.gitlab-ci.yml

image: python:3.8-buster

stages:
  - test
  - package
  - upload
  - release

variables:
  PIP_CACHE_DIR: "$CI_PROJECT_DIR/.cache/pip"
  PACKAGE_REGISTRY_URL: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/generic"

all_tests:
  stage: test
  before_script:
    - apt-get update && apt-get install -y build-essential libldap2-dev libsasl2-dev
    - pip3 install virtualenv
    - virtualenv -q .venv
    - source .venv/bin/activate
    - pip install -U -r requirements.txt
    - pip install -U -r requirements_dev.txt
  script:
    - make test

bandit:
  stage: test
  before_script:
    - pip3 install virtualenv
    - virtualenv -q .venv
    - source .venv/bin/activate
    - pip install bandit~=1.6.2
  script:
    - make bandit

mypy:
  stage: test
  before_script:
    - apt-get update && apt-get install -y build-essential libldap2-dev libsasl2-dev
    - pip3 install virtualenv
    - virtualenv -q .venv
    - source .venv/bin/activate
    - pip install -U -r requirements.txt
    - pip install -U -r requirements_dev.txt
  script:
    - make mypy
  allow_failure: true

pylint:
  stage: test
  before_script:
    - apt-get update && apt-get install -y build-essential libldap2-dev libsasl2-dev
    - pip3 install virtualenv
    - virtualenv -q .venv
    - source .venv/bin/activate
    - pip install -U -r requirements.txt
    - pip install -U -r requirements_dev.txt
  script:
    - make pylint

package:
  stage: package
  before_script:
    - pip3 install virtualenv
    - virtualenv -q .venv
    - source .venv/bin/activate
    - pip install -U build
  script:
    - make package
  artifacts:
    paths:
    - dist/
    expire_in: 2 months

upload_job:
  stage: upload
  image: curlimages/curl:latest
  needs:
    - job: package
      artifacts: true
  rules:
    - if: $CI_COMMIT_TAG # only run when we publish a new tag
  script:
    - 'ls dist'
    - 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file dist/*.whl "${PACKAGE_REGISTRY_URL}/${CI_COMMIT_TAG}/wahlfang.whl"'
    - 'curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" --upload-file dist/*.tar.gz "${PACKAGE_REGISTRY_URL}/${CI_COMMIT_TAG}/wahlfang.tar.gz"'

release_job:
  stage: release
  image: registry.gitlab.com/gitlab-org/release-cli:latest
  needs:
    - job: upload_job
  rules:
    - if: $CI_COMMIT_TAG # only run when we publish a new tag
  script:
    - echo 'running release_job'
  release:
    name: 'Release $CI_COMMIT_TAG'
    description: 'Created using the release-cli'
    tag_name: '$CI_COMMIT_TAG'
    ref: '$CI_COMMIT_TAG'
    assets:
      links:
        - name: "wahlfang-${CI_COMMIT_TAG}.whl"
          url: "${PACKAGE_REGISTRY_URL}/${CI_COMMIT_TAG}/wahlfang.whl"
        - name: "wahlfang-${CI_COMMIT_TAG}.tar.gz"
          url: "${PACKAGE_REGISTRY_URL}/${CI_COMMIT_TAG}/wahlfang.tar.gz"

publish_job:
  stage: release
  needs:
    - job: package
      artifacts: true
  rules:
    - if: $CI_COMMIT_TAG # only run when we publish a new tag
  before_script:
    - pip3 install virtualenv
    - virtualenv -q .venv
    - source .venv/bin/activate
    - pip install -U twine
  script:
    - python -m twine upload dist/* -u $TWINE_USERNAME -p $TWINE_PASSWORD --non-interactive