workflow.yaml

name: Workflow for install-docker

on:
  push:
    branches:
      - master
  pull_request:
    branches:
      - master
  create:
    tags:
      - '*'

jobs:
  validate:
    permissions:
      contents: read
    runs-on: org-${{ github.repository_owner_id }}-{{ arch }}-k8s
    container: 
      image: rancher/dapper:v0.6.0
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Validate
        run: dapper validate

  test:
    permissions:
      contents: read
    runs-on: org-${{ github.repository_owner_id }}-{{ arch }}-k8s
    if: github.event_name == 'pull_request'
    container: 
      image: rancher/dapper:v0.6.0
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Test
        run: dapper test

  add-commit-to-version-file:
    permissions:
      contents: read
    runs-on: org-${{ github.repository_owner_id }}-{{ arch }}-k8s
    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Add commit to version file
        run: |
          echo "{\"version\": \"${{ github.sha }}\"}" > dist/VERSION"

  upload-dev:
    permissions:
      contents: read
      id-token: write
    runs-on: org-${{ github.repository_owner_id }}-{{ arch }}-k8s
    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Retrieve Google auth from vault
        uses: rancher-eio/read-vault-secrets@main
        with:
          secrets: |
            secret/data/github/repo/${{ github.repository }}/google-auth/rancher/credentials | GOOGLE_AUTH
      - name: Authenticate with Google Cloud
        uses: 'google-github-actions/auth@v2'
        with:
          credentials_json: '${{ env.GOOGLE_AUTH }}'
      - name: Upload to Google Cloud Storage
        uses: google-github-actions/upload-cloud-storage@v2
        with:
          path: dist/
          destination: releases.rancher.com/install-docker-dev
          predefinedAcl: publicRead
          headers: |-
            Cache-Control: public,no-cache,proxy-revalidate

  add-tag-to-version-file:
    permissions:
      contents: read
    runs-on: org-${{ github.repository_owner_id }}-{{ arch }}-k8s
    if: github.event_name == 'create' && github.ref_type == 'tag'
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Add tag to version file
        run: |
          echo "{\"version\": \"${{ github.ref_name }}\"}" > dist/VERSION"

  upload:
    permissions:
      contents: read
      id-token: write
    runs-on: org-${{ github.repository_owner_id }}-{{ arch }}-k8s
    if: github.event_name == 'create' && github.ref_type == 'tag'
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Retrieve Google auth from vault
        uses: rancher-eio/read-vault-secrets@main
        with:
          secrets: |
            secret/data/github/repo/${{ github.repository }}/google-auth/rancher/credentials | GOOGLE_AUTH
      - name: Authenticate with Google Cloud
        uses: 'google-github-actions/auth@v2'
        with:
          credentials_json: '${{ secrets.GOOGLE_AUTH }}'
      - name: Upload to Google Cloud Storage
        uses: google-github-actions/upload-cloud-storage@v2
        with:
          path: dist/
          destination: releases.rancher.com/install-docker
          predefinedAcl: publicRead
          headers: |-
            Cache-Control: public,no-cache,proxy-revalidate