go.yml

# 1. Test & Build about GO Code
# 2. Push the Container image of Operator Controller to NCP Registry
# 3. Up-to-date kustomization file to cicd repository
name: cicd
permissions: write-all
on:
  push:
    branches:
      - master

env:
  PRIVATE_REGISTRY_URL: "aviator-registry.kr.ncr.ntruss.com"
  SERVICE_NAME: "aviator"

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        go-version: ['1.21.x']

    steps:
      - uses: actions/checkout@v4

      - name: Setup Go ${{ matrix.go-version }}
        uses: actions/setup-go@v4
        with:
          go-version: ${{ matrix.go-version }}

      # You can test your matrix by printing the current Go version
      - name: Display Go version
        run: go version

      - name: Install test and coverage analysis tools
        run: |
          go install github.com/axw/gocov/gocov@latest
          go install github.com/AlekSi/gocov-xml@latest
  
      - name: Print Go version and environment
        id: vars
        run: |
          printf "Using go at: $(which go)\n"
          printf "Go version: $(go version)\n"
          printf "\n\nGo environment:\n\n"
          go env
          printf "\n\nSystem environment:\n\n"
          env
          printf "Git version: $(git version)\n\n"
          # Calculate the short SHA1 hash of the git commit
          echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
      
      - name: Get dependencies
        run: |
          go get -v -t -d ./...
      
      - name: Build Aviator
        working-directory: ./cmd
        env:
          CGO_ENABLED: 0
        run: |
          go build -trimpath -ldflags="-w -s" -v
  
      - name: Run tests
        # Allow the job to continue even if the tests fail, so we can publish the report separately
        # https://stackoverflow.com/questions/57850553/github-actions-check-steps-status
        id: step_test
        continue-on-error: true
        run: |
          go test ./... -v -covermode count -coverprofile test-coverage.out | tee test_output_unit_temp.log
          go test -v -coverprofile="cover-profile.out" -short -race ./...
  
      - name: Prepare coverage reports
        run: |
          mkdir coverage
          gocov convert cover-profile.out > coverage/coverage.json
          # Because Windows doesn't work with input redirection like *nix, but output redirection works.
          (cat ./coverage/coverage.json | gocov-xml) > coverage/coverage.xml
  
      - name: Archive code coverage results
        uses: actions/upload-artifact@v3
        with:
          name: code-coverage-report
          path: coverage/coverage.xml

  build-and-push-image:
    name: Push Docker image to Docker Hub
    runs-on: ubuntu-latest
    needs: build

    permissions:
      contents: read
      packages: write

    steps:
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Check out the repo
        uses: actions/checkout@v4

        ### Private Docker Registry Login
      - name: Log in to the Container registry
        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
        with:
          registry: ${{ env.PRIVATE_REGISTRY_URL }}
          username: ${{ secrets.PRIVATE_REGISTRY_USERNAME }}
          password: ${{ secrets.PRIVATE_REGISTRY_PASSWORD }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
        with:
          images: ${{ env.PRIVATE_REGISTRY_URL }}/${{ env.SERVICE_NAME }}

        ### Private Registry push
      - name: Build and push Docker image
        uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
        with:
          context: .
          push: true
          tags: ${{ env.PRIVATE_REGISTRY_URL }}/${{ env.SERVICE_NAME }}:${{ github.sha }}
          labels: ${{ github.sha }}

  deploy:
    runs-on: ubuntu-latest
    needs: build-and-push-image
    steps:
      - uses: actions/labeler@v2
        with:
          repo-token: ${{ secrets.CICD_SECRET }}

      - name: Get version
        id: image
        run: |
          VERSION=$(echo ${{ github.sha }} | cut -c1-8)
          echo VERSION=$VERSION
          echo "::set-output name=version::$VERSION"

      # kustomize 명령을 가져온다.
      - name: Setup Kustomize
        uses: imranismail/setup-kustomize@v1

      - name: Checkout kustomize repository
        uses: actions/checkout@v2
        with:
          # kubernetes 설정정보 저장소
          repository: cloud-club/aviator-cicd
          ref: main
          token: ${{ secrets.CICD_SECRET }}

      # 새 이미지 버전으로 파일 수정
      - name: Update Kubernetes resources
        run: |
          cd prd
          kustomize edit set image ${{ env.PRIVATE_REGISTRY_URL }}/${{ env.SERVICE_NAME }}:${{ github.sha }}
          cat kustomization.yaml

      # 수정된 파일 commit & push
      - name: Commit files
        run: |
          git config user.name github-actions
          git config user.email github-actions@github.com
          git commit -am "Update image tag ${{ env.PRIVATE_REGISTRY_URL }}/${{ env.SERVICE_NAME }}:${{ github.sha }}"
          git push origin main