Update component submodules on main branch #237
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Update component submodules on main branch | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| bump-app: | |
| description: Bump the app submodule | |
| type: boolean | |
| default: false | |
| bump-tenant-manager: | |
| description: Bump the tenant manager submodule | |
| type: boolean | |
| default: false | |
| jobs: | |
| update_submodules: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Sanity check | |
| if: github.ref != 'refs/heads/main' | |
| run: | | |
| echo "This workflow updates only the main branch." | |
| exit 1 | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: false | |
| persist-credentials: false | |
| - name: Generate a token | |
| id: generate_token | |
| uses: actions/create-github-app-token@v1 | |
| with: | |
| app-id: ${{ vars.TENZIR_AUTOBUMPER_APP_ID }} | |
| private-key: ${{ secrets.TENZIR_AUTOBUMPER_APP_PRIVATE_KEY }} | |
| owner: ${{ github.repository_owner }} | |
| - uses: crazy-max/ghaction-import-gpg@v6 | |
| with: | |
| gpg_private_key: ${{ secrets.TENZIR_BOT_GPG_SIGNING_KEY }} | |
| git_user_signingkey: true | |
| git_commit_gpgsign: true | |
| - name: Prepare git push | |
| env: | |
| GITHUB_APP_TOKEN: ${{ steps.generate_token.outputs.token }} | |
| run: | | |
| git config --global user.name 'tenzir-bot' | |
| git config --global user.email 'engineering@tenzir.com' | |
| git remote set-url origin https://x-access-token:$GITHUB_APP_TOKEN@github.com/tenzir/platform.git | |
| - name: Configure ssh-agent for app submodule | |
| uses: webfactory/ssh-agent@v0.9.0 | |
| with: | |
| ssh-private-key: ${{ secrets.TENZIR_APP_DEPLOY_KEY }} | |
| - name: Update app submodule | |
| if: ${{ inputs.bump-app }} | |
| run: | | |
| git submodule update --init components/app | |
| current_sha=$(git -C components/app rev-parse HEAD) | |
| current_sha_short=$(git -C components/app rev-parse --short HEAD) | |
| upstream_sha=$(git -C components/app rev-parse origin/main) | |
| upstream_sha_short=$(git -C components/app rev-parse --short origin/main) | |
| if [ ${current_sha} != ${upstream_sha} ]; then | |
| # Collect all files in the `changelog` directory that | |
| # were added since the last bump. | |
| names=$(git -C components/app diff --name-status HEAD origin/main -- changelog/ | grep -E '^(A|M)' | awk '{print $2}') | |
| git -C components/app checkout origin/main | |
| echo -e "Bump app component from ${current_sha_short} to ${upstream_sha_short}\n\nChanges:\n" > commitmsg | |
| for name in ${names}; do | |
| cat components/app/${name} >> commitmsg | |
| done | |
| git add components/app | |
| git commit -F commitmsg | |
| git push -u origin main:main | |
| fi | |
| - name: Configure ssh-agent for tenant-manager submodule | |
| uses: webfactory/ssh-agent@v0.9.0 | |
| with: | |
| ssh-private-key: ${{ secrets.TENZIR_EVENT_HORIZON_DEPLOY_KEY }} | |
| - name: Update tenant-manager submodule | |
| if: ${{ inputs.bump-tenant-manager }} | |
| run: | | |
| git submodule update --init components/tenant-manager | |
| current_sha=$(git -C components/tenant-manager rev-parse HEAD) | |
| current_sha_short=$(git -C components/tenant-manager rev-parse --short HEAD) | |
| upstream_sha=$(git -C components/tenant-manager rev-parse origin/main) | |
| upstream_sha_short=$(git -C components/tenant-manager rev-parse --short origin/main) | |
| if [ ${current_sha} != ${upstream_sha} ]; then | |
| git -C components/tenant-manager diff --name-status HEAD origin/main -- platform/changelog/ | |
| names=$(git -C components/tenant-manager diff --name-status HEAD origin/main -- platform/changelog/ | grep -E '^(A|M)' | awk '{print $2}') | |
| git -C components/tenant-manager checkout origin/main | |
| echo -e "Bump tenant-manager component from ${current_sha_short} to ${upstream_sha_short}\n\nChanges:\n" > commitmsg | |
| echo "Found changelog files: ${names}" | |
| for name in ${names}; do | |
| cat components/tenant-manager/${name} >> commitmsg | |
| done | |
| git -C components/tenant-manager rebase origin/main | |
| git add components/tenant-manager | |
| git commit -F commitmsg | |
| git push -u origin main:main | |
| fi | |