Merge pull request #121 from jaydee029/main

Added PR and Main build github action workflows
galasa-dev · Jul 24, 2024 · 28e84ca · 28e84ca
2 parents d02cd87 + 35a5236
commit 28e84ca
Show file tree

Hide file tree

Showing 3 changed files with 219 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -0,0 +1,120 @@
+name: Main build
+
+on:
+  push:
+    branches: [main]
+
+env:
+  REGISTRY: ghcr.io
+  NAMESPACE: galasa-dev
+  BRANCH: main
+
+jobs:
+  build-wrapping:
+    name: Build Maven source code and Docker image for development Maven registry
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          java-version: '11'
+          distribution: 'semeru'
+          cache: maven
+
+      - name: Print githash
+        run: |
+          echo $GITHUB_SHA > ./maven.githash
+
+      # Copy secrets into files to use in workflow
+      - name: Make secrets directory
+        run : |
+          mkdir /home/runner/work/secrets
+
+      - name: Copy settings.xml
+        env:
+          MAVEN_SETTINGS_XML: ${{ secrets.MAVEN_SETTINGS_XML }}
+        run : |
+          echo $MAVEN_SETTINGS_XML > /home/runner/work/secrets/settings.xml
+
+      - name: Copy GPG passphrase
+        env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run : |
+          echo $GPG_PASSPHRASE > /home/runner/work/secrets/passphrase.file
+
+      - name: Copy GPG key
+        env:
+          GPG_KEY_BASE64: ${{ secrets.GPG_KEY }}
+        run : |
+          echo $GPG_KEY_BASE64 |  base64 --decode > /home/runner/work/secrets/galasa.gpg
+          
+      # Set up Maven GPG directory
+      - name: Make GPG home directory
+        run: |
+          mkdir /home/runner/work/gpg
+      
+      - name: Change directory permissions
+        run: |
+          chmod '700' /home/runner/work/gpg
+
+      - name: Import GPG
+        run: |
+          gpg --homedir /home/runner/work/gpg --pinentry-mode loopback --passphrase-file /home/runner/work/secrets/passphrase.file --import /home/runner/work/secrets/galasa.gpg
+      
+      - name: Copy custom settings.xml
+        run: |
+          cp /home/runner/work/secrets/settings.xml /home/runner/work/gpg/settings.xml
+
+      # Make directory to deploy Maven artefacts to in the build
+      - name: Make artefacts directory
+        run : |
+          mkdir ${{ github.workspace }}/repo
+
+      - name: Building Maven source code
+        run: |
+          mvn -f galasa-maven-plugin/pom.xml deploy \
+          -Dgalasa.source.repo=https://development.galasa.dev/gh/maven-repo/gradle \
+          -Dgalasa.central.repo=https://repo.maven.apache.org/maven2/ \
+          -Dgalasa.release.repo=file:${{ github.workspace }}/repo \
+          -Dgalasa.jacocoEnabled=true \
+          -Dgalasa.isRelease=true \
+          --batch-mode --errors --fail-at-end \
+          --settings  /home/runner/work/gpg/settings.xml
+
+      - name: Login to Github Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Maven image
+        id: metadata
+        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.NAMESPACE }}/Mavenrepo-maven-artefacts
+
+      - name: Build Maven image for development Maven registry
+        id: build
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: dockerfiles/dockerfile
+          push: true
+          tags: ${{ steps.metadata.outputs.tags }}
+          labels: ${{ steps.metadata.outputs.labels }}
+          build-args: |
+            dockerRepository=harbor.galasa.dev
+            baseVersion=latest
+
+      # Recycle the development Maven registry app in ArgoCD
+      # Authenticate using a token passed in as an environment variable
+      - name: Recycle application in ArgoCD
+        env: 
+          ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_TOKEN }}
+        run: |
+          docker run --env ARGOCD_AUTH_TOKEN=${{ env.ARGOCD_AUTH_TOKEN }} --rm -v ${{ github.workspace }}:/var/workspace ghcr.io/galasa-dev/argocdcli:main app actions run gh-maven-repos restart --kind Deployment --resource-name maven-gh --server argocd.galasa.dev
+          
diff --git a/.github/workflows/pr-build.yaml b/.github/workflows/pr-build.yaml
@@ -0,0 +1,93 @@
+name: PR build
+
+on:
+  pull_request:
+      branches: [main]
+
+env:
+  REGISTRY: ghcr.io
+  NAMESPACE: galasa-dev
+
+jobs:
+  build-maven:
+    name: Build Maven source code and Docker image
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK
+        uses: actions/setup-java@v4
+        with:
+          java-version: '11'
+          distribution: 'semeru'
+          cache: maven
+
+      - name: Print githash
+        run: |
+          echo $GITHUB_SHA > ./maven.githash
+      
+      - name: Make secrets directory
+        run : |
+          mkdir /home/runner/work/secrets
+
+      - name: Copy settings.xml
+        env:
+          MAVEN_SETTINGS_XML: ${{ secrets.MAVEN_SETTINGS_XML }}
+        run : |
+          echo $MAVEN_SETTINGS_XML > /home/runner/work/secrets/settings.xml
+
+      - name: Copy GPG passphrase
+        env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run : |
+          echo $GPG_PASSPHRASE > /home/runner/work/secrets/passphrase.file
+
+      - name: Copy GPG key
+        env:
+          GPG_KEY_BASE64: ${{ secrets.GPG_KEY }}
+        run : |
+          echo $GPG_KEY_BASE64 |  base64 --decode > /home/runner/work/secrets/galasa.gpg
+            
+        # Set up Maven GPG directory
+      - name: Make GPG home directory
+        run: |
+          mkdir /home/runner/work/gpg
+        
+      - name: Change directory permissions
+        run: |
+          chmod '700' /home/runner/work/gpg
+  
+      - name: Import GPG
+        run: |
+          gpg --homedir /home/runner/work/gpg --pinentry-mode loopback --passphrase-file /home/runner/work/secrets/passphrase.file --import /home/runner/work/secrets/galasa.gpg
+        
+      - name: Copy custom settings.xml
+        run: |
+          cp /home/runner/work/secrets/settings.xml /home/runner/work/gpg/settings.xml
+
+      - name: Make artefacts directory
+        run : |
+          mkdir ${{ github.workspace }}/repo
+      
+      - name: Building Maven source code
+        run: |
+          mvn -f galasa-maven-plugin/pom.xml deploy -Dgpg.skip=true \
+          -Dgalasa.source.repo=https://development.galasa.dev/gh/maven-repo/gradle \
+          -Dgalasa.central.repo=https://repo.maven.apache.org/maven2/ \
+          -Dgalasa.release.repo=file:${{ github.workspace }}/repo \
+          --batch-mode --errors --fail-at-end 
+          --settings  /home/runner/work/gpg/settings.xml
+
+
+      - name: Build maven Image for testing
+        uses: docker/build-push-action@v5
+        with:
+            context: .
+            file: dockerfiles/dockerfile
+            load: true
+            tags: maven:test
+            build-args: |
+              dockerRepository=harbor.galasa.dev
+              tag=main
diff --git a/dockerfiles/dockerfile b/dockerfiles/dockerfile
@@ -0,0 +1,6 @@
+ARG dockerRepository
+ARG tag
+FROM ${dockerRepository}/galasadev/galasa-gradle:${tag}
+
+COPY repo/ /usr/local/apache2/htdocs/
+COPY maven.githash /usr/local/apache2/htdocs/maven.githash