push.yaml

name: Push

concurrency:
 group: push_on_master
 cancel-in-progress: false

on:
  push:
    branches:
      - master
    paths-ignore:
    - 'README.md'
    - 'LICENSE'

env:
  CHART_NAME: "application"

jobs:
  helm-dry-run:
    name: helm-dry-run
    if: "! contains(toJSON(github.event.commits.*.message), '[skip-ci]')"
    runs-on: stakater-nonprod

    steps:
    - name: Check out code
      uses: actions/checkout@v4
      with:
        persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
        fetch-depth: 0 # otherwise, you will fail to push refs to dest repo

    # Set Up Helm
    - name: Set up Helm
      uses: azure/setup-helm@v4
      with:
        version: v3.8.2

    # Lint
    - name: Helm Lint
      run: |
        helm lint ${CHART_NAME}
        helm lint ${CHART_NAME} -f ${CHART_NAME}/values-test.yaml

    - name: Install kubectl
      uses: azure/setup-kubectl@v4
      with:
        version: v1.26.0

    - name: Install OpenShift CLI
      uses: redhat-actions/oc-installer@v1
      with:
        oc_version: "https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/stable-4.7/openshift-client-linux.tar.gz"

    # This is used to setup kubeconfig, required by Tilt
    - name: Login to cluster
      run: oc login --token=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) --server=https://kubernetes.default.svc --insecure-skip-tls-verify=true

    # This is required for adding ghcr helm registry
    - name: Login to Container Registry
      uses: docker/login-action@v3
      with:
        registry: ghcr.io/stakater
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    # Dry run to ensure that manifests are generated successfully
    - name: Dry Run Chart
      run: |
        helm install ${CHART_NAME} ${CHART_NAME} -f ${CHART_NAME}/values-test.yaml -n stakater-chart-pipeline-test --dry-run --debug

    - name: Notify Slack
      uses: 8398a7/action-slack@v3
      if: failure() # Pick up events only if the job fails
      with:
        status: ${{ job.status }}
        fields: repo,author,action,eventName,ref,workflow
      env:
        SLACK_WEBHOOK_URL: ${{ secrets.STAKATER_DELIVERY_SLACK_WEBHOOK }}

  push-changes:
    runs-on: ubuntu-latest
    needs:
    - helm-dry-run

    steps:
    - name: Check out code
      uses: actions/checkout@v4
      with:
        persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
        fetch-depth: 0 # otherwise, you will fail to push refs to dest repo

    # Generate tag for chart without "v" prefix
    - name: Generate Tag
      id: generate_tag
      uses: anothrNick/github-tag-action@1.71.0
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        WITH_V: false
        DEFAULT_BUMP: patch
        DRY_RUN: true

    # Update chart tag to the latest semver tag
    - name: Update Chart Version
      env:
        VERSION: ${{ steps.generate_tag.outputs.new_tag }}
      run: |
        make bump-chart

    # Set Up Helm
    - name: Set up Helm
      uses: azure/setup-helm@v4
      with:
        version: v3.8.2

    # Publish helm chart
    - name: Publish Helm chart
      uses: stefanprodan/helm-gh-pages@master
      with:
        branch: master
        repository: stakater-charts
        target_dir: docs
        token: ${{ secrets.PUBLISH_TOKEN }}
        charts_dir: .
        charts_url: https://stakater.github.io/stakater-charts
        owner: stakater
        linting: off
        commit_username: stakater-user
        commit_email: stakater@gmail.com

    # Commit back changes
    - name: Commit files
      run: |
        git config --local user.email "stakater@gmail.com"
        git config --local user.name "stakater-user"
        git status
        git add application/Chart.yaml
        git commit -m "[skip-ci] Update artifacts"

    # Push Chart.yaml with Updated Version
    - name: Push changes
      uses: ad-m/github-push-action@master
      with:
        github_token: ${{ secrets.PUBLISH_TOKEN }}
        branch: ${{ inputs.RELEASE_BRANCH }}

    - name: Push Latest Tag
      uses: anothrNick/github-tag-action@1.71.0
      env:
        GITHUB_TOKEN: ${{ secrets.PUBLISH_TOKEN }}
        WITH_V: true
        DEFAULT_BUMP: patch

    - name: Notify Slack
      uses: 8398a7/action-slack@v3
      if: always() # Pick up events even if the job fails or is canceled.
      with:
        status: ${{ job.status }}
        fields: repo,author,action,eventName,ref,workflow
      env:
        SLACK_WEBHOOK_URL: ${{ secrets.STAKATER_DELIVERY_SLACK_WEBHOOK }}