update-submodules.yaml

name: Bump component submodules to latest main

on:
  workflow_dispatch:
    inputs:
      bump-app:
        description: Bump the app submodule
        type: boolean
        default: true
      bump-tenant-manager:
        description: Bump the tenant manager submodule
        type: boolean
        default: true
  workflow_call:
    inputs:
      bump-app:
        description: Bump the app submodule
        type: boolean
        default: true
      bump-tenant-manager:
        description: Bump the tenant manager submodule
        type: boolean
        default: true


jobs:
  update_submodules:
    runs-on: ubuntu-latest
    steps:
      - name: Sanity check
        if: github.ref != 'refs/heads/main'
        run: |
          echo "This workflow updates only the main branch."
          exit 1
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          submodules: false
          persist-credentials: false
      - name: Generate a token
        id: generate_token
        uses: actions/create-github-app-token@v1
        with:
          app-id: ${{ vars.TENZIR_AUTOBUMPER_APP_ID }}
          private-key: ${{ secrets.TENZIR_AUTOBUMPER_APP_PRIVATE_KEY }}
          owner: ${{ github.repository_owner }}
      - uses: crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ secrets.TENZIR_BOT_GPG_SIGNING_KEY }}
          git_user_signingkey: true
          git_commit_gpgsign: true
      - name: Prepare git push
        env:
          GITHUB_APP_TOKEN: ${{ steps.generate_token.outputs.token }}
        run: |
          git config --global user.name 'tenzir-bot'
          git config --global user.email 'engineering@tenzir.com'
          git remote set-url origin https://x-access-token:$GITHUB_APP_TOKEN@github.com/tenzir/platform.git
      - name: Configure ssh-agent for app submodule
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.TENZIR_APP_DEPLOY_KEY }}
      - name: Update app submodule
        if: ${{ inputs.bump-app }}
        run: |
          git submodule update --init components/app
          current_sha=$(git -C components/app rev-parse HEAD)
          current_sha_short=$(git -C components/app rev-parse --short HEAD)
          upstream_sha=$(git -C components/app rev-parse origin/main)
          upstream_sha_short=$(git -C components/app rev-parse --short origin/main)

          if [ ${current_sha} != ${upstream_sha} ]; then
            # Collect all files in the `changelog` directory that
            # were added since the last bump.
            names=$(git -C components/app diff --name-status HEAD origin/main -- changelog/ | grep '^A' | awk '{print $2}')
            echo -e "Bump app component from ${current_sha_short} to ${upstream_sha_short}\n\nChanges:\n" > commitmsg
            for name in ${names}; do
              cat components/app/${name} >> commitmsg
            done
            git -C components/app checkout main
            git add components/app
            git commit -F commitmsg
            git push -u origin main:main
          fi
      - name: Configure ssh-agent for tenant-manager submodule
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.TENZIR_EVENT_HORIZON_DEPLOY_KEY }}
      - name: Update tenant-manager submodule
        if: ${{ inputs.bump-tenant-manager }}
        run: |
          git submodule update --init components/tenant-manager
          current_sha=$(git -C components/tenant-manager rev-parse main)
          current_sha_short=$(git -C components/app rev-parse --short HEAD)
          upstream_sha=$(git -C components/tenant-manager rev-parse origin/main)
          upstream_sha_short=$(git -C components/app rev-parse --short origin/main)

          if [ ${current_sha} != ${upstream_sha} ]; then
            names=$(git -C components/tenant-manager diff --name-status HEAD origin/main -- changelog/ | grep '^A' | awk '{print $2}')
            echo -e "Bump tenant-manager component from ${current_sha_short} to ${upstream_sha_short}\n\nChanges:\n" > commitmsg
            for name in ${names}; do
              cat components/tenant-manager/${name} >> commitmsg
            done
            git -C components/tenant-manager rebase origin/main
            git add components/tenant-manager
            git commit -F commitmsg
            git push -u origin main:main
          fi