load("@bazel_gazelle//:def.bzl", "gazelle") load("@com_github_ash2k_bazel_tools//multirun:def.bzl", "multirun") load("@com_github_bazelbuild_buildtools//buildifier:def.bzl", "buildifier", "buildifier_test") load("//bazel/ci:proto_targets.bzl", "proto_targets") load("//bazel/sh:def.bzl", "noop_warn", "repo_command", "sh_template") required_tags = ["e2e"] gazelle( name = "gazelle_generate", build_tags = required_tags, ) gazelle( name = "gazelle_check", build_tags = required_tags, command = "fix", mode = "diff", ) gazelle( name = "gazelle_update_repos", args = [ "-from_file=go.work", "-to_macro=bazel/toolchains/go_module_deps.bzl%go_dependencies", "-build_file_proto_mode=disable_global", "-build_file_generation=on", "-prune", ], command = "update-repos", ) buildifier_test( name = "buildifier_check", timeout = "short", lint_mode = "warn", lint_warnings = ["all"], mode = "diff", no_sandbox = True, verbose = True, workspace = "//:WORKSPACE.bazel", ) buildifier( name = "buildifier_fix", lint_mode = "fix", lint_warnings = ["all"], mode = "fix", verbose = True, ) sh_template( name = "go_mod_tidy", data = [ "@go_sdk//:bin/go", ], substitutions = { "@@GO@@": "$(rootpath @go_sdk//:bin/go)", }, template = "go_tidy.sh.in", ) sh_template( name = "shfmt", data = [ "@com_github_katexochen_sh_v3//cmd/shfmt", ], substitutions = { "@@SHFMT@@": "$(rootpath @com_github_katexochen_sh_v3//cmd/shfmt)", }, template = "shfmt.sh.in", ) noop_warn( name = "shellcheck_noop_warning", warning = "Shellcheck should have been executed, but is currently not available for your platform.", ) alias( name = "com_github_koalaman_shellcheck", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_koalaman_shellcheck_darwin_amd64//:shellcheck", "@io_bazel_rules_go//go/platform:darwin_arm64": ":shellcheck_noop_warning", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_koalaman_shellcheck_linux_amd64//:shellcheck", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_koalaman_shellcheck_linux_arm64//:shellcheck", }), ) sh_template( name = "shellcheck", data = [ ":com_github_koalaman_shellcheck", "@com_github_katexochen_sh_v3//cmd/shfmt", ], substitutions = { "@@SHELLCHECK@@": "$(rootpath :com_github_koalaman_shellcheck)", "@@SHFMT@@": "$(rootpath @com_github_katexochen_sh_v3//cmd/shfmt)", }, template = "shellcheck.sh.in", ) alias( name = "com_github_rhysd_actionlint", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_rhysd_actionlint_darwin_amd64//:actionlint", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_rhysd_actionlint_darwin_arm64//:actionlint", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_rhysd_actionlint_linux_amd64//:actionlint", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_rhysd_actionlint_linux_arm64//:actionlint", }), ) sh_template( name = "actionlint", data = [ ":com_github_koalaman_shellcheck", ":com_github_rhysd_actionlint", ], substitutions = { "@@ACTIONLINT@@": "$(rootpath :com_github_rhysd_actionlint)", "@@SHELLCHECK@@": "$(rootpath :com_github_koalaman_shellcheck)", }, template = "actionlint.sh.in", ) repo_command( name = "actionlint_no_shellcheck", command = ":com_github_rhysd_actionlint", ) alias( name = "com_github_mvdan_gofumpt", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_mvdan_gofumpt_darwin_amd64//file", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_mvdan_gofumpt_darwin_arm64//file", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_mvdan_gofumpt_linux_amd64//file", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_mvdan_gofumpt_linux_arm64//file", }), ) repo_command( name = "gofumpt", args = [ "-l", "-w", ".", ], command = ":com_github_mvdan_gofumpt", ) alias( name = "com_github_aquasecurity_tfsec", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_aquasecurity_tfsec_darwin_amd64//:tfsec", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_aquasecurity_tfsec_darwin_arm64//:tfsec", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_aquasecurity_tfsec_linux_amd64//:tfsec", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_aquasecurity_tfsec_linux_arm64//:tfsec", }), ) sh_template( name = "tfsec", data = [ ":com_github_aquasecurity_tfsec", ], substitutions = { "@@TFSEC@@": "$(rootpath :com_github_aquasecurity_tfsec)", }, template = "tfsec.sh.in", ) alias( name = "com_github_hashicorp_terraform", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_hashicorp_terraform_darwin_amd64//:terraform", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_hashicorp_terraform_darwin_arm64//:terraform", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_hashicorp_terraform_linux_amd64//:terraform", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_hashicorp_terraform_linux_arm64//:terraform", }), ) sh_template( name = "terraform_gen", data = [ ":com_github_hashicorp_terraform", ], substitutions = { "@@MODE@@": "generate", "@@TERRAFORM@@": "$(rootpath :com_github_hashicorp_terraform)", }, template = "terraform.sh.in", ) sh_template( name = "terraform_check", data = [ ":com_github_hashicorp_terraform", ], substitutions = { "@@MODE@@": "check", "@@TERRAFORM@@": "$(rootpath :com_github_hashicorp_terraform)", }, template = "terraform.sh.in", ) sh_template( name = "terraform_fmt", data = [ ":com_github_hashicorp_terraform", ], substitutions = { "@@MODE@@": "format", "@@TERRAFORM@@": "$(rootpath :com_github_hashicorp_terraform)", }, template = "terraform.sh.in", ) alias( name = "com_github_golangci_golangci_lint", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_golangci_golangci_lint_darwin_amd64//:golangci_lint_bin", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_golangci_golangci_lint_darwin_arm64//:golangci_lint_bin", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_golangci_golangci_lint_linux_amd64//:golangci_lint_bin", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_golangci_golangci_lint_linux_arm64//:golangci_lint_bin", }), ) sh_template( name = "golangci_lint", data = [ ":com_github_golangci_golangci_lint", "@go_sdk//:bin/go", ], substitutions = { "@@GO@@": "$(rootpath @go_sdk//:bin/go)", "@@GOLANGCI-LINT@@": "$(rootpath :com_github_golangci_golangci_lint)", }, template = "golangci_lint.sh.in", ) alias( name = "com_github_bufbuild_buf", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_bufbuild_buf_darwin_amd64//:buf", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_bufbuild_buf_darwin_arm64//:buf", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_bufbuild_buf_linux_amd64//:buf", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_bufbuild_buf_linux_arm64//:buf", }), ) sh_template( name = "buf_fmt", data = [ ":com_github_bufbuild_buf", ], substitutions = { "@@BUF@@": "$(rootpath :com_github_bufbuild_buf)", }, template = "buf.sh.in", ) sh_template( name = "golicenses_check", data = [ "@com_github_google_go_licenses//:go-licenses", "@go_sdk//:bin/go", ], substitutions = { "@@GO@@": "$(rootpath @go_sdk//:bin/go)", "@@GO_LICENSES@@": "$(rootpath @com_github_google_go_licenses//:go-licenses)", }, template = "golicenses.sh.in", ) sh_template( name = "license_header_check", data = [], substitutions = {}, template = "license_header.sh.in", ) sh_template( name = "govulncheck", data = [ "@go_sdk//:bin/go", "@org_golang_x_vuln//cmd/govulncheck", ], substitutions = { "@@GO@@": "$(rootpath @go_sdk//:bin/go)", "@@GOVULNCHECK@@": "$(rootpath @org_golang_x_vuln//cmd/govulncheck:govulncheck)", }, template = "govulncheck.sh.in", ) alias( name = "com_github_siderolabs_talos_hack_docgen", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_siderolabs_talos_hack_docgen_darwin_amd64//file", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_siderolabs_talos_hack_docgen_darwin_arm64//file", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_siderolabs_talos_hack_docgen_linux_amd64//file", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_siderolabs_talos_hack_docgen_linux_arm64//file", }), ) alias( name = "com_github_helm_helm", actual = select({ "@io_bazel_rules_go//go/platform:darwin_amd64": "@com_github_helm_helm_darwin_amd64//:helm", "@io_bazel_rules_go//go/platform:darwin_arm64": "@com_github_helm_helm_darwin_arm64//:helm", "@io_bazel_rules_go//go/platform:linux_amd64": "@com_github_helm_helm_linux_amd64//:helm", "@io_bazel_rules_go//go/platform:linux_arm64": "@com_github_helm_helm_linux_arm64//:helm", }), ) sh_template( name = "go_generate", data = [ ":com_github_helm_helm", ":com_github_siderolabs_talos_hack_docgen", "//internal/attestation/measurements/measurement-generator", "//internal/versions/hash-generator", "@go_sdk//:bin/go", "@org_golang_x_tools//cmd/stringer", ], substitutions = { "@@DOCGEN@@": "$(rootpath :com_github_siderolabs_talos_hack_docgen)", "@@GO@@": "$(rootpath @go_sdk//:bin/go)", "@@HASH_GENERATOR@@": "$(rootpath //internal/versions/hash-generator:hash-generator)", "@@HELM@@": "$(rootpath :com_github_helm_helm)", "@@MEASUREMENT_GENERATOR@@": "$(rootpath //internal/attestation/measurements/measurement-generator:measurement-generator)", "@@STRINGER@@": "$(rootpath @org_golang_x_tools//cmd/stringer:stringer)", }, template = "go_generate.sh.in", ) # deps_mirror_fix fixes bazel workspace rules for external dependencies. # It normalizes the rules and rewrites WORKSPACE and bzl files. # If files are not in the mirror, it will fail. # Use deps_mirror_upload to upload missing files. repo_command( name = "deps_mirror_fix", args = [ "fix", "--unauthenticated", ], command = "//hack/bazel-deps-mirror", ) # deps_mirror_upload fixes bazel workspace rules for external dependencies. # It uploads all dependencies to the mirror, normalizes the rules and rewrites WORKSPACE and bzl files. repo_command( name = "deps_mirror_upload", args = [ "fix", ], command = "//hack/bazel-deps-mirror", ) # deps_mirror_upgrade upgrades bazel workspace rules for external dependencies. # Users are supposed to replace any upstream URLs. # It replaces the expected hash and uploads the new dep to the mirror. repo_command( name = "deps_mirror_upgrade", args = [ "upgrade", ], command = "//hack/bazel-deps-mirror", ) # deps_mirror_check checks bazel workspace rules for external dependencies. # It checks if all dependency rules have mirror urls and are properly formatted. # It doesn't check if the mirror has the files. # Use deps_mirror_check_mirror to check if the mirror has the files. repo_command( name = "deps_mirror_check", args = [ "check", ], command = "//hack/bazel-deps-mirror", ) # deps_mirror_check_mirror checks bazel workspace rules for external dependencies. # It checks if all dependency rules are correctly mirrored and checks that the rules are properly formatted. repo_command( name = "deps_mirror_check_mirror", args = [ "check", "--mirror", ], command = "//hack/bazel-deps-mirror", ) sh_template( name = "proto_targets_check", data = [], substitutions = { "@@PROTO_TARGETS@@": " ".join(proto_targets()), }, template = "proto_targets_check.sh.in", ) multirun( name = "proto_generate", commands = proto_targets(), jobs = 0, # execute concurrently ) sh_template( name = "cli_docgen", data = [ "//hack/clidocgen", ], substitutions = { "@@CLIDOCGEN@@": "$(rootpath //hack/clidocgen:clidocgen)", }, template = "cli_docgen.sh.in", ) multirun( name = "tidy", commands = [ ":shfmt", ":gofumpt", ":go_mod_tidy", ":gazelle_update_repos", ":gazelle_generate", ":buildifier_fix", ":terraform_fmt", ":buf_fmt", ":deps_mirror_fix", ], jobs = 1, # execute sequentially visibility = ["//visibility:public"], ) multirun( name = "check", testonly = True, commands = [ ":gazelle_check", ":buildifier_check", ":golangci_lint", ":terraform_check", ":golicenses_check", ":license_header_check", ":govulncheck", ":deps_mirror_check", ":proto_targets_check", ] + select({ "@io_bazel_rules_go//go/platform:darwin_arm64": [ ":shellcheck_noop_warning", ":actionlint_no_shellcheck", ], "//conditions:default": [ ":shellcheck", ":actionlint", ], }), jobs = 0, # execute concurrently visibility = ["//visibility:public"], ) multirun( name = "generate", commands = [ ":terraform_gen", "//3rdparty/bazel/com_github_medik8s_node_maintainance_operator:pull_files", ":go_generate", ":proto_generate", ":cli_docgen", ], jobs = 0, # execute concurrently visibility = ["//visibility:public"], )