chore(github-actions): update tailscale/github-action (v3.3.0 -> v4.1.3) #11
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| # yamllint disable rule:line-length | |
| name: publish | |
| on: | |
| pull_request: | |
| paths: | |
| - '.github/workflows/publish.yaml' | |
| - 'images/homelab-workspace/**' | |
| - 'templates/kubernetes/homelab-workspace/**' | |
| release: | |
| types: | |
| - published | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.event.release.tag_name || github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| image_name: ${{ secrets.CONTAINER_REGISTRY }}/${{ vars.CONTAINER_REGISTRY_PATH }}/coder-workspace | |
| image_cache_name: ${{ secrets.CONTAINER_REGISTRY }}/${{ vars.CONTAINER_REGISTRY_CACHE_PATH }}/coder-workspace | |
| image_path: images/homelab-workspace | |
| template_path: templates/kubernetes/homelab-workspace | |
| publish_mode: ${{ github.event_name == 'release' && 'release' || 'test' }} | |
| source_ref: ${{ github.event_name == 'release' && github.event.release.tag_name || github.head_ref || github.ref_name }} | |
| source_sha: ${{ github.event_name == 'release' && github.event.release.tag_name || github.event.pull_request.head.sha || github.sha }} | |
| jobs: | |
| publish-image: | |
| permissions: | |
| contents: read | |
| packages: write | |
| uses: ppat/github-workflows/.github/workflows/build-docker-image.yaml@5a96ced8ceefd58062f6b91ee9d6f3a31cd06e1c # v6.0.0 (unmerged PR #615 -- repoint to the v6.0.0 tag before merge) | |
| with: | |
| image_context_path: images/homelab-workspace | |
| label_title: "Homelab Workspace" | |
| label_description: "Homelab workspace image" | |
| platforms: linux/amd64,linux/arm64 | |
| private_registry_repository: ${{ vars.CONTAINER_REGISTRY_PATH }}/coder-workspace | |
| private_registry_build_cache: ${{ vars.CONTAINER_REGISTRY_CACHE_PATH }}/coder-workspace | |
| git_ref: ${{ github.event_name == 'release' && github.event.release.tag_name || github.head_ref || github.ref_name }} | |
| ghcr_repository: ${{ github.event_name == 'release' && 'ppat/coder-workspace' || '' }} | |
| timeout_minutes: 180 | |
| secrets: | |
| private_registry_username: ${{ secrets.CONTAINER_REGISTRY_USERNAME }} | |
| private_registry_token: ${{ secrets.CONTAINER_REGISTRY_PASSWORD }} | |
| private_registry: ${{ secrets.CONTAINER_REGISTRY }} | |
| tailscale_oauth_client_id: ${{ secrets.TAILSCALE_OAUTH_CLIENT_ID }} | |
| tailscale_oauth_secret: ${{ secrets.TAILSCALE_OAUTH_SECRET }} | |
| build_secrets: | | |
| FETCH_GH_TOKEN=${{ secrets.GITHUB_TOKEN }} | |
| publish-template: | |
| needs: [publish-image] | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| fetch-depth: 1 | |
| persist-credentials: false | |
| ref: ${{ env.source_ref }} | |
| - name: Tailscale Connect | |
| uses: tailscale/github-action@780049a30b6ff5c378a9e7b389d15ece7a204888 # v4.1.3 | |
| with: | |
| oauth-client-id: ${{ secrets.TAILSCALE_OAUTH_CLIENT_ID }} | |
| oauth-secret: ${{ secrets.TAILSCALE_OAUTH_SECRET }} | |
| tags: tag:github-action-ci-runner | |
| # renovate: datasource=github-releases depName=tailscale/tailscale | |
| version: "1.102.3" | |
| - name: Login to Coder | |
| id: login | |
| env: | |
| CODER_URL: "${{ secrets.CODER_URL }}" | |
| shell: bash | |
