FilesExpand file tree

master

/

build.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

145 lines (129 loc) · 4.25 KB

master

/

build.yml

Copy path

Top

File metadata and controls

• Code
• Blame

145 lines (129 loc) · 4.25 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

name: Build

on:

push:

branches:

- master

- develop

pull_request:

types: [opened, synchronize, reopened]

jobs:

build-docker-bucket-api:

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@v3

- run: cd src/bucket-api && docker build . -t bucket-api:$(date +%s)

build-docker-pubsub-api:

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@v3

- run: cd src/pubsub-api && docker build . -t pubsub-api:$(date +%s)

terraform:

strategy:

matrix:

path: [src/tf/autopilot-cluster, src/tf/standard-cluster, src/tf/workload-identity]

runs-on: ubuntu-latest

steps:

- uses: actions/checkout@v3

- name: HashiCorp - Setup Terraform

uses: hashicorp/setup-terraform@v2.0.3

- run: terraform fmt -check

id: fmt

working-directory: ${{ matrix.path }}

- run: terraform init

working-directory: ${{ matrix.path }}

id: init

- run: terraform validate -no-color

working-directory: ${{ matrix.path }}

id: validate

- name: 'Authenticate to Google Cloud'

uses: 'google-github-actions/auth@v1'

with:

credentials_json: '${{ secrets.SA }}'

- name: Replace project-id

uses: jacobtomlinson/gha-find-replace@v2

with:

find: "<dev-stage-project-id>"

replace: ${{ secrets.PROJECT_ID }}

include: "src/tf/**"

regex: false

- name: Terraform Plan

id: plan

if: matrix.path != 'src/tf/workload-identity'

run: terraform plan -var-file=vars/dev.tfvars -no-color

working-directory: ${{ matrix.path }}

- uses: actions/github-script@v6

if: github.event_name == 'pull_request'

with:

github-token: ${{ secrets.GITHUB_TOKEN }}

script: |

const output = `#### Working Directory: ${{ matrix.path }}

#### Terraform Format and Style \`${{ steps.fmt.outcome }}\`

#### Terraform Initialization \`${{ steps.init.outcome }}\`

#### Terraform Validation \`${{ steps.validate.outcome }}\`

<details><summary>Validation Output</summary>

\`\`\`\n

${{ steps.validate.outputs.stdout }}

\`\`\`

</details>

#### Terraform Plan \`${{ steps.plan.outcome }}\`

<details><summary>Show Plan</summary>

\`\`\`\n

${{ steps.plan.outputs.stdout }}

\`\`\`

</details>`;

github.rest.issues.createComment({

issue_number: context.issue.number,

owner: context.repo.owner,

repo: context.repo.repo,

body: output

});

sonarqube:

runs-on: ubuntu-latest

env:

GCS_BUCKET_NAME: "${{ secrets.GOOGLE_CLOUD_PROJECT }}-bucket-api"

steps:

- uses: actions/checkout@v3

with:

fetch-depth: 0

- name: Set up JDK 11

uses: actions/setup-java@v1

with:

java-version: 11

- name: Set up Python 3.9

uses: actions/setup-python@v4

with:

python-version: 3.9

cache: 'pip'

- run: |

python -m pip install --upgrade pip

pip install -r requirements.txt

pip install --upgrade google-cloud-storage google-cloud-pubsub

- name: 'Authenticate to Google Cloud'

uses: 'google-github-actions/auth@v1'

with:

credentials_json: '${{ secrets.SA }}'

- run: pytest

- name: Publish Test Results

uses: EnricoMi/publish-unit-test-result-action/composite@v2

if: always()

with:

junit_files: "build/test-result.xml"

- name: Cache SonarCloud packages

uses: actions/cache@v3

with:

path: ~/.sonar/cache

key: ${{ runner.os }}-sonar

restore-keys: ${{ runner.os }}-sonar

- name: Cache Gradle packages

uses: actions/cache@v3

with:

path: |

~/.gradle/caches

~/.gradle/wrapper

key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle', '**/gradle-wrapper.properties') }}

restore-keys: ${{ runner.os }}-gradle

- name: Build and analyze

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

run: ./gradlew build sonarqube --info