Update component submodules on main branch #141
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Update component submodules on main branch | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| bump-app: | |
| description: Bump the app submodule | |
| type: boolean | |
| default: false | |
| bump-tenant-manager: | |
| description: Bump the tenant manager submodule | |
| type: boolean | |
| default: false | |
| jobs: | |
| update_submodules: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Sanity check | |
| if: github.ref != 'refs/heads/main' | |
| run: | | |
| echo "This workflow updates only the main branch." | |
| exit 1 | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: false | |
| persist-credentials: false | |
| - name: Generate a token | |
| id: generate_token | |
| uses: actions/create-github-app-token@v1 | |
| with: | |
| app-id: ${{ vars.TENZIR_AUTOBUMPER_APP_ID }} | |
| private-key: ${{ secrets.TENZIR_AUTOBUMPER_APP_PRIVATE_KEY }} | |
| owner: ${{ github.repository_owner }} | |
| - uses: crazy-max/ghaction-import-gpg@v6 | |
| with: | |
| gpg_private_key: ${{ secrets.TENZIR_BOT_GPG_SIGNING_KEY }} | |
| git_user_signingkey: true | |
| git_commit_gpgsign: true | |
| - name: Prepare git push | |
| env: | |
| GITHUB_APP_TOKEN: ${{ steps.generate_token.outputs.token }} | |
| run: | | |
| git config --global user.name 'tenzir-bot' | |
| git config --global user.email '[email protected]' | |
| git remote set-url origin https://x-access-token:[email protected]/tenzir/platform.git | |
| - name: Configure ssh-agent for app submodule | |
| uses: webfactory/[email protected] | |
| with: | |
| ssh-private-key: ${{ secrets.TENZIR_APP_DEPLOY_KEY }} | |
| - name: Update app submodule | |
| if: ${{ inputs.bump-app }} | |
| run: | | |
| git submodule update --init components/app | |
| current_sha=$(git -C components/app rev-parse HEAD) | |
| current_sha_short=$(git -C components/app rev-parse --short HEAD) | |
| upstream_sha=$(git -C components/app rev-parse origin/main) | |
| upstream_sha_short=$(git -C components/app rev-parse --short origin/main) | |
| if [ ${current_sha} != ${upstream_sha} ]; then | |
| # Collect all files in the `changelog` directory that | |
| # were added since the last bump. | |
| names=$(git -C components/app diff --name-status HEAD origin/main -- changelog/ | grep -E '^(A|M)' | awk '{print $2}') | |
| git -C components/app checkout origin/main | |
| echo -e "Bump app component from ${current_sha_short} to ${upstream_sha_short}\n\nChanges:\n" > commitmsg | |
| for name in ${names}; do | |
| cat components/app/${name} >> commitmsg | |
| done | |
| git add components/app | |
| git commit -F commitmsg | |
| git push -u origin main:main | |
| fi | |
| - name: Configure ssh-agent for tenant-manager submodule | |
| uses: webfactory/[email protected] | |
| with: | |
| ssh-private-key: ${{ secrets.TENZIR_EVENT_HORIZON_DEPLOY_KEY }} | |
| - name: Update tenant-manager submodule | |
| if: ${{ inputs.bump-tenant-manager }} | |
| run: | | |
| git submodule update --init components/tenant-manager | |
| current_sha=$(git -C components/tenant-manager rev-parse HEAD) | |
| current_sha_short=$(git -C components/tenant-manager rev-parse --short HEAD) | |
| upstream_sha=$(git -C components/tenant-manager rev-parse origin/main) | |
| upstream_sha_short=$(git -C components/tenant-manager rev-parse --short origin/main) | |
| if [ ${current_sha} != ${upstream_sha} ]; then | |
| git -C components/tenant-manager diff --name-status HEAD origin/main -- platform/changelog/ | |
| names=$(git -C components/tenant-manager diff --name-status HEAD origin/main -- platform/changelog/ | grep -E '^(A|M)' | awk '{print $2}') | |
| git -C components/tenant-manager checkout origin/main | |
| echo -e "Bump tenant-manager component from ${current_sha_short} to ${upstream_sha_short}\n\nChanges:\n" > commitmsg | |
| echo "Found changelog files: ${names}" | |
| for name in ${names}; do | |
| cat components/tenant-manager/${name} >> commitmsg | |
| done | |
| git -C components/tenant-manager rebase origin/main | |
| git add components/tenant-manager | |
| git commit -F commitmsg | |
| git push -u origin main:main | |
| fi | |