Skip to content

Deploy

Deploy #258

Workflow file for this run

---
name: Deploy
on:
workflow_dispatch:
push:
tags:
- "*"
concurrency:
group: "${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}"
cancel-in-progress: true
jobs:
deployment:
permissions: write-all
environment: deploy
runs-on: ubuntu-latest
outputs:
version: ${{ steps.versioncheck.outputs.version }}
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- uses: actions/setup-java@v4
with:
java-version: 21
distribution: "temurin"
- name: Set up cache
uses: actions/cache@v4
with:
path: ~/.m2/repository
key: "${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}"
restore-keys: |
${{ runner.os }}-maven-
- name: Determine the version
run: |
echo "version=$(mvn -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)" >> $GITHUB_OUTPUT
id: versioncheck
- name: "Exit when workflow_dispatch is triggered, and the version does not contain SNAPSHOT in it's name"
run: |
echo "Only SNAPSHOT releases can be triggered with the workflow_dispatch"
exit 1
if: github.event_name == 'workflow_dispatch' && ( !endsWith(steps.versioncheck.outputs.version, '-SNAPSHOT'))
- name: Exit when a production build is triggered, and the github tag is not the same as the version in pom.xml
run: |
echo echo "Project version ${{ steps.versioncheck.outputs.version }} does not match git tag ${{ github.ref_name }}"
exit 1
if: github.event_name != 'workflow_dispatch' && steps.versioncheck.outputs.version != github.ref_name
- name: Set up JDK 21 for snapshots
uses: actions/setup-java@v4
with:
java-version: "21"
distribution: "temurin"
cache: "maven"
server-id: openconext-snapshots
server-username: MAVEN_USERNAME
server-password: MAVEN_PASSWORD
if: ( endsWith(steps.versioncheck.outputs.version, '-SNAPSHOT'))
- name: Set up JDK 21 for releases
uses: actions/setup-java@v4
with:
java-version: "21"
distribution: "temurin"
cache: "maven"
server-id: openconext-releases
server-username: MAVEN_USERNAME
server-password: MAVEN_PASSWORD
if: ${{!( endsWith(steps.versioncheck.outputs.version, '-SNAPSHOT')) }}
- name: Deploy with Maven
run: mvn --batch-mode deploy -DskipTests
env:
MAVEN_USERNAME: ${{ secrets.BUILD_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.BUILD_PASSWORD }}
- name: Upload the produced artefacts
uses: actions/upload-artifact@v4
with:
name: invitebuilds
path: |
client/build/
provisioning-mock/target/*.jar
server/target/*.jar
welcome/build/
retention-days: 1
- name: Build Changelog
id: changelog
uses: ardalanamini/auto-changelog@v4
with:
default-commit-type: New Features
github-token: ${{ github.token }}
if: github.event_name != 'workflow_dispatch'
- name: Create release
uses: actions/create-release@v1
id: create_release
with:
draft: false
prerelease: true
release_name: Release ${{ github.ref_name }}
tag_name: ${{ github.ref_name }}
github-token: ${{ github.token }}
body: |
${{ steps.changelog.outputs.changelog }}
env:
GITHUB_TOKEN: ${{ github.token }}
if: github.event_name != 'workflow_dispatch'
dockerbuild:
permissions: write-all
runs-on: ubuntu-latest
needs: deployment
strategy:
matrix:
include:
- image: ghcr.io/openconext/openconext-invite/inviteclient
app: client
architecture: "linux/amd64,linux/arm64"
- image: ghcr.io/openconext/openconext-invite/invitewelcome
app: welcome
architecture: "linux/amd64,linux/arm64"
- image: ghcr.io/openconext/openconext-invite/inviteprovisioningmock
app: provisioning-mock
architecture: "linux/amd64,linux/arm64v8"
- image: ghcr.io/openconext/openconext-invite/inviteserver
app: server
architecture: "linux/amd64,linux/arm64v8"
steps:
- uses: actions/checkout@v4
- name: Download the previous produced artefacts
uses: actions/download-artifact@v4
with:
name: invitebuilds
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Set docker labels and tags
id: meta
uses: docker/metadata-action@v5
with:
images: ${{ matrix.image }}
flavor: |
latest=false
tags: |
type=ref,event=tag
type=raw,event=tag,value=latest
type=raw,event=workflow_dispatch,value=snapshot
type=semver,pattern={{version}},value=${{ needs.deployment.outputs.version }}
type=sha
- name: Build and push the ${{ matrix.app }} image
uses: docker/build-push-action@v5
with:
context: ${{ matrix.app }}
file: ${{ matrix.app }}/docker/Dockerfile
platforms: "${{ matrix.architecture }}"
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}