upcloud-csi/.github/workflows/release-app.yaml at ab4209525e3e7b666632083973026664ba886448 · upcloud-tools/upcloud-csi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
name: Build and Release

on:
  push:
    branches:
      - main
    paths:
      - deploy/helm/Chart.yaml
  workflow_dispatch:
    inputs:
      skip-e2e:
        description: Skip e2e tests
        type: boolean
        default: false

concurrency:
  group: ${{ github.workflow }}
  cancel-in-progress: false

permissions:
  contents: read
  packages: read

jobs:
  detect:
    timeout-minutes: 5
    runs-on: ubuntu-24.04
    outputs:
      skip: ${{ steps.detect.outputs.app_release_exists }}
      app_version: ${{ steps.detect.outputs.app_version }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          submodules: true

      - id: detect
        uses: ./.github/actions/detect-versions

  build-image:
    needs: detect
    if: ${{ needs.detect.outputs.skip == 'false' }}
    uses: ./.github/workflows/_reusable-build.yaml
    with:
      tags: ${{ github.sha }}
    secrets: inherit
    permissions:
      contents: read
      packages: write

  e2e:
    needs: build-image
    if: needs.detect.outputs.skip == 'false' && !inputs['skip-e2e']
    uses: ./.github/workflows/_reusable-e2e.yaml
    with:
      image_tag: ${{ github.sha }}
    secrets: inherit

  release:
    needs: [detect, build-image, e2e]
    if: >-
      always() &&
      needs.detect.outputs.skip == 'false' &&
      needs.build-image.result == 'success' &&
      (needs.e2e.result == 'success' || needs.e2e.result == 'skipped')
    uses: upcloud-tools/gha-actions/.github/workflows/release-container.yaml@10904798a65e26c2fa67df45717698aec8b9e5ef
    with:
      app_version: ${{ needs.detect.outputs.app_version }}
    secrets: inherit
    permissions:
      contents: write
      packages: write
      id-token: write
      attestations: write