tar.gz
|
|
path: ${{ github.workspace}}/sdk/
|
|
- name: Uncompress go SDK
|
|
run: tar -zxf ${{github.workspace}}/sdk/go.tar.gz -C
|
|
${{github.workspace}}/sdk/go
|
|
- name: Publish Go SDK
|
|
uses: pulumi/publish-go-sdk-action@v1
|
|
with:
|
|
repository: ${{ github.repository }}
|
|
base-ref: ${{ github.sha }}
|
|
source: sdk/go/dockerbuild
|
|
path: sdk/go/dockerbuild
|
|
version: ${{ steps.version.outputs.version }}
|
|
additive: false
|
|
files: "**"
|
|
dispatch_docs_build:
|
|
runs-on: ubuntu-latest
|
|
needs: publish_go_sdk
|
|
steps:
|
|
- name: Install pulumictl
|
|
uses: jaxxstorm/action-install-gh-release@4304621e8c48d66093a8a214af5d5b5bc3b3d943 # v2.0.0
|
|
with:
|
|
repo: pulumi/pulumictl
|
|
- name: Dispatch Event
|
|
run: pulumictl create docs-build pulumi-${{ env.PROVIDER }}
|
|
${GITHUB_REF#refs/tags/}
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
|
|
name: dispatch_docs_build
|