| # yamllint disable-line rule:indentation | |
| run: | | |
| while ! curl -fsSL "${CODER_URL}" > /dev/null; do | |
| echo "Waiting for coder service to be ready... sleep 5s!" | |
| sleep 5 | |
| done | |
| echo "Coder service is accepting connections..." | |
| echo | |
| echo "Generating authentication token..." | |
| export CODER_SESSION_TOKEN | |
| CODER_SESSION_TOKEN=$(curl -X POST "${CODER_URL}/api/v2/users/login" \ | |
| -H 'Content-Type: application/json' \ | |
| -H 'Accept: application/json' \ | |
| --data '{"email": "'${{ secrets.CODER_EMAIL }}'", "password": "'${{ secrets.CODER_PASSWORD }}'"}' \ | |
| | jq -r .session_token) | |
| echo "::add-mask::${CODER_SESSION_TOKEN}" | |
| if [[ -z "${CODER_SESSION_TOKEN}" || "${CODER_SESSION_TOKEN}" = "null" ]]; then | |
| echo "Error generating coder authentication token." | |
| exit 1 | |
| fi | |
| echo "Authentication token generated." | |
| echo | |
| echo "Determining coder version..." | |
| export CODER_VERSION | |
| CODER_VERSION=$(curl -fsSL "${CODER_URL}/api/v2/buildinfo" | jq -r .version | cut -d'+' -f1 | cut -d'v' -f2) | |
| echo "Installing coder CLI..." | |
| curl -fsSL https://coder.com/install.sh | sh -s -- --method standalone --version "${CODER_VERSION}" | |
| echo | |
| echo "Logging into Coder..." | |
| coder login --use-token-as-session "${CODER_URL}" | |
| - name: Publish template | |
| id: publish-template | |
| env: | |
| TEMPLATE_DIR: ${{ env.template_path }} | |
| TEMPLATE_VERSION: ${{ env.source_sha }} | |
| WORKSPACE_IMAGE: "${{ secrets.CONTAINER_REGISTRY }}/${{ vars.CONTAINER_REGISTRY_PATH }}/coder-workspace:${{ needs.publish-image.outputs.image_tag }}" | |
| PUBLISH_MODE: ${{ env.publish_mode }} | |
| shell: bash | |
| # yamllint disable-line rule:indentation | |
| run: | | |
| if [[ "${PUBLISH_MODE}" == "release" ]]; then | |
| export TEMPLATE_NAME | |
| TEMPLATE_NAME="$(echo "${TEMPLATE_DIR}" | cut -d/ -f3)" | |
| export RELEASE_MSG="[Release Notes](https://github.com/${{ github.repository }}/releases/tag/${TEMPLATE_VERSION})" | |
| export TEST_MODE=false | |
| else | |
| export TEMPLATE_NAME | |
| TEMPLATE_NAME="$(echo "${TEMPLATE_DIR}" | cut -d/ -f3)-test" | |
| export RELEASE_MSG="[Changes](https://github.com/${{ github.repository }}/commit/${TEMPLATE_VERSION})" | |
| export TEST_MODE=true | |
| fi | |
| echo "Publishing template ${TEMPLATE_DIR} as ${TEMPLATE_NAME}..." | |
| set -x | |
| coder template push \ | |
| --directory "${TEMPLATE_DIR}" \ | |
| --var "workspace_image=${WORKSPACE_IMAGE}" \ | |
| --var test_mode=${TEST_MODE} \ | |
| --name "${TEMPLATE_VERSION}" \ | |
| --message "${RELEASE_MSG}" \ | |
| --yes \ | |
| "${TEMPLATE_NAME}" | |
| set +x | |
| echo | |
| echo "Confirming template has been published..." | |
| coder templates list --output json > /tmp/templates.json | |
| export SELECTED_TEMPLATE | |
| SELECTED_TEMPLATE=$(cat /tmp/templates.json | jq -r '.[] | select(.Template.name == "'"${TEMPLATE_NAME}"'")') | |
| if [[ -z $SELECTED_TEMPLATE ]]; then | |
| echo "Could not find any template published as $TEMPLATE_NAME." | |
| exit 1 | |
| fi | |
| echo "Template has been published successfully." | |
| - name: Tailscale Disconnect | |
| if: success() || failure() | |
| run: sudo -E tailscale logout |