constellation/.github/workflows/on-release.yml
2023-04-06 16:36:07 +02:00

95 lines
2.6 KiB
YAML

name: Make updated OS images available on release
on:
release:
types: [published]
workflow_dispatch:
inputs:
tag:
description: "Semantic version tag of the release (vX.Y.Z)."
required: true
latest:
description: "Whether to update the latest tag."
type: boolean
default: false
env:
REPO: edgelesssys/constellation
TAG: ${{ github.event.release.tag_name }}${{ github.event.inputs.tag }}
jobs:
update:
runs-on: ubuntu-22.04
permissions:
id-token: write
contents: read
steps:
- name: Checkout
uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
with:
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
- name: Override latest
id: override
if: github.event.inputs.latest == 'true'
run: echo "LATEST=true" >> "$GITHUB_ENV"
- name: Check if should mark latest
if: github.event.inputs.latest != 'true'
env:
GH_TOKEN: ${{ github.token }}
run: |
latest_release_tag=$(gh api \
-H "Accept: application/vnd.github+json" \
"/repos/${REPO}/releases/latest" \
| jq -r '.tag_name')
echo "Latest release tag: ${latest_release_tag}"
echo "Current tag: ${TAG}"
if [[ "${latest_release_tag}" == "${TAG}" ]]; then
echo "LATEST=true" >> "$GITHUB_ENV"
else
echo "LATEST=false" >> "$GITHUB_ENV"
fi
- name: Setup Go environment
uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
with:
go-version: "1.20.3"
cache: true
- name: Login to AWS
uses: aws-actions/configure-aws-credentials@e1e17a757e536f70e52b5a12b2e8d1d1c60e04ef # v2.0.0
with:
role-to-assume: arn:aws:iam::795746500882:role/GithubAddReleaseVersion
aws-region: eu-central-1
add-image-version-to-versionsapi:
needs: [update]
name: "Add image version to versionsapi"
permissions:
contents: read
id-token: write
uses: ./.github/workflows/versionsapi.yml
with:
command: add
add_release: true
stream: stable
version: ${{ inputs.tag }}
kind: image
add_latest: true
add-cli-version-to-versionsapi:
needs: [update]
name: "Add CLI version to versionsapi"
permissions:
contents: read
id-token: write
uses: ./.github/workflows/versionsapi.yml
with:
command: add
add_release: true
stream: stable
version: ${{ inputs.tag }}
kind: cli
add_latest: true