workflow.yaml

name: Workflow for install-docker

on:
  push:
    branches:
      - master
  pull_request:
    branches:
      - master

jobs:
  validate:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    timeout-minutes: 10
    container: 
      image: rancher/dapper:v0.6.0
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Validate
        run: dapper validate

  test:
    permissions:
      contents: read
    needs: validate
    runs-on: ubuntu-latest
    timeout-minutes: 90
    if: github.event_name == 'pull_request'
    container: 
      image: rancher/dapper:v0.6.0
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Test
        run: dapper test

  upload-dev:
    permissions:
      contents: read
      id-token: write
    needs: validate
    runs-on: ubuntu-latest
    timeout-minutes: 10
    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Add commit to version file
        run: |
          echo "{\"version\": \"${{ github.sha }}\"}" > dist/VERSION
      - name: Retrieve Google auth from vault
        uses: rancher-eio/read-vault-secrets@main
        with:
          secrets: |
            secret/data/github/repo/${{ github.repository }}/google-auth/rancher/credentials token | GOOGLE_AUTH
      - name: Authenticate with Google Cloud
        uses: 'google-github-actions/auth@v2'
        with:
          credentials_json: '${{ env.GOOGLE_AUTH }}'
      - name: Upload to Google Cloud Storage
        uses: google-github-actions/upload-cloud-storage@v2
        with:
          path: dist/
          destination: releases.rancher.com/install-docker-dev
          parent: false
          predefinedAcl: publicRead
          headers: |-
            cache-control: public,no-cache,proxy-revalidate